{"report_id":"e20efe09-f8e2-4b18-a89a-5b3c0a60bed4","version":0,"status":"done","tags":[],"date":"2026-09-07T20:46:18Z","url":{"schema":"http","addr":"faxuzeu.com/","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"faxuzeu.com/","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"title":"Home - faxuzeu","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-08T19:34:10.566054Z","times_seen":18351576,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"faxuzeu.com/","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-12T20:46:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"faxuzeu.com","ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"domain_registered":"2026-05-14","domain_rank":0,"first_seen":"2026-09-07T20:08:14.628275Z","last_seen":"2026-09-07T20:08:14.628275Z","alert_count":215,"request_count":43,"received_data":2324696,"sent_data":22448,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Sassy Social Share:3.3.79","description":"Sassy Social Share allows your website visitors to share your content over Facebook, Twitter, Google, Linkedin, Whatsapp, Tumblr, Pinterest, Reddit, Gab, Gettr and over 110 more social sharing and bookmarking services.","website":"https://wordpress.org/plugins/sassy-social-share","common_platform_enumeration":"","icon":"","categories":["Widgets","WordPress plugins"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup:1.1.0","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"All in One SEO:5.0.0.1","description":"All in One SEO optimizes a WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"All in One SEO Pack:5.0.0.1","description":"All in One SEO plugin optimizes WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":6,"received_data":222534,"sent_data":3405,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":19221,"sent_data":635,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/plugins/gdpr-cookie-compliance/dist/scripts/main.js?ver=5.1.0","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3bbeab2b5b91b6e800a8bad47b4d0c45","sha1":"263784b67743320ab9e44e17e3f43542b549dbd8","sha256":"6638ae93fa21d591dad6821bd7f47c09bfabeda0087948812a1c0fae59c3cb75","sha512":"f44c56dec0ea5aaeaa6dc113ed2c3abd87391022309cde4e68b208741e113100c885c1096fab1ec7f0e89d639640f2aae15e229ed10024e2c4201ae15c84df24","ssdeep":"1536:QH0L52ZkB/z13X+1b3SU8VrkqmQYTmbPiJmYrwV+GkmQY1mbv:QUL4GFbjVrFiJx","tlshash":"59636338b924e1e687fe009570bbd60b632146349ca9acf9306994a42cdcfd505dbb7f","size":72127,"data":"","first_seen":"2026-06-27T21:12:10.817738Z","last_seen":"2026-09-08T18:45:21.401302Z","times_seen":643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/moove_gdpr_frontend-js-after","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"91f4df5915afee348c73e5dce5ff736b","sha1":"d859ce5e198cf63b8c65b3cbc9053d0ed1b04463","sha256":"7be62cba58a562271710e2bc55277d8fbbd78873708cb0f92c99a13cfbf6caf8","sha512":"caaefc3e92da4ed0e992d1126b0f4a6e76bfef1f72d77e8e775cb402ce27878cf7d3973f95f379e2fc74735c8f7d4969565b2ecc441bf7914537c8ba3b69371b","ssdeep":"","tlshash":"1b31db20d1300bd64bee13f42b9fd52a925841e6c9f88cf39354a428a8f2fa511dc377","size":1771,"data":"","first_seen":"2026-08-29T14:17:01.766947Z","last_seen":"2026-09-07T20:46:21.953728Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/themes/one-newspaper/assets/lib/magnific-popup/magnific-popup.min.js?ver=1.1.0","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","size":20219,"data":"","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-09-08T18:55:22.726088Z","times_seen":25588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/themes/one-newspaper/assets/js/theme.js?ver=1.0.5","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"877255e8626343dea493638e006a880b","sha1":"bbb90d43fadd789e28e078fa6c23967f5143c1ab","sha256":"b596f238ede3b9625b514497e8eebdf399f0f8aa50d86b447e2e39283924827c","sha512":"350f700fef8541404feddedce8f730fc68f5af84582ebaaa97018a7b5a3d0bd2deaf1cb6870ff7c4b1300ec23477e02f45d07f061860d5455e57433e1b72b5bc","ssdeep":"768:8c1UB4V3ZFV91HucQ7iwpazcXViv6kaP7zBJkEh:8qV3PVub7BpaAXVk6kQ7zBJk6","tlshash":"3e4382092a8425b240b7b37edd2fe002fb23526be116551a3dbd55e80fb944892d4ffe","size":56797,"data":"","first_seen":"2026-09-07T20:08:19.268673Z","last_seen":"2026-09-07T20:46:21.879446Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-08T19:36:02.499723Z","times_seen":51520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/themes/one-newspaper/assets/lib/slick/slick.min.js?ver=1.8.1","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"777da4aaf5b960636dec0fd4e50ba489","sha1":"9a94038ccae90e6d2a0f9cb61f79ae7c70320287","sha256":"e1a52c0a06fa9f65e015b02e7ec463fd621211a9d2ae44b6660597900e927fbb","sha512":"9b810776ff98b94fe765b192187064d2ce4921fb60baf4c797c3302d332f7e55556e54eb070cc8917f61aa74191539a294457aa18d54f5e85527652695c6f848","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYK:EPrYdlNixEePiYK","tlshash":"6213a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42864,"data":"","first_seen":"2023-03-07T01:06:24Z","last_seen":"2026-09-08T17:53:21.200625Z","times_seen":15186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/themes/one-newspaper/assets/lib/jquery-cookie/jquery-cookie.js?ver=1.4.1","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"185607df1287788a379739a0fbf95fae","sha1":"e3e4af801a9065a63a2a231f00dbae344ed0af68","sha256":"96dccaa929e6a14f0f439d8597777a97b22720516942d36fc625ae11e85c3ada","sha512":"40b7ded8a4b26a55a6252bd8e9466336ffef6e0ade8c6dde66092c724543cacb2ce581f408cd67e64f521aef528dac8f85625e861973ac473774083e286db321","ssdeep":"","tlshash":"d1614394308f365e0adb2341a67b4469ee3cfa72111401dc619969f82c70c269babd6e","size":3252,"data":"","first_seen":"2023-03-07T01:03:32Z","last_seen":"2026-09-07T20:46:21.945232Z","times_seen":1379,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-08T19:33:25.561929Z","times_seen":1050548,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-08T19:33:25.539135Z","times_seen":961077,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2f47b875162ac3a69fb2f3544e67ad7","sha1":"7550acbd617bc317225ef5a692ce7e1eb5b37af6","sha256":"a44596d37d099c6be969edac965a4d059a24565c051de7f781f25f72a48e4707","sha512":"251a3f358e7b4388465f8e4ac8a8911ccf5707d18c02d562b76ea7725080403d8bc709d874fc4e0ec0149ef9401ca55df62ba87a0c858f66c0ff8f1e50968c2d","ssdeep":"","tlshash":"5581a659eb7938df33fa01f3653a4d4beb614436e784d038c9ae631428b1893c375a1a","size":4039,"data":"","first_seen":"2026-09-07T20:08:19.280351Z","last_seen":"2026-09-07T20:46:21.954328Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/themes/one-newspaper/assets/js/navigation.js?ver=1.0.5","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a393b21e28a596a1aa908f8fa4dd361","sha1":"eb294e1496acbd48db9943a79f9842020b0e3d6e","sha256":"89359c81e9bc573f04663f147682648f7b3b06ddb5a5846eca500eda9ef97f4b","sha512":"5e2e00c4e4adda176605fe9b20fa10c24cef525ef5c4aaeff9ea5533822fb7001d2da5cd370b4e9aaf96387ba3f4281df58e062d06462a1e3c6bc6b12f9ba81b","ssdeep":"192:isYQaunL+f90jOeLYnuR3V7JXkj2CVENMBLB0o6BJMmdt/fmq12z0c968kAY4dVL:isYrYi10jBLYn87JXkj2WkBu82wi68kC","tlshash":"212263d1325d337b46fe33b67379a1c5ba7ec0799401627a789d880d1b60d5083baee8","size":10658,"data":"","first_seen":"2026-09-07T20:08:19.27434Z","last_seen":"2026-09-07T20:46:21.851856Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/one-newspaper-theme-js-extra","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e9b1cb711ca205f5e7e7f5ee246ce61","sha1":"e54baea1b396bddec5e41ace060b43eedc1ea42b","sha256":"6ea65b4db08b73c33c16f3439a5ad7714d53b06f5bca98fa52c53bb40b4d79a0","sha512":"c7090abc3a3ad29b5576662bc0f85aa8942a26b435c2649fbc6c4027289ad2a60f5b1f9c6df59e0e104b60b1b3c9a957905586486d7fac4840236c7a64c0d9a1","ssdeep":"","tlshash":"e521c026ca941ebd81a2ceb4942d7fb3943e2833c294e402fdcdecc80177016844c607","size":1306,"data":"","first_seen":"2026-09-07T20:08:19.282572Z","last_seen":"2026-09-07T20:46:21.955133Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","size":5520,"data":"","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-09-08T19:31:32.587441Z","times_seen":209315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/plugins/the-post-grid/assets/js/rttpg.js?ver=7.9.3","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a43d4d0d35bb370a62c29c9621133817","sha1":"d1925b056a9f33a46948c30f2bfe9b283ce114b9","sha256":"360aab887c4a566876394c6c1f8b28e5fe743f7c6829fb94d9453f7cf249f7f9","sha512":"e9eeed65394ab9ad5e8f93643c096708b2345c188e1c896b088e5fae3a954c42e11cd5ed520a7a8cd1c63a1ecff7a0819e9a47780ca8cee57683e2f22d8c01c7","ssdeep":"192:E1p3Rs/dMD9U4YRNBMyCTSfkbtc9tYuT3c5LzLkTLZLMysM9boviT/iNsi4ijLSa:bbCqvYuT3Eva1B9byiT/iyi4iz","tlshash":"7d42335879f31560a437702fdb5fa0483a70d077c449ee113e0ca2d49fe15687a7aaae","size":12527,"data":"","first_seen":"2025-09-12T06:57:33.173413Z","last_seen":"2026-09-07T20:46:21.865432Z","times_seen":349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/rt-tpg-js-after","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b25f956a009295336a53638d9c9f4714","sha1":"ece34f554b8a3e4ced4278f43270fbef1e5adfb5","sha256":"c4ce3c2a9c3a453888df37b984ea976c4531607b6ebcd98209dbfaada0e1e077","sha512":"53a89e8256312870e19b87a246e7373ce6729d29672d2f6d87f4cd78a8db9b655127ed5467df59bc563beb27e24a440c7d814abdcf6c4728bf5ce81a2c12ef7d","ssdeep":"","tlshash":"0f215e66f72c3a11a8767a38e02768d60b3e40a2c6e50d95fc814680ac6200a2ca380d","size":1241,"data":"","first_seen":"2026-09-07T20:08:19.276875Z","last_seen":"2026-09-07T20:46:21.955918Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/heateor_sss_sharing_js-js-before","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c2020e401da4cca9446767fee2b5796","sha1":"dffae1145b512f070dd58c1e105dfdad4fef67ef","sha256":"eaf3ec4fdbe24a5269f6a5463fdc75cb9e9700ca508daaf34ed29f9903a7ecf9","sha512":"871875f239cf874e3f3f8217176c299c237d325ba58fab25e93403b9cf066ed70fa6eea01969182a45c08b2d02b98411d766ace1593e3fde19d8ac4bc78521cc","ssdeep":"","tlshash":"b421cc1ed1322107c19fedbb4107a86dde52a97acc2ac95c985ac30c782010f4c6f271","size":1147,"data":"","first_seen":"2026-09-07T20:08:19.281499Z","last_seen":"2026-09-07T20:46:21.95659Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/plugins/sassy-social-share/public/js/sassy-social-share-public.js?ver=3.3.79","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"15a28232bbde9e548f275d6e52385bd6","sha1":"21d5a9ab7e68d43e5fe8f151865e421674bddf37","sha256":"a81a198375e5fec746950ead41c050cc583a9b663cb4aeb40a6cbb11098b555d","sha512":"12aa201cea075846d266536aa222d64d4088b851d87f55dac5e611b77add6826c8ebc6e82650fcd1a9e88a05a0072dedd195719c5f64cd4580a0acd8aee05d92","ssdeep":"3072:hORGE+lj7K8kakeBtXPzSSeFEsqoIaw134:hOU/hPzxeFEsqoIZx4","tlshash":"f3e33aeaf350915c759f8f9cfb36d288661f60afe59582dcf05d97382261ac4f842c28","size":143183,"data":"","first_seen":"2025-09-16T05:06:40.262Z","last_seen":"2026-09-08T19:25:00.205946Z","times_seen":3679,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/moove_gdpr_frontend-js-extra","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"df274d8ee5ee6796e9cc6db2d753aeeb","sha1":"5a3aa1c0ea70dcb64ed6b1991d880a83d9181e0b","sha256":"7c5681435c5a0aba891cbf72ef2657dfd2609c9f5d2b780313415a3abfea1b1c","sha512":"2bd50112870a48b6560464d98fc6742d43f1a45a820c7e0fa68c052141cff7d533c7be6d13d97d8805e5d6c4a3cc385e445e71269b0c09ea2251564dba4d2315","ssdeep":"","tlshash":"7341d0b6f458ddc7c3f74dbc20359d3b00a80932c4e16db496aec91d05a85f5b788102","size":1909,"data":"","first_seen":"2026-09-07T20:08:19.278033Z","last_seen":"2026-09-07T20:46:21.960248Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://faxuzeu.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/themes/one-newspaper/assets/js/navigation.js?ver=1.0.5","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.650Z","timestamp":1788813940650,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/themes/one-newspaper/assets/js/navigation.js?ver=1.0.5 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 01 Sep 2026 11:50:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96bc05-29a2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10658,"size_decoded":3067,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"3a393b21e28a596a1aa908f8fa4dd361","sha1":"eb294e1496acbd48db9943a79f9842020b0e3d6e","sha256":"89359c81e9bc573f04663f147682648f7b3b06ddb5a5846eca500eda9ef97f4b","sha512":"5e2e00c4e4adda176605fe9b20fa10c24cef525ef5c4aaeff9ea5533822fb7001d2da5cd370b4e9aaf96387ba3f4281df58e062d06462a1e3c6bc6b12f9ba81b","ssdeep":"192:isYQaunL+f90jOeLYnuR3V7JXkj2CVENMBLB0o6BJMmdt/fmq12z0c968kAY4dVL:isYrYi10jBLYn87JXkj2WkBu82wi68kC","tlshash":"212263d1325d337b46fe33b67379a1c5ba7ec0799401627a789d880d1b60d5083baee8","first_seen":"2026-09-07T20:08:19.27434Z","last_seen":"2026-09-07T20:46:21.851856Z","times_seen":2,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/themes/one-newspaper/assets/lib/fontawesome/webfonts/fa-solid-900.woff2","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.900Z","timestamp":1788813940900,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/themes/one-newspaper/assets/lib/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/wp-content/themes/one-newspaper/assets/lib/fontawesome/css/all.min.css?ver=6.5.1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 156496\r\nlast-modified: Tue, 01 Sep 2026 11:50:29 GMT\r\netag: \"6a96bc05-26350\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":156496,"size_decoded":156799,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-09-08T19:35:21.656443Z","times_seen":51870,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/leaguespartan/v15/kJEqBuEW6A0lliaV_m88ja5TwvZwLZk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.902Z","timestamp":1788813940902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/leaguespartan/v15/kJEqBuEW6A0lliaV_m88ja5TwvZwLZk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://faxuzeu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24020\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 08:29:32 GMT\r\nexpires: Sat, 04 Sep 2027 08:29:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:50 GMT\r\ncontent-type: font/woff2\r\nage: 303368\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24020,"size_decoded":24833,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24020, version 1.0","md5":"0a37cd9b73652bb8add3e363debce9e3","sha1":"6ff394aefd844daedf9b4649cd8d1a00d5b04b3e","sha256":"7d843a9fa4dcd050da68405d9093f8ab8298f8f60a97155e85ab84c9ed3040e2","sha512":"3c54499f61fe2ee980cab79941b0aa9749a58dad2b23dc3add0a8485c4be2332d734e6063c2a593aa8af5b1f913a3a1df1ec3af64ff3ba756f76c7acfa16db76","ssdeep":"384:rb7E+iGSRfRvtOSqg7EHZ/QX+X+yQKfVzGfr072v/Y3iz41OVlgbq/y:rX9izRvtVJ7iQi+yDfIA7qY3iz4IzgbN","tlshash":"cfb2e1456e018842a70d36f5fc6e29a4e2f13ee6bfd15ba84825334be60c09def14c65","first_seen":"2025-09-15T00:02:50.893194Z","last_seen":"2026-09-08T11:05:20.317927Z","times_seen":1439,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":44,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.904Z","timestamp":1788813940904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://faxuzeu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 468853\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-08T19:34:16.515422Z","times_seen":279095,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":23,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/uploads/2026/05/logo.jpg","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:41.061Z","timestamp":1788813941061,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/logo.jpg HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6252\r\nlast-modified: Tue, 01 Sep 2026 11:50:52 GMT\r\netag: \"6a96bc1c-186c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6252,"size_decoded":6552,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 128x128, components 3","md5":"37610b4d861da2fdde2dccff88f7e14b","sha1":"aaab8854002047082d4a5e5ef961f600b080e27e","sha256":"bf16ec047f827fa7d1ace73c0cafd3b0ea6dc7e444a981b623f79f32939bdd28","sha512":"5deb3d7fc57e4ec251e437e02bbea5529ba4eafc9f75d0050f683831d8298b1ab3b8cbe54ae1561e6611b94cd5314b01d6ae43675a742a8cc300ed933922684e","ssdeep":"192:v9HDXMsOMWibGcRa1fLsG2mraC3Fqj1Nr:v9HnMx1jUj7","tlshash":"a6d17c79671202c4faae21f0a1793c4ed6d18893b225338b5fd841d45d85eb0cc1bf9a","first_seen":"2026-09-07T20:08:19.242129Z","last_seen":"2026-09-07T20:46:21.85755Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/themes/one-newspaper/assets/css/builder.css?ver=1.0.5","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.632Z","timestamp":1788813940632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/themes/one-newspaper/assets/css/builder.css?ver=1.0.5 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Sep 2026 11:50:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96bc05-47ae\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18350,"size_decoded":3189,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"221b0111f69136de318efbd8bed87559","sha1":"3694bb12db4aa6527ad171296e15b0c1bd5892dc","sha256":"39f6568e837b32311267bcd0e208a07af1c5ef0fc6eb839de5953c834aba4de7","sha512":"3c017bdee6cbafc58d18cbe814952325b144d41979863f5a16ab1c2f50ba6468570e8111818088d0e2f39d275475affa10e5c5a95c2f3390cb03295529161af1","ssdeep":"192:RwArNZTodaOnJ7H/rX7T2I55SsrPzVPrnPurU/2IrUbV0SV5S/imr1zQxw+dzkqe:Rw2JmhK8","tlshash":"b682f23a8752294816b3aa38dfe20964d37d8453df0540a939ed93270fb7e4f4176e8e","first_seen":"2026-09-07T20:08:19.266747Z","last_seen":"2026-09-07T20:46:21.8588Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/plugins/the-post-grid/assets/js/rttpg.js?ver=7.9.3","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.654Z","timestamp":1788813940654,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/plugins/the-post-grid/assets/js/rttpg.js?ver=7.9.3 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 01 Sep 2026 11:50:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96bc16-30ef\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12527,"size_decoded":3220,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"a43d4d0d35bb370a62c29c9621133817","sha1":"d1925b056a9f33a46948c30f2bfe9b283ce114b9","sha256":"360aab887c4a566876394c6c1f8b28e5fe743f7c6829fb94d9453f7cf249f7f9","sha512":"e9eeed65394ab9ad5e8f93643c096708b2345c188e1c896b088e5fae3a954c42e11cd5ed520a7a8cd1c63a1ecff7a0819e9a47780ca8cee57683e2f22d8c01c7","ssdeep":"192:E1p3Rs/dMD9U4YRNBMyCTSfkbtc9tYuT3c5LzLkTLZLMysM9boviT/iNsi4ijLSa:bbCqvYuT3Eva1B9byiT/iyi4iz","tlshash":"7d42335879f31560a437702fdb5fa0483a70d077c449ee113e0ca2d49fe15687a7aaae","first_seen":"2025-09-12T06:57:33.173413Z","last_seen":"2026-09-07T20:46:21.865432Z","times_seen":349,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/plugins/the-post-grid/assets/vendor/flaticon/flaticon_the_post_grid.ttf?dd949169929eab44f4d2133b01c9e438","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.906Z","timestamp":1788813940906,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/plugins/the-post-grid/assets/vendor/flaticon/flaticon_the_post_grid.ttf?dd949169929eab44f4d2133b01c9e438 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/wp-content/plugins/the-post-grid/assets/vendor/flaticon/flaticon_the_post_grid.css?ver=7.9.3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 5620\r\nlast-modified: Tue, 01 Sep 2026 11:50:46 GMT\r\netag: \"6a96bc16-15f4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5620,"size_decoded":5934,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 16 names, Macintosh, type 1 string, flaticon_the_post_gridRegularflaticon_the_post_gridflaticon_the_post_gridVersion 1.0flaticon_the","md5":"24dd49733bbd63b856a424645e6bff3e","sha1":"315e647dba34dbb16936d4ad3ea5bc94215ff256","sha256":"b947eadca7dbe15b357c28944e3c015410b9d744eeb609adc8ee194f42d40b4d","sha512":"fcae7ce4592d73c6547d6c247edfa6f98215a5b1bcf3950f262f9123b4a8f32ec0b71a76e07a027a34a5b87d5d6495591c4fd78994a2ea6ecd46e6065c2f1abb","ssdeep":"96:zY+IIXVDHnTdUfeYIC9ceutrs1of2D8M4H5oRerErDfJt:E+pFznTdUfRIKmps19DR03ErVt","tlshash":"89c12b36a3148f37f153173bdc79572ad320a8842891bb13615c4a8eed426ec6ee0b8d","first_seen":"2025-08-25T04:35:51.975952Z","last_seen":"2026-09-07T20:46:21.870728Z","times_seen":73,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/leaguespartan/v15/kJEqBuEW6A0lliaV_m88ja5TwvZwLZk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.911Z","timestamp":1788813940911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/leaguespartan/v15/kJEqBuEW6A0lliaV_m88ja5TwvZwLZk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://faxuzeu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24020\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 08:29:32 GMT\r\nexpires: Sat, 04 Sep 2027 08:29:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:50 GMT\r\ncontent-type: font/woff2\r\nage: 303368\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24020,"size_decoded":24833,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24020, version 1.0","md5":"0a37cd9b73652bb8add3e363debce9e3","sha1":"6ff394aefd844daedf9b4649cd8d1a00d5b04b3e","sha256":"7d843a9fa4dcd050da68405d9093f8ab8298f8f60a97155e85ab84c9ed3040e2","sha512":"3c54499f61fe2ee980cab79941b0aa9749a58dad2b23dc3add0a8485c4be2332d734e6063c2a593aa8af5b1f913a3a1df1ec3af64ff3ba756f76c7acfa16db76","ssdeep":"384:rb7E+iGSRfRvtOSqg7EHZ/QX+X+yQKfVzGfr072v/Y3iz41OVlgbq/y:rX9izRvtVJ7iQi+yDfIA7qY3iz4IzgbN","tlshash":"cfb2e1456e018842a70d36f5fc6e29a4e2f13ee6bfd15ba84825334be60c09def14c65","first_seen":"2025-09-15T00:02:50.893194Z","last_seen":"2026-09-08T11:05:20.317927Z","times_seen":1439,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":39,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/uploads/2026/05/logo.jpg","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:41.062Z","timestamp":1788813941062,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/logo.jpg HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6252\r\nlast-modified: Tue, 01 Sep 2026 11:50:52 GMT\r\netag: \"6a96bc1c-186c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6252,"size_decoded":6552,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 128x128, components 3","md5":"37610b4d861da2fdde2dccff88f7e14b","sha1":"aaab8854002047082d4a5e5ef961f600b080e27e","sha256":"bf16ec047f827fa7d1ace73c0cafd3b0ea6dc7e444a981b623f79f32939bdd28","sha512":"5deb3d7fc57e4ec251e437e02bbea5529ba4eafc9f75d0050f683831d8298b1ab3b8cbe54ae1561e6611b94cd5314b01d6ae43675a742a8cc300ed933922684e","ssdeep":"192:v9HDXMsOMWibGcRa1fLsG2mraC3Fqj1Nr:v9HnMx1jUj7","tlshash":"a6d17c79671202c4faae21f0a1793c4ed6d18893b225338b5fd841d45d85eb0cc1bf9a","first_seen":"2026-09-07T20:08:19.242129Z","last_seen":"2026-09-07T20:46:21.85755Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/plugins/gdpr-cookie-compliance/dist/fonts/nunito-v8-latin-700.woff2","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:43.035Z","timestamp":1788813943035,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/plugins/gdpr-cookie-compliance/dist/fonts/nunito-v8-latin-700.woff2 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/wp-content/plugins/gdpr-cookie-compliance/dist/styles/gdpr-main.css?ver=5.1.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:43 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18912\r\nlast-modified: Tue, 01 Sep 2026 11:50:41 GMT\r\netag: \"6a96bc11-49e0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18912,"size_decoded":19213,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18912, version 1.0","md5":"f937643e9e2d39b98a3ae9ada057e740","sha1":"fe2534a5e2bf00d090f50ba03a536a0e76e8e9a6","sha256":"cdc28355b0b7217392395460dd7dfbc65a4cf0822c986a7533f4ca7434799e53","sha512":"9c8192362a2ebc29a503613c2a9b09672dbf6a11ad5f1ab9fc62a68a72a51cb683907afe2b8491345caebb7a93ab75f7ccdb09f11fc55f9751ea91e384ea5866","ssdeep":"384:pH2uwS5iCy25zm4M7SBRxShely2vwoPa4ccxHPq6HQTrCE3:weiCyCzm4NDvwoy4ccxvq6Hed","tlshash":"6a82d0ae4e461d8d872f063f21b017f91e518171e90f9d95298c71ccbee946c336ace1","first_seen":"2023-04-11T04:36:38Z","last_seen":"2026-09-08T09:21:54.577244Z","times_seen":8669,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/plugins/the-post-grid/assets/vendor/flaticon/flaticon_the_post_grid.css?ver=7.9.3","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.618Z","timestamp":1788813940618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/plugins/the-post-grid/assets/vendor/flaticon/flaticon_the_post_grid.css?ver=7.9.3 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Sep 2026 11:50:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96bc16-88d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2189,"size_decoded":839,"mime_type":"text/css","magic":"ASCII text","md5":"ff5efec226c57f67f3317279bac6eb4e","sha1":"8c83850c51b94622cdeaa0e345a2d662f34797af","sha256":"86915b2747216fca5257f342d904cae19698c8ca755f890ec272b997b4169586","sha512":"d1bccfaf757eb7f2df7ff76dcd03abab5aec423a3aff4c860283ce8e4a6c6ea30d0cf5062371a7780fb42c2a0965585a3fe0d8b4b1fcd26c8e1e406380d8b4c8","ssdeep":"","tlshash":"d041725865be98418310999923af6714ab88707ad8c5dc88b685becdbff1e10c6c16cc","first_seen":"2026-06-02T17:30:22.264201Z","last_seen":"2026-09-07T20:46:21.874659Z","times_seen":214,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter%3Awght%40400%3B500%3B600\u0026family=Outfit%3Awght%40500\u0026family=Open+Sans%3Awght%40400\u0026family=League+Spartan%3Awght%40500%3B600%3B800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.625Z","timestamp":1788813940625,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Inter%3Awght%40400%3B500%3B600\u0026family=Outfit%3Awght%40500\u0026family=Open+Sans%3Awght%40400\u0026family=League+Spartan%3Awght%40500%3B600%3B800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 07 Sep 2026 20:45:40 GMT\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18537,"size_decoded":2698,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"33f02bfc52d0897f87b5977260cfba40","sha1":"b06d735a8b0f3a63f909b385d7fac495b931a8bb","sha256":"f098fe3c910ccc064df3d2c1cfacaf6b8678454fa3c28491bb2b898dd9b40f74","sha512":"0fc7971341bdaf318559556fad7ac4e44826266bfd3141a3536a90d2b921194674925109ce318bf516254c59d36fc763eee6c81fb15f58918614b0b5367f72b0","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlqfcH+xCFHbxEnHhF9KkjzFXCNqJCbqU:vXuM0pK58Ul3sqY4E","tlshash":"c5820e91002ba400eb971cc223cf7f36ee9e61546084d1796ffd0d8aacebd66536971e","first_seen":"2026-09-07T20:08:19.260537Z","last_seen":"2026-09-07T20:46:21.876767Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":31,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/themes/one-newspaper/assets/css/add.css?ver=1.0.5","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.633Z","timestamp":1788813940633,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/themes/one-newspaper/assets/css/add.css?ver=1.0.5 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Sep 2026 11:50:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96bc05-21bf8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138232,"size_decoded":11433,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f4cadf6d9f9fb135a0513977bba4a55e","sha1":"464709d620eda800a345c9a77a358bb520a9f66e","sha256":"e0b6dcee8586ae953a204469c04c51b18b1859836b7f97583482c689e2f2a426","sha512":"6e045ec7e86dc6da03f8e18b2c58cdc8bb8d0a33f338ad6f889ea6e3c388d5f381cd4b9819e2cf27639e13bcf8a40e500be1352288202cadb6d3288f96ef33e8","ssdeep":"1536:03R8db2URT250DWXbGYupmgmG611RUyg2BYwYFj:Orup","tlshash":"f8d3bd128f8c1ece2537867d9e2ec705e62115c3dd09862c31be299c0f7666a4a37d6f","first_seen":"2026-09-07T20:08:19.257253Z","last_seen":"2026-09-07T20:46:21.87883Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/themes/one-newspaper/assets/js/theme.js?ver=1.0.5","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.651Z","timestamp":1788813940651,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/themes/one-newspaper/assets/js/theme.js?ver=1.0.5 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 01 Sep 2026 11:50:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96bc05-dddd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56797,"size_decoded":10154,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (372), with CRLF line terminators","md5":"877255e8626343dea493638e006a880b","sha1":"bbb90d43fadd789e28e078fa6c23967f5143c1ab","sha256":"b596f238ede3b9625b514497e8eebdf399f0f8aa50d86b447e2e39283924827c","sha512":"350f700fef8541404feddedce8f730fc68f5af84582ebaaa97018a7b5a3d0bd2deaf1cb6870ff7c4b1300ec23477e02f45d07f061860d5455e57433e1b72b5bc","ssdeep":"768:8c1UB4V3ZFV91HucQ7iwpazcXViv6kaP7zBJkEh:8qV3PVub7BpaAXVk6kQ7zBJk6","tlshash":"3e4382092a8425b240b7b37edd2fe002fb23526be116551a3dbd55e80fb944892d4ffe","first_seen":"2026-09-07T20:08:19.268673Z","last_seen":"2026-09-07T20:46:21.879446Z","times_seen":2,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.653Z","timestamp":1788813940653,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 11 Aug 2023 18:18:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64d67b72-1590\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5520,"size_decoded":2135,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4358)","md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-09-08T19:31:32.587441Z","times_seen":209315,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/uploads/2026/05/resized_113466.jpg","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.664Z","timestamp":1788813940664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/resized_113466.jpg HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41266\r\nlast-modified: Tue, 01 Sep 2026 11:50:52 GMT\r\netag: \"6a96bc1c-a132\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41266,"size_decoded":41567,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 768x512, components 3","md5":"77f7041c8e453a9541eb0e5f1c4d19f0","sha1":"a6ff5db8f08519c17ece1e7692772879adf210e6","sha256":"29c7f3095978c1a6f131575575b42c98e3c24f11d1e18abe6521f0a51d7558ef","sha512":"222aa3e998954edacd8eef2a0a02f9609878013f86d009b62a18fb5cd7a9887b7c7e8489442d28e353c9349b7e89583b4c1a622df84d564b4f0d3ab88a8c9fd2","ssdeep":"768:pm9ByqxTCZmMjD4niruwu0t0u/8Epiy9F5m5Mqcm/9btU9/gvSVoNtKGphN:s2mMGuWDqpicF5m5SibtDyMZ","tlshash":"d80302e5448a15cefdf31fb12488fa06a10471456c67a376803bf9b8d156edd33ac1e2","first_seen":"2026-09-07T20:08:19.261779Z","last_seen":"2026-09-07T20:46:21.88216Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/uploads/2026/05/resized_113144.jpg","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.666Z","timestamp":1788813940666,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/resized_113144.jpg HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 62136\r\nlast-modified: Tue, 01 Sep 2026 11:50:52 GMT\r\netag: \"6a96bc1c-f2b8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62136,"size_decoded":62437,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 576x768, components 3","md5":"481be67fb4c61633a753df121c6f03ff","sha1":"0791a6a1336ce3bb91803e56b090b409ca4c0da5","sha256":"69eb4b29ede5eb3105dfab01ceb766a799042c66c606941966a16accfe76d547","sha512":"68f86e6fc2a75b77397b644bab04e7ce02bc7b2eb6fe74afd0eb8b15c7b78b280bb26cf05a759f30e733f49f8ecd9414eaf97e283a33261f447b513390f29169","ssdeep":"1536:Oa8siNQMmYSaaTWSPSCtaI4Tr7Mjs1xWC7w+tLrUjYa5zKxnWFMdS82gTF8a:IQzYoSBXr7MQ1kC7wggr5z8nWFMv2g5l","tlshash":"305301649088cc9c6c1305f58be7a7f70bc9d95f39760146befa8f06a3317c5a88a615","first_seen":"2026-06-10T22:52:56.399522Z","last_seen":"2026-09-07T20:46:21.89467Z","times_seen":3,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/themes/one-newspaper/assets/lib/fontawesome/webfonts/fa-regular-400.woff2","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.909Z","timestamp":1788813940909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/themes/one-newspaper/assets/lib/fontawesome/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/wp-content/themes/one-newspaper/assets/lib/fontawesome/css/all.min.css?ver=6.5.1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25452\r\nlast-modified: Tue, 01 Sep 2026 11:50:29 GMT\r\netag: \"6a96bc05-636c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25452,"size_decoded":25753,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25452, version 773.768","md5":"023a4a925fa3fce0f66b769ef6bbb264","sha1":"2ed706340547d19c10a409ee02fb08f3d52ff670","sha256":"2bccecf0bc7e96cd5ce4003abeb3ae9ee4a3d19158c4e6edfd2df32d2f0d5721","sha512":"40f3ef2bfde073d33a2d3cbc280fb40ea50dc2b0c3619c8d9717d665351ae219caa5f17ae67cc87e777ff73c1275c1f3778b26e95f19459594d2f42ab95aecc1","ssdeep":"384:Uf5wuZ+wxJe5X/l55lwWB8jCYpdKMH4aL0a6nYEd4Mjxx6e6RERnoJ8ZwC3UmFs:0wFwxM5/1G3UIya6n9dft6RERnomFs","tlshash":"04b2e008d6d6bd12d57196f83bf74ca04bc0464b0a976b2545a2bde30ed00eec86bb79","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-09-08T12:09:24.266715Z","times_seen":10049,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/themes/one-newspaper/assets/lib/jquery-ui/jquery-ui.min.css?ver=1.0.5","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.637Z","timestamp":1788813940637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/themes/one-newspaper/assets/lib/jquery-ui/jquery-ui.min.css?ver=1.0.5 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Sep 2026 11:50:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96bc05-75c8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30152,"size_decoded":7759,"mime_type":"text/css","magic":"ASCII text, with very long lines (28555), with CRLF line terminators","md5":"cfedd08eecbb601f1122df8ef7294617","sha1":"85cc479064e419b32637e35fcadb61ccbc4acbc8","sha256":"b0ac9570e74357b7335f2ae0a3900dd0d3ae227775b83e366201174f19c9e70e","sha512":"029271c0dd5ef3d2d165497064f33faaadadccce206677abfbaef1850190c762e063fd0ad44c857444cd6ed3270f7a6bcbc8d2d871096e461bc149a429348d6a","ssdeep":"384:hKwLQ88nOXH51eCBMzymUUC6G/zDMSc7nfZBhV2:hlZXHJBMznUUC6G/zDMBhQ","tlshash":"15d25130a4c2252dfe33d23061e11ef4523bc242eda65fbda09af65943e98e4c57b971","first_seen":"2026-06-15T18:50:20.643794Z","last_seen":"2026-09-07T20:46:21.904464Z","times_seen":19,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-07T20:45:39.632Z","timestamp":1788813939632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 22926\r\nlink: \u003chttps://faxuzeu.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://faxuzeu.com/wp-json/wp/v2/pages/6\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://faxuzeu.com/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Sassy Social Share:3.3.79","description":"Sassy Social Share allows your website visitors to share your content over Facebook, Twitter, Google, Linkedin, Whatsapp, Tumblr, Pinterest, Reddit, Gab, Gettr and over 110 more social sharing and bookmarking services.","website":"https://wordpress.org/plugins/sassy-social-share","common_platform_enumeration":"","icon":"","categories":["Widgets","WordPress plugins"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup:1.1.0","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"All in One SEO:5.0.0.1","description":"All in One SEO optimizes a WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"All in One SEO Pack:5.0.0.1","description":"All in One SEO plugin optimizes WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]}],"data":{"size":146509,"size_decoded":23327,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (9291), with CRLF, LF line terminators","md5":"87e2d73763e517adb5cd3ab8a6ed4d67","sha1":"e0b2ba3b9916d1faa9365b7058073f84a13a1e63","sha256":"03327d963cc9a83077fcc207b43b0290a1654051ba009529317183cb386e6632","sha512":"557542f0ce9ece8526ec944813b55f85962cec03a8b9ca4ce1978249bd4e4b21e52f1ce9dc07955f366c163325c155d67bd10fca188576326f2d5678910df447","ssdeep":"3072:RMh4RnBVV3KJGR4a1gDnAgAxAz9AA5amwBNsQH:24pV3KJkgDAVaJ1y","tlshash":"e4e3f93652a8007f133b8ac75225bb4dee599263cf4649d8b9bd97cc478bd83092f316","first_seen":"2026-09-07T20:46:21.907961Z","last_seen":"2026-09-07T20:46:21.907961Z","times_seen":1,"resource_available":false,"data":null}},"time_used":802,"timings":{"blocked":-1,"dns":21,"connect":32,"send":0,"wait":649,"receive":31,"ssl":69},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/themes/one-newspaper/assets/css/main.css?ver=1.0.5","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.631Z","timestamp":1788813940631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/themes/one-newspaper/assets/css/main.css?ver=1.0.5 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Sep 2026 11:50:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96bc05-6bb33\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":441139,"size_decoded":59632,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"53f1292fc5a533c08a55c4100185c8ad","sha1":"e6efc2a551caba209d51fa4d004fe064ccdb47fb","sha256":"995bbc0aee0810233bb515d219326d06e6ade432c28c3159dd4e17eb250d6119","sha512":"4cc7169de836c66daa48d6b4deab5657ce92f07bacb1a7e7d1191cff87c717ca301d5d0a6cc748b0c57403cb668cdc9adc2f9b0dbd3eefa288e3f4cb308e29dd","ssdeep":"1536:hmvympQ5b+//a0GyFXkGMnXq133/3AaYBZDxdI7caIm6ZyIObGteapZrTnbZDQfA:gns3Ttj4iHzVK5tp9s8iq1oSr0HEujT","tlshash":"9b94c414b31f00d9177a6399b3bca5a1dd38d412ce9702ecf1e16a0c46d83aa4bb57de","first_seen":"2026-09-07T20:08:19.249458Z","last_seen":"2026-09-07T20:46:21.911917Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/themes/one-newspaper/assets/css/responsive.css?ver=1.0.5","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.635Z","timestamp":1788813940635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/themes/one-newspaper/assets/css/responsive.css?ver=1.0.5 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Sep 2026 11:50:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96bc05-95ad\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38317,"size_decoded":5565,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"cdb128d7be8ff5267e3d3d77b5e54d5d","sha1":"5f4acfa5c93d813b1313d029becad0dd7476ef4b","sha256":"c009d23728b8853f4e3f4c4d0d2b63f3e89822c25453079f930dc6cfe8ba4282","sha512":"57edb6bf816f9e81060f3f2e2e5babffd7681949655e0c85bd9700830c731bf902221dfaf1a63bc44515469ac507ba7500ab80cf398ff156cfb47157f882f4d2","ssdeep":"384:oNKQCFlgj17lH8IRIHUb6fmdP51H9HBAxDj4cWftKUbS:oN6Uj17lH8IRIHUb6+BAxH4cWftKUbS","tlshash":"89034200732f56e85765235bf27c7069cd29e8239aa600e9f181560d4ffd2b35a78bce","first_seen":"2026-09-07T20:08:19.234691Z","last_seen":"2026-09-07T20:46:21.917392Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/plugins/gdpr-cookie-compliance/dist/styles/gdpr-main.css?ver=5.1.0","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.639Z","timestamp":1788813940639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/plugins/gdpr-cookie-compliance/dist/styles/gdpr-main.css?ver=5.1.0 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Sep 2026 11:50:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96bc11-159a3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88483,"size_decoded":9225,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"490973aa85791bff25a41fbdbdf1d6d6","sha1":"61e5986cb9e6f423701bb4624370aeab4220bc7b","sha256":"83b5663fd2638d52bf54d0a2ad6b5f5164c36865ae2466d5bfd4d3f4c8be5121","sha512":"64756370815347946e870dba2e6dde6381e65a9076045344e1033921a68272924ac8d5e9d46c9c6148b043da0463e11a95fb8f3e907216de906082f4f4ec422a","ssdeep":"768:7bc2cpC5jd2AtXuJIvM4AoBSVEfrNjSD3sVdAoqDgnNgZV9Qn/0iVWL:7bc2cpJCrN5n/0iVI","tlshash":"3f83157d38aa13ab536fcc67748aee465b195350bda27de9527ca19cc0dc30118ccba3","first_seen":"2026-06-13T18:56:26.012532Z","last_seen":"2026-09-08T18:45:21.417592Z","times_seen":435,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.641Z","timestamp":1788813940641,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6482bd64-3509\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":5204,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-08T19:33:25.539135Z","times_seen":961077,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/plugins/gdpr-cookie-compliance/dist/images/gdpr-logo.png","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.671Z","timestamp":1788813940671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/plugins/gdpr-cookie-compliance/dist/images/gdpr-logo.png HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 1475\r\nlast-modified: Tue, 01 Sep 2026 11:50:41 GMT\r\netag: \"6a96bc11-5c3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1475,"size_decoded":1773,"mime_type":"image/png","magic":"PNG image data, 350 x 233, 4-bit colormap, non-interlaced","md5":"dd880989709c875ae9544b52c4d14614","sha1":"70bf30cc53a852b30092b84c218da4b0dbfdb3f4","sha256":"2d91c5b43406f8e7f61aca23cec58ee76a8e9a9d4b9a7c96cc9700a3376ca42b","sha512":"fcdfaa417b79b29ea4259541c865623a9ed5e4631adeb0ce75293a4367f8b2c91728486ce4238e904642f83e14d0c87c92556756f660be511d5723b512370ff4","ssdeep":"","tlshash":"df31e6b8ed301633e2e116380a7c7e08e2269cb0344009b1937c222aad4cf74fd6c952","first_seen":"2023-05-01T14:29:36Z","last_seen":"2026-09-08T18:45:21.432548Z","times_seen":5225,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/themes/one-newspaper/assets/images/arrow_down.svg","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.826Z","timestamp":1788813940826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/themes/one-newspaper/assets/images/arrow_down.svg HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/wp-content/themes/one-newspaper/assets/css/main.css?ver=1.0.5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 513\r\nlast-modified: Tue, 01 Sep 2026 11:50:29 GMT\r\netag: \"6a96bc05-201\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":513,"size_decoded":814,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f421b1e82b12406252f5a891aec61378","sha1":"7aa15a9783c97120fb60cd517e914fd9fa6b1fdb","sha256":"94f11340d5370df9a34b0260d8e6b6444540ea977c2387f83180c72a7eb65506","sha512":"d5eb1f035035472479e0fffbee230509951741b6c37f87111cd08bf6a8681a9cbd95a7aad2c2d674efae0e67e0656c461aeebfe7c958b91fa1b933eb0337457c","ssdeep":"","tlshash":"78f0c92086b6e228640811f2cb1c1822637ea4f6605c8c5ae2f44880f1a99dd28be46b","first_seen":"2026-01-07T01:22:36.009881Z","last_seen":"2026-09-07T20:46:21.924101Z","times_seen":15,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/themes/one-newspaper/assets/lib/fontawesome/css/all.min.css?ver=6.5.1","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.621Z","timestamp":1788813940621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/themes/one-newspaper/assets/lib/fontawesome/css/all.min.css?ver=6.5.1 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Sep 2026 11:50:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96bc05-190f9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102649,"size_decoded":22836,"mime_type":"text/css","magic":"ASCII text, with very long lines (52269), with CRLF line terminators","md5":"d04b0cf35abb0e22eecca58c52984615","sha1":"9a0821025ba59e2602ae3a03467842a5d80f77cd","sha256":"ce6f72d6b4c728f562906a8e51e2456a9011acb20b4c90e0eb79b580cce8f229","sha512":"0bb42546a13d12035276562d4d2e01b8569649ab9dcf6e67caedae652af9df3f90fda288b4f646f057efbb399d6e02d4e33a5ffad3dbe920482ffd975010838a","ssdeep":"1536:yjMCMPMCMjMCM4MCMwMCM3sVM7709gbPMfjSFOTyPG9SpgSLCJ:N709gMGFiyPG9SiSLCJ","tlshash":"7ca3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2024-05-29T20:38:41Z","last_seen":"2026-09-08T11:52:25.696711Z","times_seen":1792,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/plugins/sassy-social-share/public/css/sassy-social-share-public.css?ver=3.3.79","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.638Z","timestamp":1788813940638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/plugins/sassy-social-share/public/css/sassy-social-share-public.css?ver=3.3.79 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Sep 2026 11:50:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96bc14-2994\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10644,"size_decoded":2846,"mime_type":"text/css","magic":"ASCII text, with very long lines (10644), with no line terminators","md5":"ba4cc2135d79faefe28d070ad9d25a43","sha1":"b66e5c5078b6039830caa941dfb0c24c3605aba6","sha256":"35c4a28b795f7eb020fbbd51320c5a47727040a1bf9660b40babf4e563250008","sha512":"b47575bab8f318f9684b598e278e212a390276565c264780331e8728c718829b72682599bc71e3c416cfe30293eb63422b0d7d609d6c68d3db50ede0ca17915e","ssdeep":"192:ZClNtmYGqKYsTAPqkLgT+TuTHTiaTiTdT3TUTCTrTmyrHQt/o:Ql6YsvCqrua+J74O3DrHQt/o","tlshash":"c022102bebd9157a6523ccb7f713b6bcf4282881af8708aedc01e33d474199b1a69544","first_seen":"2025-03-20T21:25:52.220271Z","last_seen":"2026-09-08T19:25:00.219898Z","times_seen":5788,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/themes/one-newspaper/assets/lib/slick/slick.min.js?ver=1.8.1","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.647Z","timestamp":1788813940647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/themes/one-newspaper/assets/lib/slick/slick.min.js?ver=1.8.1 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 01 Sep 2026 11:50:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96bc05-a770\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42864,"size_decoded":10770,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42862), with CRLF line terminators","md5":"777da4aaf5b960636dec0fd4e50ba489","sha1":"9a94038ccae90e6d2a0f9cb61f79ae7c70320287","sha256":"e1a52c0a06fa9f65e015b02e7ec463fd621211a9d2ae44b6660597900e927fbb","sha512":"9b810776ff98b94fe765b192187064d2ce4921fb60baf4c797c3302d332f7e55556e54eb070cc8917f61aa74191539a294457aa18d54f5e85527652695c6f848","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYK:EPrYdlNixEePiYK","tlshash":"6213a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:24Z","last_seen":"2026-09-08T17:53:21.200625Z","times_seen":15186,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.898Z","timestamp":1788813940898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://faxuzeu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 468853\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-08T19:34:16.515422Z","times_seen":279095,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":30,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/leaguespartan/v15/kJEqBuEW6A0lliaV_m88ja5TwvZwLZk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.907Z","timestamp":1788813940907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/leaguespartan/v15/kJEqBuEW6A0lliaV_m88ja5TwvZwLZk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://faxuzeu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24020\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 08:29:32 GMT\r\nexpires: Sat, 04 Sep 2027 08:29:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:50 GMT\r\ncontent-type: font/woff2\r\nage: 303368\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24020,"size_decoded":24833,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24020, version 1.0","md5":"0a37cd9b73652bb8add3e363debce9e3","sha1":"6ff394aefd844daedf9b4649cd8d1a00d5b04b3e","sha256":"7d843a9fa4dcd050da68405d9093f8ab8298f8f60a97155e85ab84c9ed3040e2","sha512":"3c54499f61fe2ee980cab79941b0aa9749a58dad2b23dc3add0a8485c4be2332d734e6063c2a593aa8af5b1f913a3a1df1ec3af64ff3ba756f76c7acfa16db76","ssdeep":"384:rb7E+iGSRfRvtOSqg7EHZ/QX+X+yQKfVzGfr072v/Y3iz41OVlgbq/y:rX9izRvtVJ7iQi+yDfIA7qY3iz4IzgbN","tlshash":"cfb2e1456e018842a70d36f5fc6e29a4e2f13ee6bfd15ba84825334be60c09def14c65","first_seen":"2025-09-15T00:02:50.893194Z","last_seen":"2026-09-08T11:05:20.317927Z","times_seen":1439,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":48,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/uploads/2026/05/img2.jpg","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.922Z","timestamp":1788813940922,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/img2.jpg HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4547\r\nlast-modified: Tue, 01 Sep 2026 11:50:52 GMT\r\netag: \"6a96bc1c-11c3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4547,"size_decoded":4847,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3","md5":"8f027e0b80a0173aa71629b73fc79b3b","sha1":"327faa3a54a3a9d891aa36ed30032ff897454013","sha256":"a0ed0d5edb8952620be6945d60a07bf57ae3e6dafb883be37cf96b64b156348e","sha512":"11208c00473214edc850b850f34e520450a8cba95f7a112b3cfbef0c34c3d13e1badfe3b9a879798fd224a3b313b72ee93645ee4aee8ade7792d58eb1a8e62f8","ssdeep":"96:gyuuuuuuuuuuuuuuuuuuuumxZqFFFFFFFNHU/GwV7a4:gyuuuuuuuuuuuuuuuuuuuuKDT","tlshash":"d49178a94b1bd046dbed88b5d4284a965938c11164dddda7ec7378fc9ea23e03e43e30","first_seen":"2026-04-19T10:13:44.714124Z","last_seen":"2026-09-07T20:46:21.930793Z","times_seen":12,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:41.301Z","timestamp":1788813941301,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.1 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Jun 2026 08:07:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a213250-58e0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22752,"size_decoded":5716,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-08T19:36:02.499723Z","times_seen":51520,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/plugins/the-post-grid/assets/css/thepostgrid.min.css?ver=7.9.3","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.620Z","timestamp":1788813940620,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/plugins/the-post-grid/assets/css/thepostgrid.min.css?ver=7.9.3 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Sep 2026 11:50:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96bc16-267a3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":157603,"size_decoded":21110,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d83a7bcf66312a94d6fca6c94b19058c","sha1":"1a0bca32fd17e4327554bff23eb37c76e294c1f3","sha256":"66e63acb006693cb6bf1db361e922b18ba9d4ddeae7fce3715ae39a36087c1e2","sha512":"decfc4c4d62e834d36037052c727c6d78ed87c1af36f34b8d2128ff2884276e01db331ebfb60138a2d338000f4a87f264f568113490535efac34b8b81aa358ea","ssdeep":"3072:YoD034yvAtMem1VIvcBc1x0VIv+5nEQ2j9A/tnXKrCbk0yKRM91vqFWIJRhO9Zff:YoD034yvAtMem1VIvcBc1x0VIv+5nEQo","tlshash":"76f33250a7522674e9a7d33df1cd7d582e38a432d29309ec6ca5a7d883cb0c3676786c","first_seen":"2026-06-02T17:30:22.312167Z","last_seen":"2026-09-07T20:46:21.932956Z","times_seen":425,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/themes/one-newspaper/style.css?ver=1.0.5","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.630Z","timestamp":1788813940630,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/themes/one-newspaper/style.css?ver=1.0.5 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Sep 2026 11:50:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96bc05-4b8d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19341,"size_decoded":5743,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (750), with CRLF line terminators","md5":"83ae199581371ea70d2f49b0f846d4ab","sha1":"3099199bfca673ec3e367e204addfb4957dfe449","sha256":"2b71a54160e942f5522fdb50c2fb07e1f8f667d820b3278cba1d1625d2f5d804","sha512":"4f5d602c26b0086fbac32c4029acf027a34eb6a2ff27963f50a3f48c9f462137929b64801544b3334dcedeaf6a67f159eb686f6264f32228ef291885ad90d941","ssdeep":"384:lRRDCiwoHSpiLlQfBmqfFWRhxLoLtJEWuVSmGGkCxkk0IEkUAnVrwBk17xIE:lP+ifHw+QsqsnxLCJEWbmGGkCxkk0IEC","tlshash":"ef9295a91e0226168373cb34b7b69691ef5051318e0f31dcb8d141699389bb86b7db8e","first_seen":"2026-09-07T20:08:19.255892Z","last_seen":"2026-09-07T20:46:21.93709Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/uploads/2026/05/resized_112771.jpg","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.919Z","timestamp":1788813940919,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/resized_112771.jpg HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 53152\r\nlast-modified: Tue, 01 Sep 2026 11:50:52 GMT\r\netag: \"6a96bc1c-cfa0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53152,"size_decoded":53453,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 512x768, components 3","md5":"f11a7d1ab68fcd69aa66784f207a7b6d","sha1":"ef19da56b47115582edbed009197d9097656af5b","sha256":"3285eaa30cd32ce35d6dd81e3f0108d46665f7ad61e6eb7e6865c2afd9d3d8f4","sha512":"2af118d8169bb39a6fcb76f58502d55ef1b5c7c48175e6074806e70728475b2642e80bc395d493d042975fb902f7c4ecbe3157b457f9888e2b570707a7a52046","ssdeep":"1536:CyuyPBT1ttomrMoOnuybvIEsdAXa0+sEiA:3d1rvovuwTsiU9","tlshash":"1633f125fe5560ffc9c82e08e1d4bd14195b4788e88f5d23ae2fcaae221cee40d84965","first_seen":"2026-07-18T20:35:49.891887Z","last_seen":"2026-09-07T20:46:21.937952Z","times_seen":3,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/plugins/gdpr-cookie-compliance/dist/fonts/nunito-v8-latin-regular.woff2","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:43.037Z","timestamp":1788813943037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/plugins/gdpr-cookie-compliance/dist/fonts/nunito-v8-latin-regular.woff2 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/wp-content/plugins/gdpr-cookie-compliance/dist/styles/gdpr-main.css?ver=5.1.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:43 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18796\r\nlast-modified: Tue, 01 Sep 2026 11:50:41 GMT\r\netag: \"6a96bc11-496c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18796,"size_decoded":19097,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18796, version 1.0","md5":"e5ab24fb2b666576b0f199e25e1b5c09","sha1":"cf8cfb1025573f69d37688b617931ff10da62fd8","sha256":"623b62596e07df1fbf3a9fc0219c238e373bec6e55349826b0315b50ed2a7a7d","sha512":"45291b8fd3fdf6e43e70876a679c4b5e7b3c517793eb9b39c0ec5ed486cc6430bba0f2b8e8fdc2bb4abb829150d4d721ab774b343391c5ecee72abf4fb085cf1","ssdeep":"384:AoCmyTIF0sFE3KcvrC0bCTmzIByOsb/vnn1LC/cceaSd9xogkoH64/O30Xs:MJTI/u3DuF5U1LCEfaSr2oalOs","tlshash":"1482d05ef37429acc2f424a11fa1c768f55798f28025d928acdfa5407f2d1a3368a036","first_seen":"2023-04-11T04:36:38Z","last_seen":"2026-09-08T18:45:21.434394Z","times_seen":8805,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/plugins/sassy-social-share/public/js/sassy-social-share-public.js?ver=3.3.79","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.642Z","timestamp":1788813940642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/plugins/sassy-social-share/public/js/sassy-social-share-public.js?ver=3.3.79 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 01 Sep 2026 11:50:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96bc14-22f4f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":143183,"size_decoded":49816,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6380), with CRLF line terminators","md5":"15a28232bbde9e548f275d6e52385bd6","sha1":"21d5a9ab7e68d43e5fe8f151865e421674bddf37","sha256":"a81a198375e5fec746950ead41c050cc583a9b663cb4aeb40a6cbb11098b555d","sha512":"12aa201cea075846d266536aa222d64d4088b851d87f55dac5e611b77add6826c8ebc6e82650fcd1a9e88a05a0072dedd195719c5f64cd4580a0acd8aee05d92","ssdeep":"3072:hORGE+lj7K8kakeBtXPzSSeFEsqoIaw134:hOU/hPzxeFEsqoIZx4","tlshash":"f3e33aeaf350915c759f8f9cfb36d288661f60afe59582dcf05d97382261ac4f842c28","first_seen":"2025-09-16T05:06:40.262Z","last_seen":"2026-09-08T19:25:00.205946Z","times_seen":3679,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/uploads/2026/05/resized_113696.jpg","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.645Z","timestamp":1788813940645,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/resized_113696.jpg HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 88366\r\nlast-modified: Tue, 01 Sep 2026 11:50:52 GMT\r\netag: \"6a96bc1c-1592e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88366,"size_decoded":88668,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 512x768, components 3","md5":"1d143c2a4063f8e17c1a10d913503f9b","sha1":"38d6d9a6a4b6b8df792e713460aaf7fb8cd38644","sha256":"cac6499c79d053ce82706a608996800ff580ff720106e12d0199aeb245c0e703","sha512":"ade8d4fb986f956b7dbcddad7a2757f5988b083c31ae365f10213729610a6fcfdb81667161b3aa11829fa2b9951d0a5a7f50c0ac7a78d190b3bd8b1e28761c87","ssdeep":"1536:i6Jd6Fe2a9HD7gRVH8pcKAmV8SkzwWtdj4KtLqkK+R3TAjAad:7cIPIe6NmVAzx6+3Ta","tlshash":"8a8302495dff2e19c1ce8f2f9ab84aa5a34d5e6c0c6cfd584bbdd20b6a9ccd854012c1","first_seen":"2026-09-07T20:08:19.24003Z","last_seen":"2026-09-07T20:46:21.941841Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/themes/one-newspaper/assets/lib/magnific-popup/magnific-popup.min.js?ver=1.1.0","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.648Z","timestamp":1788813940648,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/themes/one-newspaper/assets/lib/magnific-popup/magnific-popup.min.js?ver=1.1.0 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 01 Sep 2026 11:50:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96bc05-4efb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20219,"size_decoded":7680,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20087), with CRLF line terminators","md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-09-08T18:55:22.726088Z","times_seen":25588,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/themes/one-newspaper/assets/lib/jquery-cookie/jquery-cookie.js?ver=1.4.1","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.649Z","timestamp":1788813940649,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/themes/one-newspaper/assets/lib/jquery-cookie/jquery-cookie.js?ver=1.4.1 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 01 Sep 2026 11:50:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96bc05-cb4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3252,"size_decoded":1738,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"185607df1287788a379739a0fbf95fae","sha1":"e3e4af801a9065a63a2a231f00dbae344ed0af68","sha256":"96dccaa929e6a14f0f439d8597777a97b22720516942d36fc625ae11e85c3ada","sha512":"40b7ded8a4b26a55a6252bd8e9466336ffef6e0ade8c6dde66092c724543cacb2ce581f408cd67e64f521aef528dac8f85625e861973ac473774083e286db321","ssdeep":"","tlshash":"d1614394308f365e0adb2341a67b4469ee3cfa72111401dc619969f82c70c269babd6e","first_seen":"2023-03-07T01:03:32Z","last_seen":"2026-09-07T20:46:21.945232Z","times_seen":1379,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/uploads/2026/05/logo.jpg","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.663Z","timestamp":1788813940663,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/logo.jpg HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6252\r\nlast-modified: Tue, 01 Sep 2026 11:50:52 GMT\r\netag: \"6a96bc1c-186c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6252,"size_decoded":6552,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 128x128, components 3","md5":"37610b4d861da2fdde2dccff88f7e14b","sha1":"aaab8854002047082d4a5e5ef961f600b080e27e","sha256":"bf16ec047f827fa7d1ace73c0cafd3b0ea6dc7e444a981b623f79f32939bdd28","sha512":"5deb3d7fc57e4ec251e437e02bbea5529ba4eafc9f75d0050f683831d8298b1ab3b8cbe54ae1561e6611b94cd5314b01d6ae43675a742a8cc300ed933922684e","ssdeep":"192:v9HDXMsOMWibGcRa1fLsG2mraC3Fqj1Nr:v9HnMx1jUj7","tlshash":"a6d17c79671202c4faae21f0a1793c4ed6d18893b225338b5fd841d45d85eb0cc1bf9a","first_seen":"2026-09-07T20:08:19.242129Z","last_seen":"2026-09-07T20:46:21.85755Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/uploads/2026/05/img1.jpg","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.920Z","timestamp":1788813940920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/img1.jpg HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4547\r\nlast-modified: Tue, 01 Sep 2026 11:50:52 GMT\r\netag: \"6a96bc1c-11c3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4547,"size_decoded":4847,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3","md5":"8f027e0b80a0173aa71629b73fc79b3b","sha1":"327faa3a54a3a9d891aa36ed30032ff897454013","sha256":"a0ed0d5edb8952620be6945d60a07bf57ae3e6dafb883be37cf96b64b156348e","sha512":"11208c00473214edc850b850f34e520450a8cba95f7a112b3cfbef0c34c3d13e1badfe3b9a879798fd224a3b313b72ee93645ee4aee8ade7792d58eb1a8e62f8","ssdeep":"96:gyuuuuuuuuuuuuuuuuuuuumxZqFFFFFFFNHU/GwV7a4:gyuuuuuuuuuuuuuuuuuuuuKDT","tlshash":"d49178a94b1bd046dbed88b5d4284a965938c11164dddda7ec7378fc9ea23e03e43e30","first_seen":"2026-04-19T10:13:44.714124Z","last_seen":"2026-09-07T20:46:21.930793Z","times_seen":12,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/themes/one-newspaper/assets/lib/slick/slick.css?ver=1.8.1","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.622Z","timestamp":1788813940622,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/themes/one-newspaper/assets/lib/slick/slick.css?ver=1.8.1 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Sep 2026 11:50:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96bc05-767\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1895,"size_decoded":879,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b06073c5a23326dcc332b78d42c7290c","sha1":"64e6c5ff99f14c65752e0322234160f8e83fc6c2","sha256":"f0b722c48c52082cd77261574e22a5251fe37ea4b291b1441134145bab9b2063","sha512":"438230129bd3bde621f9687d3e1739ac0a7ccd7b285be160daee2ae5395701e47d9c41b6a109c9ebb0f9b994c1058a5722362959098872a3094c11445800c395","ssdeep":"","tlshash":"b841fadc0652c5d68733c4444fd38649eeefa0930c251698ba8d47098fbfae8a9c5e77","first_seen":"2023-04-05T23:01:10Z","last_seen":"2026-09-08T17:53:21.289242Z","times_seen":12152,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/themes/one-newspaper/assets/lib/magnific-popup/magnific-popup.css?ver=1.1.0","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.624Z","timestamp":1788813940624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/themes/one-newspaper/assets/lib/magnific-popup/magnific-popup.css?ver=1.1.0 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Sep 2026 11:50:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96bc05-1c86\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7302,"size_decoded":2133,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c03fe8704d90e35eba342d2ca2c5a530","sha1":"74a41372d833195b77dd9e167f82ca395cc4702d","sha256":"1155981e8193622f58553eed0bba2fa43512af362a3d54dedef64c46970bb371","sha512":"0de3ac5d97701cc10e70418347b307399ca94e3b2c2e5fee3ad8f30a3bd44f5fd119e669895495ce566011de827ff69dab617ca5b5d6d96c093a88b55e990d46","ssdeep":"192:NN4yXVw9SfoRyEBpEbxHq98Z/vzz/89aO:OSUL8xH2","tlshash":"8de1cf16db212342e537e7b5e7938729e7220063e30304abbfd15845ebfda484661fd9","first_seen":"2023-04-05T15:18:30Z","last_seen":"2026-09-08T14:07:57.336123Z","times_seen":8217,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/plugins/gdpr-cookie-compliance/dist/scripts/main.js?ver=5.1.0","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.652Z","timestamp":1788813940652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/plugins/gdpr-cookie-compliance/dist/scripts/main.js?ver=5.1.0 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 01 Sep 2026 11:50:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96bc11-119bf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72127,"size_decoded":15894,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3bbeab2b5b91b6e800a8bad47b4d0c45","sha1":"263784b67743320ab9e44e17e3f43542b549dbd8","sha256":"6638ae93fa21d591dad6821bd7f47c09bfabeda0087948812a1c0fae59c3cb75","sha512":"f44c56dec0ea5aaeaa6dc113ed2c3abd87391022309cde4e68b208741e113100c885c1096fab1ec7f0e89d639640f2aae15e229ed10024e2c4201ae15c84df24","ssdeep":"1536:QH0L52ZkB/z13X+1b3SU8VrkqmQYTmbPiJmYrwV+GkmQY1mbv:QUL4GFbjVrFiJx","tlshash":"59636338b924e1e687fe009570bbd60b632146349ca9acf9306994a42cdcfd505dbb7f","first_seen":"2026-06-27T21:12:10.817738Z","last_seen":"2026-09-08T18:45:21.401302Z","times_seen":643,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.890Z","timestamp":1788813940890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://faxuzeu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 468853\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-08T19:34:16.515422Z","times_seen":279095,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":5,"connect":31,"send":0,"wait":19,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-content/themes/one-newspaper/assets/lib/fontawesome/webfonts/fa-brands-400.woff2","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.892Z","timestamp":1788813940892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-content/themes/one-newspaper/assets/lib/fontawesome/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/wp-content/themes/one-newspaper/assets/lib/fontawesome/css/all.min.css?ver=6.5.1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 117372\r\nlast-modified: Tue, 01 Sep 2026 11:50:29 GMT\r\netag: \"6a96bc05-1ca7c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117372,"size_decoded":117675,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 117372, version 773.768","md5":"b6356c957274676e6571c1ff5e11c9a8","sha1":"4022f95e001d734ca8f082b8e7627abd205609ec","sha256":"3a8924cd5203a28628716aedb5cef0943da4c3b44e3ffcee90ab06387b41c490","sha512":"83de79c74480fafc62cdac4012ff2a129d8701772ee16216c3d9488826ac21a9c2f8a416fe3208a61bfea7e12c24ac1cc2d26f6d22bd2b0ba39a22d630238b59","ssdeep":"3072:U3JKgVzg5ybfXYe5W59JPQaPWKSsx/DBMnVnqedkAFqPQTzIBIOK2vDMF:IVM5A5GJPQaH/NMtBkAvcnYF","tlshash":"c4b312f88b7ac9a5e304e67b55e4613555a0aec8b180f35453be7c2c221e10dc67afe3","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-09-08T19:35:21.648149Z","times_seen":31081,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faxuzeu.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"faxuzeu.com","domain":"faxuzeu.com","tld":"com"},"ip":{"addr":"167.71.35.119","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faxuzeu.com/","date":"2026-09-07T20:45:40.640Z","timestamp":1788813940640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faxuzeu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 03:57:04 GMT","end":"Sun, 11 Oct 2026 03:57:03 GMT"},"fingerprint":{"sha1":"B8:16:F3:70:43:FC:9C:14:18:34:A7:96:74:9F:D6:5E:28:F8:5C:FA","sha256":"66:9B:91:8E:57:73:09:2B:2E:5D:0F:55:53:9D:FF:87:52:59:19:3F:B0:38:AC:3F:AB:0F:C5:B6:B0:77:D7:B2"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: faxuzeu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faxuzeu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 07 Sep 2026 20:45:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 28 Aug 2023 17:14:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64ecd5f0-15601\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":30752,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-08T19:33:25.561929Z","times_seen":1050548,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"faxuzeu.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"faxuzeu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}