{"report_id":"e4f0afda-b7fe-4837-bd76-5eb527a0ea92","version":6,"status":"done","tags":[],"date":"2026-02-21T20:52:49Z","url":{"schema":"http","addr":"babywlfi.vip","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"babywlfi.vip/","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"title":"Baby World Liberty Financial $BABYWLFI #BABYWLFI #WLFI $WLFI – Baby World Liberty Financial $BABYWLFI #BABYWLFI #WLFI $WLFI","dom":{"size":83125,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10901)","md5":"613e4db66e76558d6b8df8d8a57041db","sha1":"78c2d8126d763eb81320181068c7b47ac682e017","sha256":"9809c6619d71ce8a6f82737c9a0111b1250ce75cd3d25281d48b2899d1bf0508","sha512":"c1095509978bfc5fbe2e87c681c1e88f9cfb49d330cec9fcc4b44ea7fa284911d4427c57504cd0c224755e16aee1b420e541042a7ba7629bb321811d8fb2449f","ssdeep":"1536:UTap7cV5p9znOGfE59LQExorfvIsKPpQAwNN89gi0d:U2BE5p9znOGy9LQExoDIsKPmAu","tlshash":"3583a4717a891829326f43cf9017350ca0daeefbd655a9e5f1f24120a6f9ce132932b5","dom_hash":"domhash886a385bedb8953101f5647bd4f19215","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"babywlfi.vip","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-28T20:52:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2026-02-16T01:47:58.864286Z","alert_count":0,"request_count":1,"received_data":1007,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"babywlfi.vip","ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-14","domain_rank":0,"first_seen":"2026-02-21T20:18:31.056425Z","last_seen":"2026-02-21T20:18:31.056425Z","alert_count":53,"request_count":53,"received_data":6085893,"sent_data":25446,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Elementor:3.35.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-02-15T22:33:11.747224Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-06-08T11:03:48.468645Z","times_seen":337341,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-08T12:34:44.528973Z","times_seen":825305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.31.2","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91e2eace8652a661d8c8bdf6613236a7","sha1":"afca4a2a64f51b1f213ddfae9f270c8add2959a0","sha256":"7121fc5dec5cbdfb78786cd4018f5239ce4df4745abbbf20be2a1d17cc23e1ea","sha512":"d383cb0e216b4f724dcc706b945088c8ac213c97e44b636ce99b76d054d729abbc9bcbdc5058960bc2b145fd9273e77672bd1d26de27059380c7aa071a6fb90e","ssdeep":"96:BEdxwrudY4kjboFkEO/HfOYAWY4N53hsstJQPCl2e/VtFVKdpYQGK0Vz38k2:eTXd4jboFemUN537MPa/pMdOQ8Mk2","tlshash":"9bd1569805489d2b26e43ad8b15b6b741b3dd0323c5ada81e611eddc18fcfd187ea532","size":6248,"data":"","first_seen":"2025-08-11T06:13:36.205631Z","last_seen":"2026-06-08T11:31:44.86054Z","times_seen":5529,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","size":8481,"data":"","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-06-08T12:40:05.697613Z","times_seen":124077,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/wp-emoji-release.min.js?ver=6.8.2","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19251,"data":"","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-06-08T12:40:05.681874Z","times_seen":208067,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-08T12:34:44.555261Z","times_seen":895415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.6","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d18b2ccd0ac9b96603ea918df33ae9f","sha1":"860694ebba3acee39d4db64a690359d4002600c9","sha256":"268cae8c2e7a7330526dd33b7dadc1bbd08b039bca4acd70390d81a7ef644767","sha512":"53afc81e7061aa8b603d280a4730dc93b5cd3bde3ab17d9224b4997b412f18f189cf2474fcc890fa919f936699606277107e3bb850070b0bdd8a723dfaf14f32","ssdeep":"","tlshash":"af314766724a5d3a045ec2b72b4baa9fb166958f9441807c703efecf0560dd123e33b2","size":1830,"data":"","first_seen":"2025-10-27T16:30:12.654691Z","last_seen":"2026-06-08T13:06:48.350772Z","times_seen":21232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","size":4776,"data":"","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-06-08T12:36:23.705981Z","times_seen":224794,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.5","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"73c07e9630db2adbba0c6bc0bf568719","sha1":"dbeb1065ce0ea1fc9fa6b9df9e5e1700a8dee09e","sha256":"f4bdadf362076967230901fdfc69c8df84957f6615dec226b99ad2abb64c2c76","sha512":"d48774149b65604aeee68cf2936bfe5c84714bab61a46a190952b595ee79ce8aa2c0549a3755768b3a3615c2b6abe0cfdc69c398a77296b8ceebc69bfea8f8dd","ssdeep":"1536:yuyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:C+uhIAu","tlshash":"cf33d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","size":50503,"data":"","first_seen":"2026-01-29T11:04:52.803648Z","last_seen":"2026-06-08T13:06:48.35785Z","times_seen":28427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.31.2","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecf80cbb272e8005df8aa6ec914a6124","sha1":"5eae643d58d6d99f51474b2bf2eb4d3ad6fa36e9","sha256":"a2467aa115eb2eed954a7f2612c08c1a4f74d660c873528f9fef23a1e4ac4704","sha512":"0b33cc377db797b7741bb0b9e912d798a7decda063d577f28cc380f4f0071b4f9a5d4ddf805be70c98fac9f30dbc18cb86ca8f6fffc8710ee3978f9343a40aab","ssdeep":"384:Qxpy+EVxFm6cKJskdHd7taQtHuGJswg/i+pQDTWmMo7YtDTVHJiMqkoh+vFWN7KS:Qxw+EVxFm6cKikdHd7taQtHuGJswg/D2","tlshash":"9bb2d9013163ac7a50cf815be467420e77378894740570ed7abc6cdba5b8e9a33ea339","size":24210,"data":"","first_seen":"2025-08-10T22:50:09.558424Z","last_seen":"2026-06-08T11:31:44.791829Z","times_seen":5551,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"390d9fb9a07c8883ae3b7f67bf8b2712","sha1":"2894e71d65933f9436b31def60e623d197408a6f","sha256":"47b86983399196577cb5005f72f139ebb0cd192c471d89ee6695818b57a4e9c5","sha512":"ad5c3c5ca5e1d2ccf02d9011ee3594dcfb19b7c110e866a383deb661e80faf3cb647d7f3ed3e8b457b06e4e33aaf82323b39b297cdb81e6b73533ffdede6a367","ssdeep":"","tlshash":"ee61ba9e3775348b32b604d16a3f0e07fb72583616c8d034cab5a7141cb14a3d37ad4a","size":3383,"data":"","first_seen":"2026-02-21T20:18:35.656253Z","last_seen":"2026-02-21T20:52:51.381776Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e434b0b4f43ec7216073eed1f3ffb51","sha1":"8d8a4ab1ed63889095bdf38ba646319b639feabc","sha256":"dd0ec57abf154d52c161fae92db6014f042417d9660679097ae55287041ec52e","sha512":"20978b9f1afc586c91351ef67791224fb5469004a1ebb5af608a05f643103a358e605d2c54cdba2174bc35c266ec963690d5d1fc3f80a045f4c33fc5f67b9ab7","ssdeep":"","tlshash":"6d110cf3b3dd907fbaae6d66193402cd6a1c90735c100a5bfeac3575cc8042538b1d40","size":922,"data":"","first_seen":"2024-04-08T18:49:14Z","last_seen":"2026-06-08T09:27:24.637869Z","times_seen":217135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","size":1348,"data":"","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-06-08T12:40:05.676549Z","times_seen":105872,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd964b6bc8dc1ee4b28031255b5dcd6f","sha1":"4dfceec334a558c310ccb9b8e43af883af990ee1","sha256":"6389a219b8e8788e00ea3b1113e138781e1f81126180ce2ca326f533eed99ebd","sha512":"c684bc23ad57885d39833e38b166dcba34f705e9cefaceed0ee02a246bdbd2b28f7cbcb4b93ee2cf245fd5500a91229dcb5f01928f94f3e677960cd0596f08ed","ssdeep":"","tlshash":"8a51c624b9456e7f43e69bc4ba13bf03a8bc0527918178a8f4fc49ad05fb8643207e47","size":2862,"data":"","first_seen":"2026-02-21T20:18:35.657964Z","last_seen":"2026-02-21T20:52:51.383249Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.5","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"883a3e2185da852f4ac19d9dfe07980b","sha1":"67320a1df0d605176054ca2ff86b18ad1caa96bb","sha256":"529e8e21ae7e2becebfc8b809e0137e68546d7c9a1b2bde77755897878590406","sha512":"978f820b79fda69e8eb814b078199f262b71882e762fbedc4fb917182a6636cfdf5e03f8e43f2c7cf0258d5a616d03784db406cd2c398024f546b8c41e4bbdfb","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDgUl8OWZp5Rm4leNzwVeLyVU2j2KBKGarNcl8/2:JsNGyrjiiNg5RmH0IW9v7G/2","tlshash":"e6c163981a54fd2b31e139d8e01ba734252ec0373c1af981fa31eced64e4ed187aa531","size":5677,"data":"","first_seen":"2026-01-27T11:31:27.113729Z","last_seen":"2026-06-08T12:23:36.453467Z","times_seen":12212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-06-08T12:37:20.803502Z","times_seen":298890,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d30f13da1f424ee0383b76edc55881e1","sha1":"7e348a5f57ab13eedbc4ed917cdeee5bb9f9bd46","sha256":"cf01a621447e67a81629bc28276677c86c48fd72c44cba83a82448574aadfd60","sha512":"06571ea850a1ff105d50dd65340b1109e07dba2915279d549f0880e161c5487e0462e63f5bcf3daa1feb9ebd6fc00f84d552fb806f5f5405ebac203f097b89b8","ssdeep":"","tlshash":"daa0244530471400c04dc1504d13fc00041010c7034fc50435d05d30d550440744331f","size":68,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-06-08T10:20:59.133927Z","times_seen":118649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4130430981a8072d3546e00408df209d","sha1":"fec723c2fa47bee6337fea9ef171e799e87d58f6","sha256":"210a29d71746a3b08ea3e22e5bb95e29e95c28e9045810840fff753f8aef457b","sha512":"bac7f4f257e3e90c057c4ad0871fba1ee37f50f293b53f8c7ad776422d3f2a1368e49cd8fd6f1caa9170ce7bee9d75820ee9b38b126d9684f8043175db4c25f8","ssdeep":"","tlshash":"6521ca161b224e2447aeabd831c63eaf48d1033366c4b90c13a9e06201ebcddf00b2e7","size":1281,"data":"","first_seen":"2026-02-21T20:18:35.659618Z","last_seen":"2026-02-21T20:52:51.384609Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ddef922307bb2c757124d17978d14acc","sha1":"068d58172c4b76c2f30ccd8426b67f12cca8bc06","sha256":"96b08dc9f90d07615b8f914c52369f084ed1eaa59db26a32247efd74168dcbd6","sha512":"f70c7256fd569e12613e6a24ad1d42538bd071711bfca7f0c8646ad2160e1da08f033db6f38d46fe72ec5897a1705b8ce0d3f7bd98d084cbe288b29b4ff3f6c9","ssdeep":"","tlshash":"2941cbcd779729e184bf08a6b5bf4879b8e92087a44cac02381d46e01fb46383e4857e","size":2221,"data":"","first_seen":"2026-02-21T20:18:35.660695Z","last_seen":"2026-02-21T20:52:51.385313Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","size":9141,"data":"","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-06-08T12:36:23.678442Z","times_seen":254626,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.5","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ceb183b138eac316a5cb0741ec23696a","sha1":"c9fcfc71c8f7229d96289ba702eeffc7827bd7e9","sha256":"2464e81935f8e354704bfd7c9dc5b722b7c2c3456f325be881556bf351f762e0","sha512":"7fc177991c5640b9b0113881747c7af234e6c7cfdcd5ef6d4cb4e3e9b6823499183071a398c7e505b8796028200107ec83fe3194512cd6ba1809d4fa33ec7cfd","ssdeep":"768:D1c+6idHZRdPM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5Glr:ZcURdPMMBOBjmFatJR8RjD8/xHVlEEnV","tlshash":"61e208523296e866069f48a3f0231119f3765dd9b80bf0d5b2bcdce6a471e877362b34","size":31880,"data":"","first_seen":"2025-10-21T21:24:49.242369Z","last_seen":"2026-06-08T12:57:50.817771Z","times_seen":68128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb7b0ff21ab468b63ea1175807b1fc0b","sha1":"07fb281112ce3322ffeefc29e0b8349901fd26bb","sha256":"1161089c1e766b4b5e21660df24aa855c106961f84e56a58058ae51fd3657fc6","sha512":"cd7d87c33f8a8c33a5700ce5cc6a3e7812dd63c69dac2a8f307b0bb06e7ded908ffbbda3379594d8e1bc94654ab38f0fe4d88f366ee29c85ff51223b3e095dc6","ssdeep":"","tlshash":"a341fd50f37e9598e1bb143d803e22de7c3d58b92440ee827c6ae9142be0b491bfd721","size":1981,"data":"","first_seen":"2025-10-17T04:25:29.878162Z","last_seen":"2026-06-07T13:03:09.738176Z","times_seen":501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.31.2","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b1e4ea934ae31a60c0b66ad172f0980","sha1":"59e3a242b9dc383309a234e99fb4f53320cc48ba","sha256":"53880e82fb33ea08b7ff2de3b200a72f64ee035a76c7254045dc82ab04da067e","sha512":"723905055c0e80739f474b72a2d347996bb453f5cf8c75f6fb118c9034e2dd1670558e4ee3e68afbc7d5b8aabfd634098b6bf0662bbb115d1690597be83cbf14","ssdeep":"768:W/bt9JJD1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdVdFg7y:Yt5D1+WE9A5yLcWJ9mBtIoERuWfRMBKr","tlshash":"5513a511716aca6945cf84abf463164fb7225cacf413f0e67afc8d82b464e87a394731","size":44670,"data":"","first_seen":"2025-08-10T22:50:09.603161Z","last_seen":"2026-06-08T11:31:44.796706Z","times_seen":5525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/16.0.1/svg/2705.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 19:44:42 GMT","end":"Wed, 25 Mar 2026 19:44:41 GMT"},"fingerprint":{"sha1":"8F:9B:8F:03:41:B5:80:0E:25:D1:4E:CC:17:8F:AE:CC:07:2D:12:90","sha256":"9C:0E:06:15:FA:81:A9:AD:A3:69:4C:1F:54:C7:64:DA:9D:26:0F:E5:D6:E2:77:5E:AC:1D:27:17:D0:CC:E5:9C"}}},"request":{"raw":"GET /images/core/emoji/16.0.1/svg/2705.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 482\r\nlast-modified: Mon, 26 May 2025 15:00:56 GMT\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 22\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":482,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"212e30e47232be03033a87dc58edaa95","sha1":"4d69c4a3dc57503e08b76c774135bfe83e8b1f51","sha256":"1f026beb67630abcdbc341651b1c17591aa76261296a9fb118793765964eb4e9","sha512":"13f153263dbf35f91793e8f3fe7249ce87c4854620c2d97f79646c70bbb2f71c5c3759496ffd101fbc6ef9657b19595fe782200649a96473becd1ad7dae1f72e","ssdeep":"","tlshash":"22f00e24a37296804862c2487ff439e1280923b9110014ba6507971ce08f1ab700a888","first_seen":"2023-04-17T01:55:30Z","last_seen":"2026-06-08T12:28:44.046146Z","times_seen":7164,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":128,"dns":17,"connect":8,"send":0,"wait":8,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/elementor/css/post-191.css?ver=1769155369","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-191.css?ver=1769155369 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 158\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Fri, 23 Jan 2026 08:02:49 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2XLJyA5NOw0LyPutFOBcq5ehU4%2B1eFKQSu5%2B89A0n%2BbDlCLqT%2B6myLHJmkigTntmi0O%2F%2B%2B15%2FY2hoDk%2BDOPwnuAO8hUWQic5Z%2F7NAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac79539ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":382,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (382), with no line terminators","md5":"f7add533a5e8fd11d3298dd90fcb2a20","sha1":"fabdcec4165e1a0576a8498d8918dd9d0574c2e0","sha256":"29ffaa46993bc0bed556763862ae2fd11c5c8f90ea6a18393589e8b827074e75","sha512":"70af60e54046b6ee63e56a181f5241dea406c9c275f8aea449231eb1632d08fc05a8367c64e41e4cd984417ac5dc8e9b375b31e359d9d5de5da28497c8d0c3c1","ssdeep":"","tlshash":"86e0d8ba3d4703a4217fc1179023e95c833208ee940267b8f85a944700ff85a7642e06","first_seen":"2026-02-21T20:18:35.611614Z","last_seen":"2026-02-22T14:49:37.709469Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4678\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o4%2BTb4yOlrecsYbVhGKRZ1LNy%2Bc%2Binyp7Hu43Uhmptmw8ttTHD1%2F%2B6Hdy4oEAqqj9fNFs61LjCoe8mTOsnRoCq96MX61bkqkSZyfFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac89589ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-08T12:34:44.528973Z","times_seen":825305,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/2025/08/Baby-World-Liberty-Financial_certificate-1536x819.png","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/Baby-World-Liberty-Financial_certificate-1536x819.png HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 321182\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Sun, 24 Aug 2025 17:31:28 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G6JkrxOMykw09oHr9A%2B45PFa611u9EMev0ORZkG1z6tdEEktC5ETlIsvjAHRMgO2UOnlq9VJo1DwISNhzEy78JGXhmu4EFwdmS5x1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920aebaa99ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":321182,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 819, 8-bit colormap, non-interlaced","md5":"955e982cc39df4e3637ae8dd9570ebc3","sha1":"a87be62c0546bf38d90f540bd715ed44a94be142","sha256":"d01edfa2a1e2255c1e1bf1f17021d5e33c1ee8b51320c598990044999eb1c019","sha512":"8218bfe902709792aa0345db3ba1c8c734197ab28f2bf5e54a24874945d14af5ed2fd2c87d901bcdd0fa394debde072f2bfcffdc844c45cae9e3d81aa8349c11","ssdeep":"6144:hodZzKKcUzCa0xQXb0XUFU1xPkjVVfRkAHZFSkmTZN0jF:AZNlzCLxQXYXUFUyPRkWZFSVg","tlshash":"c464237169e215f8fb7510b7a29682578b3cb836a3ac0235417a76bd1cc7ff4ca04d68","first_seen":"2026-02-21T20:18:35.639773Z","last_seen":"2026-02-21T20:52:51.345344Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor/assets/css/widget-icon-box.min.css?ver=3.35.5","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-box.min.css?ver=3.35.5 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 356\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Wed, 18 Feb 2026 04:12:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EoywnCMewipDXlXGtwiUct%2Bbcvo6RMrfmzfkKtthqBNL14Ndu6KvThmlcjLg8qJmdYpHYT9C1JdDPD%2Fq4LBsXY87DIPb0QYzqstG1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac794e9ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4726,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4726), with no line terminators","md5":"c5fd583e176fa5c734da0599bfa3dab0","sha1":"cb5471dfa3e203d47469046bc1533a7269c5e000","sha256":"398e2425ac154b75384c55af3fcb40cf68ef50e15714b9dda11bf54ee0b9fc35","sha512":"666a401784702b993c79d2868133b6a2541e283054f82c01ba510aa21070135259a6842ae45eb7d0a8502d2910a30ecc52f12104fd32afa83913e6ea916c4240","ssdeep":"96:jm1PrPhP7VSPdiDPvmRpwPRAE3wBfPJLFZkPhO:jm1PrPhP7VSPdiDPvUmPV3wBfPJLFZkE","tlshash":"53a1910238d32002192f951f0a53291c557588d8dcdbb9a6f862e7169bffdca376287d","first_seen":"2026-01-07T23:29:45.243297Z","last_seen":"2026-06-08T13:07:51.656569Z","times_seen":13678,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/2024/12/6709541f0af3ea70f53954c4_X-1-p-500.png","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/6709541f0af3ea70f53954c4_X-1-p-500.png HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 15038\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Sat, 21 Dec 2024 11:52:37 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BxxXkZ9kY4OybPfQXTNQx9mZvFHmqCC3ZMvJXc%2FeiQYL1UHhK6K%2F3SwKZnYTE0wDdF1u96jYVcYjiXXQ%2BBttsCO605RcaL4n1ubWkQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ae9a9e9ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":15038,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"17ebf374f5c41eb12945c85795cef539","sha1":"dd13c3904eb279e64995a27bc94aee272bf63b3f","sha256":"72ad41e675e385ee7d1a64483090e52bd38fe7fb25ad91b904cceb7ced9ec988","sha512":"00b34c2e37b23eac82913c989cf6c20c800231eae18c3cbbd8ba89b5a71e281c919116c68d7dd930c4d7e21a23cb8901ef377e24aa7c1fec4fee21e00b1afb15","ssdeep":"384:7GczQMN2c8PpWhTIM89q5ugyCVmUvG4odhjHLyR3:Zzfo3hWi25ugbV3QjHGR3","tlshash":"fb62aee40d62e3225285ab90e6a0c9530bfc9c7c6d7fc20e9164f90f97bfea40925624","first_seen":"2024-12-04T01:10:59.412303Z","last_seen":"2026-02-22T14:49:37.70113Z","times_seen":5,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/cdn-cgi/rum?","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:29.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1018\r\nOrigin: https://babywlfi.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1018,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":1357,\"startTime\":1771707147049,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"2df73974-bc8e-40c0-a7a3-dc2fc7064022\",\"location\":\"https://babywlfi.vip/\",\"nt\":\"navigate\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":1538,\"domContentLoadedEventStart\":1546,\"domContentLoadedEventEnd\":1552,\"domComplete\":1860,\"loadEventStart\":1860,\"loadEventEnd\":1860,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"h2\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":28,\"domainLookupStart\":30,\"domainLookupEnd\":132,\"connectStart\":132,\"connectEnd\":172,\"secureConnectionStart\":146,\"requestStart\":172,\"responseStart\":984,\"responseEnd\":984,\"transferSize\":17449,\"encodedBodySize\":16249,\"decodedBodySize\":82655,\"name\":\"https://babywlfi.vip/\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":1860},\"siteToken\":\"a4200e56168046c9a951fb0e25b34d42\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://babywlfi.vip\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZZCpoWFaOOHhYW%2FV4I98ShB3gGu5CQIMhUJ7AHk2bNK4r0oprHajdBr3kMqL%2FlsOTCP6hVbP%2FhaHj1rOHH0F9CaIfb7sSAFLYnN7hQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 21 Feb 2026 20:52:29 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d1920b14b129ade-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 6812\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Thu, 06 Feb 2025 17:27:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wNVbcxH90%2Bw%2BWL4iAIfMR8U03toROM1ZJjkYzZjeHJ2uDwfvoSzqq0dSZVOzvD2wYhseKtNX%2BSD8vyTZ9vq2H3xz%2Fk6dZOWPff%2FhVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac99649ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-06-08T12:37:20.803502Z","times_seen":298890,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/2025/08/uniswap.svg","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/uniswap.svg HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3705\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Sun, 17 Aug 2025 02:47:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2FcTneeqCzXe0%2FUDOex%2FcO4MJWBdMKBWFX1w5%2FWZ%2FLmZICFVx268kMbTkpGDPXxoFU%2BjkW0KJgSdPUa5kcFqaQI%2FGwqbXRayIhWuqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ae9a999ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":8270,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"58a7374bf314fd5d644f3c0c19cfe4e3","sha1":"1900f89c23d7b1936516271830eb9630b656e133","sha256":"26f4be45a8a1cc97528d58440a80bfcaa4addfa87b1a7d060ca36918d95d835e","sha512":"49329f6721199ce8b85832d040bebcc18ec4ccfd098f8f45d69b782cbacae24e75fae9020ce287ef1151913ba5375c05bde0521ab7f7cbc88b24aa0a5a063633","ssdeep":"192:rjNk/pDzEq8EMwrNpj+hOp/0UqNyFQqS8ORklTmHCNpy:PNkhzEqtLPNmQUklTCCNpy","tlshash":"f402a6e5b3b8e2e8f142e7f8c623a8313aa62cf97b11c94d83e11c91c26516d5c95c83","first_seen":"2026-02-21T20:18:35.65516Z","last_seen":"2026-02-22T14:49:37.707996Z","times_seen":4,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/2025/08/bitget.svg","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/bitget.svg HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 269\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Sun, 17 Aug 2025 02:47:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IlyCdP0CvcMzz4Aq%2BHnS4k9ej9EmOt413NTTtbZTN%2BBS4duMVVAoXerqkKdMl2HlPJN57dTxPgcYUPfBcUTCwUrOEshbvPFp4IWiJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ae9a9c9ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":482,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"24152fc8ff27792e1764736e1e189734","sha1":"d3085cd0db0efea333611fe4a0a8a2d400126321","sha256":"2206850f40a5d128d075d197ceb44ba1b31852c5a85e429b960f6002ea9795e5","sha512":"07bee460547479b2b68c25922768a0bc2bfc084818157abc3a21c1b3d058071e45f65a1a41036cf13c50fa7bb9df3cac5c351e569ddce9186de23a60771d7825","ssdeep":"","tlshash":"fef09eb451e94250922cdbc14a34f8b0412330d8ab780186f9e00aac6ae468afc92ee4","first_seen":"2026-02-21T20:18:35.651652Z","last_seen":"2026-02-22T14:49:37.714119Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/2024/12/670955e27c5afb836c702314_dextools-p-500-1.png","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/670955e27c5afb836c702314_dextools-p-500-1.png HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 40834\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Sat, 21 Dec 2024 11:55:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2FNvbJV6SXPoxRsO6m1%2FhDhlRUH0prQlHuYOI6vwo4Q3JXLzpiGscgNq32%2Fdwgkhfhkl5o1oYRqwpQEV5Zz8XMroRc8pBgJ%2BTruOMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ae9a9f9ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40834,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"1e96972da531e58ffa3170e609461b0d","sha1":"74e7532b1c6436f606b5ab7e268fddff16dee36d","sha256":"8ae3d5a114fbee0edac05b7c9acbc45f8b9ce39c4004bc8bc6b40a25abe75b33","sha512":"f5f857dae6ae0240c22ca6133d1f12d71b606c5135b42450c058fd0dda196217d2be64c259e9fef7eba04c0914adbf74a4fbc42f9f10ddd44fb70c87c6ebc3fe","ssdeep":"768:KT1F57PNPrF/o/pA2m/NVUPTGP+C+yM1qTjbD1ZflRMaehYuJLa3dcb:SZPNPrF/oBA2iQP6GiKqTjTffdehJLag","tlshash":"ee0301b25d4bd98970da0cefc805f03f953b468f1d1a056e327e79b6a256e704a1cb0c","first_seen":"2024-12-04T01:10:59.414608Z","last_seen":"2026-02-22T14:49:37.72677Z","times_seen":5,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/elementor/css/post-6.css?ver=1769155368","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-6.css?ver=1769155368 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 419\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Fri, 23 Jan 2026 08:02:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lcC6Lw53Ei5spL5J1glefcrfnlvO9up4hmBJO%2B3v79PvXzn5z6ygCxP%2FgIMJmaN%2BxG4NqHS26hlpJWGK43hVqqoDQVyZisCjEmjoJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac69499ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1462,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1462), with no line terminators","md5":"f9fee3d46d2871e6f86e27307c9b7ad3","sha1":"8ee1d6beb74679f599b8a9fd82ff5f61a1466dfb","sha256":"ed0c15f137c70d19ac41376f01b394cb8607e7052b2e7de53bdc60313ee3e4d8","sha512":"eb81ba2ad9c23b4d1521743bc5cf510afb1331c9a8b85aca53f7a06c2b60aa170e55a94affb7a4bde8c63e9da04932990efb232e26507f9d42b177f53d369316","ssdeep":"","tlshash":"d0315745be23e026e07b062fd6c3b42c001cc45f915f8edbf42d8349f9bea462269647","first_seen":"2026-02-21T20:18:35.629411Z","last_seen":"2026-02-22T14:49:37.708768Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.35.5","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.35.5 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 96\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Wed, 18 Feb 2026 04:12:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jlYs%2F9YuiSvKdIrJbA9wOF77TSiMq5I2qlmlph5ttsJYkNj3EUy7%2BHp2dCbvlqfGH0xlZs%2Fo1GzIEOn6A%2FlWdLrEP%2B%2B9qRzQJtSrtg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac694a9ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":214,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"12045858d487a8ae56337b554a5ee03c","sha1":"f002d465c77cc210b1a049da21d2d8dfb4bba080","sha256":"fb8690e594b2f9b841585895d811e8cb839667a1a63963d1a1cdea11e2aa2abb","sha512":"2d50371adad63f2b9b384b10b87546b85344fe46560b65f9321100515c257e6a147e1353946f8ef5c4300827a41ce6641c3cedc82c9f63847874c3aae39485ac","ssdeep":"","tlshash":"b2d0c901792783c6302f896926ab669e39d01dddf246db90aca166165abecc82772160","first_seen":"2025-01-03T10:53:39.937643Z","last_seen":"2026-06-08T12:44:48.076114Z","times_seen":95993,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/2025/08/cropped-mini-logo-1-2-32x32.png","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/cropped-mini-logo-1-2-32x32.png HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 979\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:10 GMT\r\nlast-modified: Sun, 17 Aug 2025 18:50:45 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J4o1531nlODGqjwEpa%2Fcp4uVQ%2F7wwUgT%2FTj5So5FCq5jL7tdeB2AVXBABJEX1fhc4ZAMH%2B8%2BzVio665HrTInWZBc9lnpW0I7t0OiUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920b0bafc9ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":979,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"ab0264e50917777aead1becb170ebf25","sha1":"eeab2e7486e39e66f8b142296cdbfe61fabd493d","sha256":"730e5e62a5979e9ebc707a691cb756894d0b4a430d999f16272e72e2250d6ac1","sha512":"b3f95b70a179ba3dbf31f344c5abc49f3071a7ff974ea62df2713112f7556ed973ec5ae06d4e29824e5f0f281f2b3f643ca9a262b33c7e9082cb570c25ec4ccc","ssdeep":"","tlshash":"d311c8628988f57dec14e1256892d2dc9e62c691ad3e308a2556c03d4538a745c2038e","first_seen":"2026-02-21T20:18:35.649854Z","last_seen":"2026-02-22T14:49:37.722373Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/2025/08/Coin_Animation_T_C-1.gif","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/Coin_Animation_T_C-1.gif HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: image/gif\r\ncontent-length: 4217054\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Sun, 24 Aug 2025 16:00:07 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Q07xz25AhT9lo0ANnKM5G1WRFULR8bRfL%2FcIl%2BdPqaZsbFWTWITG6kxEShPRn28Ck5c1wxAuPjrdCpK8U%2F6oe1kjFJ%2FHVfDoM9iYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ae9a989ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4217054,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 720 x 720","md5":"6fef75d9204f11107f1a5bfa21ee385a","sha1":"3ad9842edbf9e1b1ac8d4301975455db1741a0cd","sha256":"7c47c96cbccd949529b65e9bf4da299ae167b106b76fec9cebf249f482d3be56","sha512":"19c9f83fcd61346bc2ce2f542c1822d9e815139cc1aa1e96941d362b4bc2202aae6e17cc9561a93930c585f1013da1dad5ac9736335d04f10d86ad58f37a2620","ssdeep":"24576:PGOBPZe6rSgXxtFSFg7irxPEpjNf1Jqivwqvk:eOpQ8SgXx2Fg76PEpjNNJ/IGk","tlshash":"fb253305824ac615f95796d09e90a1e722f370fc31ac1bb2352eff87b4d30edaac2951","first_seen":"2026-02-21T20:18:35.653999Z","last_seen":"2026-02-22T14:49:37.693883Z","times_seen":4,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":262,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/2025/08/Screenshot-2025-08-24-at-12-40-05-Blocksafu-Audit-Result-for-Project-Baby-World-Liberty-Financial.png","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/Screenshot-2025-08-24-at-12-40-05-Blocksafu-Audit-Result-for-Project-Baby-World-Liberty-Financial.png HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 34668\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Sun, 24 Aug 2025 12:40:34 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XZgwoZzEhTqoOAOzTWrBkPSNBo0orHv0TjXjoliPaWOrqZT0Q2Tldhq9Lq2I%2FI1y0sIGeqEA%2B8DWFde0HaG8kvnmJP4L1TYr6lvjpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920aeaaa89ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":34668,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 636 x 439, 8-bit/color RGBA, non-interlaced","md5":"8ebcc2b03a03882c7efea17c242a1574","sha1":"bc6df56b1f739dd5ebb87e99d34e6a517820b0ca","sha256":"ef7b3b36d2588cccea8d8a321f287cec6e70daf55ff1f82828c4274a93a8c4c5","sha512":"027431a1c2a5cbbcd65516237b1e80a0ef2cb015d526e217c681192abb7c950cd05532b7e2e90fa2a84587032560a0c7d98748c0acd4fc2c6c780e866ac8ac50","ssdeep":"768:aFFf+8c5ZDkjlwzaOxozGmVHKnQQV/p9Xl7vP+41sJRW:aF8PDkxwzTxqGCKnQO7h11","tlshash":"7df2d023d47d1c23a9a248b605c3b99294a60ae843fcf81ec0d76efd49fc9dcf186110","first_seen":"2026-02-21T20:18:35.648725Z","last_seen":"2026-02-21T20:52:51.356236Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-21T20:52:27.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://babywlfi.vip/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://babywlfi.vip/wp-json/wp/v2/pages/20\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://babywlfi.vip/\u003e; rel=shortlink\r\nx-litespeed-cache-control: public,max-age=604800\r\nx-litespeed-tag: 4cd_front,4cd_URL.6666cd76f96956469e7be39d750cc7d9,4cd_F,4cd_Po.20,4cd_PGS,4cd_\r\nvary: Accept-Encoding,User-Agent\r\ncache-control: public, max-age=0\r\nexpires: Sat, 21 Feb 2026 20:52:27 GMT\r\nx-litespeed-cache: miss\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aCHu7fST1tSA8twQMooM5lmSWxEIpO6sZOkZFmiUr6oWwj%2BLvVk5cM8eA68VeRpL4tfayysO4Z%2BZqYFMNKyYU1bPO4fVXfki0qNC2w%3D%3D\"}]}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=7,cfOrigin;dur=791\r\ncontent-encoding: br\r\ncf-ray: 9d1920a62a6ea0cd-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Elementor:3.35.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82655,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10901)","md5":"1f90c53c712f4058b660baed7d41d4dd","sha1":"77d807b945949017e3d25ee55d16c50ec16eb253","sha256":"83045ea3c064919c540c73c8e58fb00fed32370defe2557837518bbd6d773ba9","sha512":"872770fb4e5db6fae337a193c664e20e37ae052071d2cb5435166344545142d60e9547ee39e4c372e1cc5cc15fa0dda34efc20f8b4892e020d7a1daa73843ed0","ssdeep":"1536:IUapCK0N2nV/vuW9gCCm+ExorfvBRsKPpQAwN0pkgut5:IzVa2nV/vuWJCm+ExoDBRsKPmAU","tlshash":"f883a4717a891829316f43cf9017390ca09aeefbd655a9e5f1f24120a9f5cf132d32b5","first_seen":"2026-02-21T20:52:51.357112Z","last_seen":"2026-02-21T20:52:51.357112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1096,"timings":{"blocked":142,"dns":102,"connect":8,"send":0,"wait":812,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.4.6","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.4.6 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 1126\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Thu, 22 Jan 2026 07:51:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vDQxuiFIewfFBc2k8rtQkKT9yQd64P%2Bl9GOiDU%2BC2FA3unpZ0P7WJg3klIHmadeqHlYeBRGOYKSSYA5FE4pnluVw%2FUdZlZcJ8lljnA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac69459ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5097,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5092)","md5":"a480d2bf8c523da1c15b272e519f33f2","sha1":"385993a72c83ebbf0e0db1ed05112d35bfdaf22b","sha256":"9a7cfe03ec7638180859c5cd93ed18a75c0b4519c01849e2b6b2e2c90a0dea2f","sha512":"ef9f08c2afde47cd53f433079b3bd85c66d5a4f1049f75e472e8f03c5b410854e5d4e98727f5cb56ef8a96d2f9f7a9adcb192203ed1c4677840beb92ae5da05e","ssdeep":"96:yE4yyDOT58u6gYRbFdYrZGu3bcgcMNn7MNluMNITMNd0MN77MNbKz:y4yDhgGbMrM6cgjMB","tlshash":"15b1643ef8d1307c293b9b02bac5ab8d646c872ad35309e8db998b59819e750781334d","first_seen":"2025-06-08T21:36:43.869263Z","last_seen":"2026-06-08T13:07:51.675838Z","times_seen":40808,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1752514725","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1752514725 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 1892\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Mon, 14 Jul 2025 17:38:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=duxYlGi7PeHIhHOk4Y2xdYZP8DD%2FDIAA8YHxRCWkaapfRTYpE06godhl6B5YKwHqL65EGNopYxP%2Bt9gA8lv4sDTwMO9QaLYJzzmz%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac79549ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":111780,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"a432aa7e8541cba823652890b91600c4","sha1":"1b1f759c28df01bc6be212fc96ec373fcca6c1cb","sha256":"ecf4b5ef3c2c03db3c64d825acbf0dc4508c8bb86fc80bca97650729c6fb1f5f","sha512":"47db83056842cdabf827bf5e940c3ce1f7bb8e1ed14854668a5fe378113fbbb8f0bf101c00f3167884d77852fd0f4fe4f8395402853ea7e3f79ffb3f657c912a","ssdeep":"768:y5xUZcBYK3DrLUQ8hMe8H0csd8qMtezL841LiizdJcP/lunJRIHL1qE:WBwT69UPOlo7yt0nO5H","tlshash":"a7b3629104070501a29b5cd133ce7e28ee1ea161b140d178abfd5babefdbd62226e35d","first_seen":"2026-02-21T20:18:35.602802Z","last_seen":"2026-02-22T14:49:37.726037Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 592\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:10 GMT\r\nlast-modified: Wed, 18 Feb 2026 04:12:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BYILx6rQb11snIpPzVyuIAwSYCJQKxWIwAKInINlEjAQ0TMxwC%2B4N46oGibgNx%2Fs%2BrH4hfOP5ApX4o6AE5XzEoTndARURcVZSOqUpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920b05aeb9ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1348,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1348), with no line terminators","md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-06-08T12:40:05.676549Z","times_seen":105872,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor/assets/css/widget-image-box.min.css?ver=3.35.5","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image-box.min.css?ver=3.35.5 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 297\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Wed, 18 Feb 2026 04:12:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wijn5cn3fQdxBV3m9hldBepl52UcttWcgAeZ%2F8Hzny2s7N2faJ%2FPIzbdyBkgzn8edLtsLU59mKYBxL6uCyPE%2BEDnayYOWHNDxLfuBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac694b9ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1657,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1657), with no line terminators","md5":"c5633b9e0526503125e387d5f42543ef","sha1":"92a9fa314349f364104e5ca5bd4f52fde0530165","sha256":"7738ac41dae333c277ec1132c7ffa496457af424a623cbf02b56fea00adaaf1a","sha512":"e1133cb93373e602894a12ee6baf278dcf3753780401d4c6d8ee90599a2eeb8a7faac76a4c4b409ef40bae967452eb9b80816a8259f168ba34020cfc20c024ab","ssdeep":"","tlshash":"843130c13c5b5457241f5b2f305f258d64a24cd8ab97e796e892a20706f9ce43732c5f","first_seen":"2025-12-04T23:21:35.463704Z","last_seen":"2026-06-08T12:23:36.402547Z","times_seen":9385,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/elementor/google-fonts/css/sora.css?ver=1755397094","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/sora.css?ver=1755397094 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 409\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Sun, 17 Aug 2025 02:18:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DDLuUdO9%2FdxnDsnlZi3Yyo3QbfACv7CUA6OuV0hoOhZ%2BTPe7hJrSMo5J3u1AFsyGYRnn5E6jQTE80LM1Z45sW%2FzKObz9157fZas3rQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac79569ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7632,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"83a687c8f6490e011c04ea9a4f6e9990","sha1":"2b8a54d22325964178c8f27b57fcc044a50baad8","sha256":"580c62080839250c0527cc36970ebf4677a3ccb85bef38cb0138c4778c50447b","sha512":"60d2837f90cf07397415448f457aeee7e2a00b881a541e21baa2c8290aa13c88a1577e1b75d9c359e54e8846d93ffcb4c0def4af76cab4696a71a3d8da365ab3","ssdeep":"96:EOS0aXRJc+uoOS0aX+NlO6aXRJc+uoO6aX+NlO1aXRJc+uoO1aX+NlOEaXRJc+uB:gpxLpHxsgxztxSuxBLxokxvRxeB","tlshash":"f7f1ed9008575600d7a75dc072c93d2aee2e6096b045aa686ffb14dcfd9ec0a631371e","first_seen":"2026-02-21T20:18:35.633942Z","last_seen":"2026-02-22T14:49:37.72839Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/2025/08/logo-web-2-1024x205.png","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/logo-web-2-1024x205.png HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 10993\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Sun, 17 Aug 2025 17:32:45 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VRPSUtDiJfCjfWmzykOsSsNCLL7b7anbE%2BiZ5JYtvq3CL9%2FYXNNKH639chn8MlSuupjgwo1jKxUGuxxi%2B4qccDbFx6e88ROcbqxNfw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac895a9ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":10993,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 205, 8-bit colormap, non-interlaced","md5":"c5d2de52399af6573267ec27118c41ba","sha1":"51e19fc84bf538000316b729e3a021d52d297def","sha256":"c12bc08df88b1cba4b7141f1853c8ec8f9bde97de561e9205365af7052ea1dac","sha512":"1ea96f933898831a52c3609acf6459c238e908a68d2b4a362a9ed4399ef88b2a08a5b4591247ecdaee4ad5e6bdb276d89412c0fcd6230fe817456aded7cc22de","ssdeep":"192:0vvshET3VhAcFxOrc0KqayadJOq1TjQSgEAaNazR/gEG:oEmTjA0x6cFyZED7NaCv","tlshash":"d932d0f31f910b29c6d0433b6af8d16bda342f3059a305ce58b2fb16c3a61e65261f80","first_seen":"2026-02-21T20:18:35.636623Z","last_seen":"2026-02-21T20:52:51.361938Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/2024/12/6709541f0af3ea70f53954c4_X-1-p-500-1.png","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/6709541f0af3ea70f53954c4_X-1-p-500-1.png HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 15038\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Sat, 21 Dec 2024 11:55:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MLMQSRkJZyQX9uY3BLPvVVMS8zwxYS68h0zRvHqyBa3wyXzLd4kGrDvzAY8RwjFsd%2BXALEVvf8FYhi0XgLy39pBig7Hb5Yaoaz8LZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac895c9ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15038,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"17ebf374f5c41eb12945c85795cef539","sha1":"dd13c3904eb279e64995a27bc94aee272bf63b3f","sha256":"72ad41e675e385ee7d1a64483090e52bd38fe7fb25ad91b904cceb7ced9ec988","sha512":"00b34c2e37b23eac82913c989cf6c20c800231eae18c3cbbd8ba89b5a71e281c919116c68d7dd930c4d7e21a23cb8901ef377e24aa7c1fec4fee21e00b1afb15","ssdeep":"384:7GczQMN2c8PpWhTIM89q5ugyCVmUvG4odhjHLyR3:Zzfo3hWi25ugbV3QjHGR3","tlshash":"fb62aee40d62e3225285ab90e6a0c9530bfc9c7c6d7fc20e9164f90f97bfea40925624","first_seen":"2024-12-04T01:10:59.412303Z","last_seen":"2026-02-22T14:49:37.70113Z","times_seen":5,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.5","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.5 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2257\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Wed, 18 Feb 2026 04:12:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3cJx0Br9sXpv78zRtPYpsNR4X%2FC5mAFswF%2BSubnkDzQxmVJ7cQv6G%2BKXiRGmQFnfaulhLr5K3T5%2BZzUpau%2FTfEg1p7alsZQKSE9fGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac99619ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5677,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5677), with no line terminators","md5":"883a3e2185da852f4ac19d9dfe07980b","sha1":"67320a1df0d605176054ca2ff86b18ad1caa96bb","sha256":"529e8e21ae7e2becebfc8b809e0137e68546d7c9a1b2bde77755897878590406","sha512":"978f820b79fda69e8eb814b078199f262b71882e762fbedc4fb917182a6636cfdf5e03f8e43f2c7cf0258d5a616d03784db406cd2c398024f546b8c41e4bbdfb","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDgUl8OWZp5Rm4leNzwVeLyVU2j2KBKGarNcl8/2:JsNGyrjiiNg5RmH0IW9v7G/2","tlshash":"e6c163981a54fd2b31e139d8e01ba734252ec0373c1af981fa31eced64e4ed187aa531","first_seen":"2026-01-27T11:31:27.113729Z","last_seen":"2026-06-08T12:23:36.453467Z","times_seen":12212,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3542\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Thu, 15 Feb 2024 16:53:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ere%2FrOZ4TIclelLcFY3wE%2FlnoaFgJ%2BB3RDXjXIhF9P%2BUkK9t4BJ207kXoitqYcaLNgWlwTSCKRyjTD6z6NPv20QytmSeUJpHFPXLMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac99699ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9141,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-06-08T12:36:23.678442Z","times_seen":254626,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/elementor/css/post-20.css?ver=1769155369","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-20.css?ver=1769155369 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 3615\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Fri, 23 Jan 2026 08:02:49 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DleoX6LF27KkAMQM1du5%2FhWq%2FZdWM7ycUe0aZ5CBDtUqX5h1gkw8ZCvA%2FdwbUyOSRaSZukdVZCB2K%2FcOdPDlmQIO52n4DuP21zk0BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac79509ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49000,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (30233), with CRLF, LF line terminators","md5":"fde60c9652578ebb39135a66dd03ffe3","sha1":"0879d16d14af7f2e0929161676bf4bdf431b53b7","sha256":"dcc96fb45dd8e6f71da0576975de21443331ae11de10843856dae03061b298b4","sha512":"06dbaaddeb218ceb01a30eaad4fc37552255c6c50bf76ebb473e31c108fb3bfd4f690c736fa58f6509aff9ebbdaf5f2331a417f852df1b166586fdfc4a885bc2","ssdeep":"768:uSCNlypd7XdB2PvDBQLFIVSIom9O/K5btpDEl4I0IRI3VPP3ce7YKPvPFPePvFwm:Nd7XdBEDBQLFIVSI2/K5bk72FXse7YKo","tlshash":"ed2335723e83922d793f145f1017ba9c35a44cc9d66e76c6fa61602bf0fad9137a0b18","first_seen":"2026-02-21T20:18:35.646915Z","last_seen":"2026-02-21T20:52:51.363761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 29744\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Mon, 28 Aug 2023 17:14:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eis1VBcE0up%2Bscj4s%2Ffos8iq3TkU86TCXJpAUmuU%2F0qtvatKBU2TySOoZV04p3KSu2XLobj0pRHUFwtlzCYr3MVqRZNBY7DcsIxBzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac89599ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-08T12:34:44.555261Z","times_seen":895415,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.31.2","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.31.2 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 6281\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Thu, 21 Aug 2025 23:44:09 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=grf446zXQr3z%2FpfbwoYTio2PeD74AEfoBDiAdUjHqRKjTlQqOkT5zO%2FijvMLThfza2Q6xJ3QI8SjCf0Ir09PLWpIZRh8nqyC%2B0gXaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac996a9ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":24210,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24166)","md5":"ecf80cbb272e8005df8aa6ec914a6124","sha1":"5eae643d58d6d99f51474b2bf2eb4d3ad6fa36e9","sha256":"a2467aa115eb2eed954a7f2612c08c1a4f74d660c873528f9fef23a1e4ac4704","sha512":"0b33cc377db797b7741bb0b9e912d798a7decda063d577f28cc380f4f0071b4f9a5d4ddf805be70c98fac9f30dbc18cb86ca8f6fffc8710ee3978f9343a40aab","ssdeep":"384:Qxpy+EVxFm6cKJskdHd7taQtHuGJswg/i+pQDTWmMo7YtDTVHJiMqkoh+vFWN7KS:Qxw+EVxFm6cKikdHd7taQtHuGJswg/D2","tlshash":"9bb2d9013163ac7a50cf815be467420e77378894740570ed7abc6cdba5b8e9a33ea339","first_seen":"2025-08-10T22:50:09.558424Z","last_seen":"2026-06-08T11:31:44.791829Z","times_seen":5551,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/2025/08/image-1.png","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/image-1.png HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 29476\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Sun, 24 Aug 2025 12:50:52 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TvbaTVIUw7gLth8cYK0%2BxVTVylqayhaqF3yUzTZhJtl3x9pxAhpouq0Lr40QTyACuqF2IEPNsxRzA8DO016%2Bjwk6mJVaqWWECebUXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920aeaaa79ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29476,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"276bcc44dd9e54ca466b7a3c602b0093","sha1":"1654e54cfc5aa5dd09d46f34692bd1467482d0ff","sha256":"3979f2a4b9adb9e1d562357debff17a02fd06072867a2275e5e04fdbeec70050","sha512":"b81e000412c03c9217d6b592f3fdfded834b0785c9292c6233c1f96b93a74de1e6ca02c168dea0263ba244e5af1ad288a857112c73b750be679365c2d1ee01c9","ssdeep":"768:EoIN7VBJ2whJbQHdB4+BtEoxLVP8YO6lI:QT0kJuf4+/EYVHI","tlshash":"c9d2e0dba3cf0cd1c11816925bad55c24bcfb5b9ba0426bf08cf8b66d8aa2147dd3350","first_seen":"2026-02-21T20:18:35.607881Z","last_seen":"2026-02-22T14:49:37.712006Z","times_seen":4,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/2025/08/Coin.png","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/Coin.png HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 316633\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Mon, 18 Aug 2025 16:11:19 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FEmP80mwcdgWzId6YlGztrt%2Bb3uINhH3XtOuuCUxN3Xdt6CQfWhl9c8ciOkcWzpCT9IVtVB7MYwneDS0J%2FDAxh6tON8hynr3IYk9Sg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920aeaaa19ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":316633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 720 x 720, 8-bit/color RGBA, non-interlaced","md5":"99e3234f915ae66cdd512ea6fed9146f","sha1":"5d4317e934f554456e5a0cea2f119d5180465fb5","sha256":"33be3ae1a960b022235889c2dccdeb63e9dff2603a0505b1286be0788f27f6eb","sha512":"1a2c9432b02d42b98c825963145c64afcfae3cf59e5d3c99503337858a7bc3b967fa6e7d0fccda416bdf2854d71af6bb0d49542f301cac62b065b0764477edda","ssdeep":"6144:5sJQk6dzMCzA4TumZudxHAufl+MweC/6llb70oBlav2l5Il4oNjK:aQo/4JuP7dDweCcW5g","tlshash":"346423c77bd881eae4b884352e4e9e7fe91af962741ccd301c6ecc9647f950e4611781","first_seen":"2026-02-21T20:18:35.616197Z","last_seen":"2026-02-22T14:49:37.703028Z","times_seen":4,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.35.5","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.35.5 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 6613\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Wed, 18 Feb 2026 04:12:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BHymExCcHalw30%2BOyf6tInKGfG9GyegHut7a9izzIvBTxnvGA11Mal0VcdN%2F873l0EKxEI0I4l7%2FFvxLBMxzB2DhdspvsK8DdMcHlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac69489ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":54666,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (54666), with no line terminators","md5":"4fb5f7fc5e41f736ec0527b162519d52","sha1":"33697641c940c68153509fa7c9d7d0c3c760ce2d","sha256":"0a5d398672e25dc7f020f69df92a985481b248a60e301fee232d0c8afd648dc5","sha512":"5da1e9708bfdbd38beb7cee98d806ebc84b4d8337ce638a363d28461ebd9fda5189618bfa62167a5261ec2e98b02cb88ee4ff7bd5ecdd2d2facd480965e0c7a6","ssdeep":"384:Ws4J/8DEksCoI+SBQYO22/RmRs5Cz9TQXPTkvmGkvmCFldtraiIks05ArOk:dFLh5mP3RbrlDdps05Xk","tlshash":"17330da23d13b269226f442b82c7364c526499c1ee0375d9f944c523dafece63b36c5b","first_seen":"2026-01-29T13:38:24.653388Z","last_seen":"2026-06-08T12:44:48.033031Z","times_seen":49470,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/unlimited-elements-for-elementor/assets_libraries/font-awesome6/fontawesome-all.min.css","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/plugins/unlimited-elements-for-elementor/assets_libraries/font-awesome6/fontawesome-all.min.css HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 22276\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Fri, 23 Jan 2026 07:59:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=087vZNIkvrzWpaTY67hQTMGyt62IZxXPgFbk69B9HKbnyTrzucW3bJJ%2BgxPgJS%2BAK7Xv6RIFWBQvr1FN5qJEpe7sOf%2FcPA%2FwEF41lg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac895d9ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":104100,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65314)","md5":"8be3c848e72f99aeab79c76db6979c9e","sha1":"7aa7dc0ba41e1a1cab7d6b835375bf1c3228742e","sha256":"c094cf927423e28e616dc3c2313f8cf1ca02809bb7a0646fbb0503eaf72cd484","sha512":"41456d9ac069542cb2408c31548ef504c3b8f3c91f19f5444b11fe4bdaf01c7947f2ddb5f3fb60f32085d36d120ffb79bb4742dc46a060cf6781e406a61c62a8","ssdeep":"1536:ipMEMkMkM1M5MYMAMzMKMoMRsVMRJP3b/i9F1EXSdQpgSLCRM:MJP3GEXSdQiSLCm","tlshash":"86a3b4e4d48d15d9f732c44faf99b37861b6f738d5810ca9f02f590c0ad2aa425c6b3a","first_seen":"2024-03-12T06:56:37Z","last_seen":"2026-06-08T13:03:29.735186Z","times_seen":1872,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/2025/08/okx.svg","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/okx.svg HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1071\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Sun, 17 Aug 2025 05:44:09 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f0eo8CyxTmCda%2BAqGValYBeavRoo%2FRiNQQHvwqy1hQ79HquEpqsJ3a80UKTPpWQQti5%2FX%2BnsCYcwEglykq5zZDB09g%2Boj34YYBYv8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ae9a9a9ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3502,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"59bbe09c3fa398694fe3ba983e644c85","sha1":"4f9228f0dc4b8c69578dd343987820184f8391ac","sha256":"58fbbb05559c12f9a7129af376c1702e5ea410f3b656fd0f78a869ca6297d409","sha512":"c28fb777e2b670d38a5b864198ce46d2be39bc767f28709b5e9ef6f60e654177a585576d8dc19bb172f787390f7da6723ee822e7e8b7afece2ca44c0ef82162b","ssdeep":"","tlshash":"6071fed0128de6d093999ffc155bf13635f618fe6cf94019018f2adaec121af9468ed2","first_seen":"2026-02-21T20:18:35.641562Z","last_seen":"2026-02-22T14:49:37.684285Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/2024/12/670954e4aef22f16242cf753_X-2-p-500-1.png","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/670954e4aef22f16242cf753_X-2-p-500-1.png HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 10453\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Sat, 21 Dec 2024 11:55:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ND9WLngPXuL3A7IvUWO1BCqwe%2BRp9OtG%2B%2BT3hX4GUxKZyKzdrXCPpGuIv4tNyEJi%2F4SKwpKyWYurQQ2BWPgXPsf%2BtF4r5ZdSLZfzdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac895b9ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10453,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"c6595b6a2ce0f9742a28c3f9bf43635e","sha1":"f678c8df121136981107c9783df758afd662388f","sha256":"39886fe6b37da5b98cee20a276d699c452189695f538ebf17e326617d395b5b7","sha512":"8d481b11fdc8c8c79b82c41486e59968819ec8ab84a67d2843d9d80250c17e09a20e70a7fbd45ff7e062475cfd00280ce36c4adf30a7f783df6bff6b4f4df878","ssdeep":"192:7gSkrsmG0uPmRMJ5/lh7RtK9/vqZeYksUaD/x5IZ2swFq:7gS6smjwmRq5thRtKxqZ3nIYk","tlshash":"f122afd9d0056418d01e07a4beb1175c692e0c143cf2e623f524fca9a33f0e89a59bf5","first_seen":"2024-12-04T01:10:59.406258Z","last_seen":"2026-02-22T14:49:37.718535Z","times_seen":5,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.5","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.5 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 15420\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Wed, 18 Feb 2026 04:12:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oOo4MBYZ5DmgmiRTK1UM%2F520t8sA1LQ2Vqyy4NC6Maz5dvKCfO22ipap%2Fi4FIHw2T7S0lTjBAg5qE9sgi79k30ng2kR%2Bq7ddGe7fFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac99629ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":50503,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50502), with no line terminators","md5":"73c07e9630db2adbba0c6bc0bf568719","sha1":"dbeb1065ce0ea1fc9fa6b9df9e5e1700a8dee09e","sha256":"f4bdadf362076967230901fdfc69c8df84957f6615dec226b99ad2abb64c2c76","sha512":"d48774149b65604aeee68cf2936bfe5c84714bab61a46a190952b595ee79ce8aa2c0549a3755768b3a3615c2b6abe0cfdc69c398a77296b8ceebc69bfea8f8dd","ssdeep":"1536:yuyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:C+uhIAu","tlshash":"cf33d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","first_seen":"2026-01-29T11:04:52.803648Z","last_seen":"2026-06-08T13:06:48.35785Z","times_seen":28427,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.31.2","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.31.2 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 10180\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Thu, 21 Aug 2025 23:44:09 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ec9HcD8zRUQhFTGYXyxFabIxQXRZXDxDBzuC6X3Nj43chsn5%2BEqprJksm8s1kHiyAH%2FHajjDNG4DbHtZWYTITw5146t5UA7ZtL6eYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac99719ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":44670,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (44626)","md5":"4b1e4ea934ae31a60c0b66ad172f0980","sha1":"59e3a242b9dc383309a234e99fb4f53320cc48ba","sha256":"53880e82fb33ea08b7ff2de3b200a72f64ee035a76c7254045dc82ab04da067e","sha512":"723905055c0e80739f474b72a2d347996bb453f5cf8c75f6fb118c9034e2dd1670558e4ee3e68afbc7d5b8aabfd634098b6bf0662bbb115d1690597be83cbf14","ssdeep":"768:W/bt9JJD1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdVdFg7y:Yt5D1+WE9A5yLcWJ9mBtIoERuWfRMBKr","tlshash":"5513a511716aca6945cf84abf463164fb7225cacf413f0e67afc8d82b464e87a394731","first_seen":"2025-08-10T22:50:09.603161Z","last_seen":"2026-06-08T11:31:44.796706Z","times_seen":5525,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/2025/08/cropped-mini-logo-1-2-192x192.png","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/cropped-mini-logo-1-2-192x192.png HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 14240\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:10 GMT\r\nlast-modified: Sun, 17 Aug 2025 18:50:45 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qtK105H2c0S4jeFrpFBcPsLFgXP73aJinQ52wNb%2BRUZIb6hCa0VoFQsNnRh1lWIEKU%2BcntrEZFaELXvqprNnqUV2Y4JnxwxvhQz7ag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920b0bafb9ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":14240,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"8b6eeb67c5693df6dde847283f695b82","sha1":"d895da4a1e7023c1b959394238ae22c35e70f3d5","sha256":"d8df7202a4e950b3569abe5eae7ed175404b36c532fc6f61ab86cfd021ac89f0","sha512":"383f0b8ec4a4f6f9ef4baab7ec24631d06b764d7fbf77b081624082bb53f97c2a8c9653c631f7e693244abe133bcee001240c23c60108511e7263924d252c094","ssdeep":"384:qCo2F5xRKnAC32SPL174b9OEFSXpAiscqGxKfP/:q4/RKnV5Ph7w8XpW/","tlshash":"0452b0dc89d9f9d16b0c6e455bf4dcd0b89e6269cac36780b143bf00111ef51c9722d5","first_seen":"2026-02-21T20:18:35.609167Z","last_seen":"2026-02-21T20:52:51.370918Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/elementor/google-fonts/css/poppins.css?ver=1752514737","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/poppins.css?ver=1752514737 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 795\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Mon, 14 Jul 2025 17:38:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LEyeNepmNyxl9kSECgsqsNP%2FDYYEB7TA0t7S%2BA8PO0JnLV3IEphDXAWmXGNbuBnQjWKd8KTD6dHj8XvrJNaZIhqxBFt8YUj1L7zZ3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac79579ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":25331,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b268a392089823376225fe30ddf41e57","sha1":"3a129a7f0a26727de965d27a43560fbb619f0c4a","sha256":"890f770bf36200462bacdc172aeee1684b914cccfd2ddde440a221a851b54d4e","sha512":"d7c9d1a156d1214bcf63218d499f015d8e957926a13cb8eae14d36cf48f1237da7b5659322e5539b28495fdc03308b8bc590bbb6678194eba2467da0241670ed","ssdeep":"384:H3O3S3DLPDEwEuQkxdx8os6Giz37Is9keQBUnB:X+SVkeKG","tlshash":"08b2e0a10c6b9200da9b5cc023cf7d29da0ea155b040e5b46bfe08d9eddac556373b3e","first_seen":"2026-02-21T20:18:35.617284Z","last_seen":"2026-02-22T14:49:37.68314Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.6","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.6 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 493\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Thu, 22 Jan 2026 07:51:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KRBrNnb0CgJ6%2FD76DvqUK%2B7fQhv3EHV3D%2FmN6p4VF2RrAAQ351cRVfEnVPQxrdVIRIayGKeZbLPJLT2sUTtIYPf2GJRrFbA%2FvxqCXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac895f9ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1830,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1830), with no line terminators","md5":"1d18b2ccd0ac9b96603ea918df33ae9f","sha1":"860694ebba3acee39d4db64a690359d4002600c9","sha256":"268cae8c2e7a7330526dd33b7dadc1bbd08b039bca4acd70390d81a7ef644767","sha512":"53afc81e7061aa8b603d280a4730dc93b5cd3bde3ab17d9224b4997b412f18f189cf2474fcc890fa919f936699606277107e3bb850070b0bdd8a723dfaf14f32","ssdeep":"","tlshash":"af314766724a5d3a045ec2b72b4baa9fb166958f9441807c703efecf0560dd123e33b2","first_seen":"2025-10-27T16:30:12.654691Z","last_seen":"2026-06-08T13:06:48.350772Z","times_seen":21232,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/2025/08/UFuWgdxn_400x400.jpg","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/UFuWgdxn_400x400.jpg HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8357\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Sun, 24 Aug 2025 15:50:56 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F3zfwPfjsLA8idyUicjgxrpIhdDzrKBFEm7dBGGPdd3RAwo5qGK0K%2B9dMulitDNk29E0HCn8jXhB7LIYpfqZ3pR3%2BwpWcv3Mnub2rQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920aeaaa39ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8357,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"d1a518d5ba0bf446b30d3e4ff3eb30e6","sha1":"1ec952185375637d8cfcfa00759ee048d1a951cb","sha256":"708f9965d6195825527264994305bbbcdf3508486babcec357634c5060923f1b","sha512":"ac68c591ea4d6b0dfa4c4429c9e54c7f60440632d9664a0d83da88bde357b1e5dd3a28786dd39af45710dc5003d6c7335ab69b1ad394d0dea69ac4fb78b1b816","ssdeep":"96:X894vsZ6Pj491XIxlzFaySALetHCxLwQ4Y+bD7woKKKKKKKKKKKKKKKKKKKKKKK4:smjk1kN0yBytiZ4T7a9IIaV1lciLRH","tlshash":"3f027dbfb74e1508da3d09f706189700fe787e09069f639790a120abb7758e6856c5e3","first_seen":"2025-02-21T08:08:32.737306Z","last_seen":"2026-02-22T14:49:37.720989Z","times_seen":6,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.35.5","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.35.5 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 126\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Wed, 18 Feb 2026 04:12:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ob86Da7S%2FXxD7cmZpqYHcIKfqMhgaNamfhIOCxnSeHajLdP8BpQrafmx5Wh8rz2XjAzt9paaQSKEOr5I2qtcIwDiybZ0%2F4imU%2FyoCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac794d9ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":560,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (560), with no line terminators","md5":"c3be9e612baf8fc4af612de8af4c0864","sha1":"f6b1366e30a459deefca035c5563f1c929c8ed10","sha256":"f68e889145cb0e47b7b190b2fdf087a9213a264ad33951512880c9f8bb6d0cd8","sha512":"aee455fe10d8126deb4d1015b6b4450ace4851e5b32890505af619f7863469c56b788b5d822849986759aa85efde260da77ed12bbb236ce2bf6629bf6759f4ca","ssdeep":"","tlshash":"f2f0c0237e4b94aa383f1d571083337c74944ec893a0a8d8e9fa91435cf4cb27330622","first_seen":"2023-10-14T23:00:09Z","last_seen":"2026-06-08T12:44:48.071296Z","times_seen":99340,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.6","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.6 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 1581\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Thu, 22 Jan 2026 07:51:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rNryqhUcIq54Qx0sTFO75OkyTUNT%2Fz%2BWw1QIWdXAjg9hKQH%2FvS9mWsNzfuppQdYBIqsLkgeX89ZHlVl8L4vMbXCKGLGcphF%2BB7fAXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac69449ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5456,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5455)","md5":"af4b9638d69957103dc5ea259563873e","sha1":"1d048e10f67e855fcef131c910f5e46972181596","sha256":"2f01a854a759c0a6a6911634e4ae5283b86a054908e4587c1fd17561fe4ce3cf","sha512":"434169ae8237d9417f43ee48a8ed3a372c64f73d5e189f5f23656f92a9f2d3c494e07875829341a971ac7aab68472033e8dca833bc37f53a83159fde9a512365","ssdeep":"96:vS+FXXYXqXXXNuoSA1C4pIGRhPCZBG9Hzk09ETReQWe0OhHTZZkUg/2UpGE:vDFHoyHNuL86+hKZBG9HUXhz/ad","tlshash":"b0b15363971031497537c83636d17e947e226215c8332ab4e426aafccbce4275a39f9a","first_seen":"2025-06-08T21:36:43.859934Z","last_seen":"2026-06-08T12:57:50.841532Z","times_seen":39869,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/elementor/css/post-8.css?ver=1769155369","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-8.css?ver=1769155369 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Fri, 23 Jan 2026 08:02:49 GMT\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w0JHU4mU89TLdPGJ%2FcmqNFKZ0Hzqqrlz3xTbxKyZVfdZbyESk2lUWiEjKa69ZFTFzayphpHLif81lxjJSDwpxgyzCKll%2BmPUg0ji7g%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9d1920ac79529ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":158,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"c0962ca4059ae0722114de895fc9f647","sha1":"c64e2d53388805929ec4b5a6a13ade0961fd29b1","sha256":"ccd0d983c2787aef41c15947153e7a6361af7e133011ee4570483fe2544a1d60","sha512":"93bc05f6053413ebcfd2f201465c89d72928e3c33b719be6a06a8df5266ad1ffe0530fb2c62d2bc839b451813d889f3519627e934198effae7327d208e806db0","ssdeep":"","tlshash":"f3c080b67d5b17e00377c50355022f18812264e5c00329f4fc4dd14904e650e3641e15","first_seen":"2024-12-19T13:11:13.23991Z","last_seen":"2026-06-08T11:13:33.855353Z","times_seen":1363,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.5","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.5 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 10035\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Wed, 18 Feb 2026 04:12:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PAEt3N%2BxTetGbrM34g5UAFYhd4HeRZOqEVxttmt0I%2FGBhPs6DTiztdTaiiL0uyuWmumMhKSQDqfhDNNFONo5OA9nFjX%2BXDTX95IFXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac99659ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31880,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31880), with no line terminators","md5":"ceb183b138eac316a5cb0741ec23696a","sha1":"c9fcfc71c8f7229d96289ba702eeffc7827bd7e9","sha256":"2464e81935f8e354704bfd7c9dc5b722b7c2c3456f325be881556bf351f762e0","sha512":"7fc177991c5640b9b0113881747c7af234e6c7cfdcd5ef6d4cb4e3e9b6823499183071a398c7e505b8796028200107ec83fe3194512cd6ba1809d4fa33ec7cfd","ssdeep":"768:D1c+6idHZRdPM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5Glr:ZcURdPMMBOBjmFatJR8RjD8/xHVlEEnV","tlshash":"61e208523296e866069f48a3f0231119f3765dd9b80bf0d5b2bcdce6a471e877362b34","first_seen":"2025-10-21T21:24:49.242369Z","last_seen":"2026-06-08T12:57:50.817771Z","times_seen":68128,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1571\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Mon, 30 Sep 2024 05:11:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j3IsHU9PqJ3WyPKTbmu9IRKEwyicKjCrMRZaPeFQpePuxlKLNNFKf5xHehy2TtBMnOkvowdznImjam14DPhBeKZcCd3V1bxAhgyhLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac99689ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4776,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4741)","md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-06-08T12:36:23.705981Z","times_seen":224794,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2511\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:10 GMT\r\nlast-modified: Wed, 18 Feb 2026 04:12:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hTH9D8HCm6Lv6Gj1cgAycV8rFEz2%2F2Hf3lmmJsRBOyC6TpFWuRbF6QxEaTgtfCLmr%2FuQdLJvU7GtZdoFyioLbctY4p9vq29E6FCffA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920b05aea9ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":8481,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8481), with no line terminators","md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-06-08T12:40:05.697613Z","times_seen":124077,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":86,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/themes/hello-elementor/assets/css/header-footer.css?ver=3.4.6","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/header-footer.css?ver=3.4.6 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 1261\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Thu, 22 Jan 2026 07:51:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qv52LD7KZrZIrgkle8Xb5%2BxskSsXq5TkEeMpCliU%2FV8S6APwAGsFb6RQn0aYRP0ZdnlPRMXDrDj%2BqIGH48WqXaSduFjiolOO%2BRrv5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac69469ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7182,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7179)","md5":"86dbb47955bb9db9c74abc72efb0c6f6","sha1":"66e008f8d28438934133a914efc7a40bd9fbad5e","sha256":"5052c28c33de995612b9c064753ee989d1e7755027e2b80292148728f444ec8d","sha512":"4a17290a195e7ead6048fa07dde958455f508f57d3c147f49cdfd32db655b8bc19e0b476611bca8b1a1a7eaf4df88185a861b74aab65366175701809defd6105","ssdeep":"96:3dOg5c2yhjF8MsobtKv1j3ykM0UfU5nJzyC2sy6ZM3zzirdae64Qf3mfOOeZhYD:F/9j3EU5n1lJy6ZNZaL4nh","tlshash":"88e19f67f8f2317813378223a7d047aea07ac10dd807aba551ebc31b05db45227a7f69","first_seen":"2025-04-10T05:14:02.600959Z","last_seen":"2026-06-08T12:57:50.880821Z","times_seen":40756,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/unlimited-elements-for-elementor/assets_libraries/font-awesome6/fontawesome-v4-shims.min.css","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/plugins/unlimited-elements-for-elementor/assets_libraries/font-awesome6/fontawesome-v4-shims.min.css HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 3829\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Fri, 23 Jan 2026 07:59:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5yksQWT%2BJdQKqVC0zD%2FWN%2BTysjqIMSGhFcxHal2lzLLTERfsoRDDHBRUMr7H1wxy3Joqq6XUZEKGjxAREdFbUEalRQAoBZanqPIJ5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac89609ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":17526,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (17309)","md5":"581d8f457851efd51aa67bb59be8bcff","sha1":"bf69870bcd22cdc0e87a1d5afa9e3fd0da2a4f7a","sha256":"b2a642b7b0d620d80f0c2a05dc3bcc8d173143496173c2cf2302242d4ad10d5f","sha512":"f088163d5a0fca5be8fb8eeabc2bf0967804e538ce590b43584e57beedabd91d1a327c88abab4ecebbc3a3a5fb90fb7fa83e2a80fcf25ed21d815f9f9aa5aaeb","ssdeep":"192:HP6sjtiDHup2kdbh0WhemPqUOPfeu7ZVkPwU0PSHZfoK0HGXBhL8kbt:iUoOpL0QZPqUOPhHkPw4ZAxH0Ykbt","tlshash":"c572cae4e70c01d7a32cf44beb51b22863b6b73dd5814c98f02b794c69d329672c5b6a","first_seen":"2024-03-12T06:56:38Z","last_seen":"2026-06-08T10:14:15.34603Z","times_seen":2404,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:29:28 GMT","end":"Mon, 18 May 2026 15:29:15 GMT"},"fingerprint":{"sha1":"8B:A9:51:50:78:B2:5E:75:31:54:23:BC:80:D6:CA:53:34:E5:CD:8F","sha256":"AF:D9:FB:4F:B0:E1:BD:80:DF:22:93:A7:4A:99:5B:50:0A:BE:47:59:37:98:C6:BF:C5:DF:8D:8F:F0:8D:FD:23"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://babywlfi.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9d1920acca1023eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-06-08T11:03:48.468645Z","times_seen":337341,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":79,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/wp-emoji-release.min.js?ver=6.8.2","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.2 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4769\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:10 GMT\r\nlast-modified: Wed, 18 Jun 2025 01:53:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MDIiKJj2EFkojj0j0TXN%2FHWah6sMa6v68nBUpc6cGI4FGw57cylDLJjLMk5aWtcLwXnZXJX6ibfrW%2FPBaprR%2FFLtyw%2F%2B0lvkiK5htw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920af4ac79ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19251,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-06-08T12:40:05.681874Z","times_seen":208067,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1752514732","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1752514732 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 726\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Mon, 14 Jul 2025 17:38:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=24C%2BvfrgSMBBkwW7pimae1sZm6o%2BB3DUaAkvFGdDe4z0kGP%2BpGzo5pH46F%2FIXf3FCVbr6sZ3gieJoAGFC73xjIBLUBNI7sk%2BbTww9g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac79559ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26649,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"99d93e141869629987d5e858f7cf673e","sha1":"eee5f628fda51136a3a267fcf0633307d2396e4a","sha256":"ccdf35fde31161856fcd8dc413cd9bf7aa81da4044dcfaa96559b369d1c729ed","sha512":"bd07248c5bccb869c8a1e332ada863db3e370a9afbe50776bada96c0366be1cd8839129afac567151974fff9492be5c1350d5de0d3632c0823f0c454093f27ca","ssdeep":"768:bRPRDRyRoRkRRR6uSjZ14rPjSYU5IkAh7/qJFhAKebOamH1Z0vLHmUYVcAkF3T28:lpd8eKf6uSjZ14rPjSYU5IkAh7/qJFhG","tlshash":"3fc21180584a0901e7974cc173ca7f15990e6095f081d5ed5ffe28e8aeebe23336679e","first_seen":"2026-02-21T20:18:35.613906Z","last_seen":"2026-02-22T14:49:37.704703Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.31.2","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.31.2 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2621\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Thu, 21 Aug 2025 23:44:09 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UmGTLoEmg39DZzXvRe4oPjF0DDpjumxi0DQCsxqTKc2kF1NpU0FKZTFEzU1OL7Rg0t0NEPdsXW6yApyVsPmazIfpMZdFbGnTDAwgYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ac99679ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6248,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6204)","md5":"91e2eace8652a661d8c8bdf6613236a7","sha1":"afca4a2a64f51b1f213ddfae9f270c8add2959a0","sha256":"7121fc5dec5cbdfb78786cd4018f5239ce4df4745abbbf20be2a1d17cc23e1ea","sha512":"d383cb0e216b4f724dcc706b945088c8ac213c97e44b636ce99b76d054d729abbc9bcbdc5058960bc2b145fd9273e77672bd1d26de27059380c7aa071a6fb90e","ssdeep":"96:BEdxwrudY4kjboFkEO/HfOYAWY4N53hsstJQPCl2e/VtFVKdpYQGK0Vz38k2:eTXd4jboFemUN537MPa/pMdOQ8Mk2","tlshash":"9bd1569805489d2b26e43ad8b15b6b741b3dd0323c5ada81e611eddc18fcfd187ea532","first_seen":"2025-08-11T06:13:36.205631Z","last_seen":"2026-06-08T11:31:44.86054Z","times_seen":5529,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/unlimited-elements-for-elementor/assets_libraries/font-awesome6/fa-solid-900.woff2","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/plugins/unlimited-elements-for-elementor/assets_libraries/font-awesome6/fa-solid-900.woff2 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/wp-content/plugins/unlimited-elements-for-elementor/assets_libraries/font-awesome6/fontawesome-all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 156496\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Fri, 23 Jan 2026 07:59:48 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ipqJ%2FsTn5QMAA38m2SCuOvhGbAe%2Bu%2FSTS5tlESwSc37GKwSHHTdvnRX3z%2FVw8gpOEMymIe3lngSOdqt5GNNqQ0BG5zY%2FBvtCNsd0vw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ae2a7b9ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":156496,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-06-08T12:36:34.491228Z","times_seen":42383,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/uploads/2025/08/bybit.svg","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://babywlfi.vip/","date":"2026-02-21T20:52:28.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/bybit.svg HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babywlfi.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 20:52:28 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 564\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Sun, 17 Aug 2025 02:47:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zsbbsfbjhFBpQHdX7KkTYZ12YeDldfEAH0qmo7x1suqzzMLqKMfAgIUOzLW6kLdbEsVfYkuots0ZCBfDUWjAj9UG%2BWPMZcIS%2BacxTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1920ae9a9b9ade-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1506,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bbb72920f664602a38a56605ebd644b7","sha1":"b83f0accaa67e31dd0d261640f5c652a81cb0e1d","sha256":"5a1ad8e31446c512ca1a1d6ea3423e86fcca53d1596deeeeaef4166e4dbb3b56","sha512":"81fb973d5a58c28c48014a6511f7f8a7c7dcb203a3f49fea121be16f3a69e0dac899cf3cf82e252c142a6acc297ab57006ee6b2d5b07f13112a84b1ea77f9072","ssdeep":"","tlshash":"063110b29342e160460547e1cbb67073669636ed3e66d11c4bd28f60b9546cdec889e4","first_seen":"2026-02-21T20:18:35.642685Z","last_seen":"2026-02-22T14:49:37.689476Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}