{"report_id":"ed3db2c5-ea44-4f42-b275-0f887f76f205","version":6,"status":"done","tags":[],"date":"2025-08-17T02:03:34Z","url":{"schema":"https","addr":"globalleaveofabsence.online/","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"globalleaveofabsence.online/","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"title":"Home | Global Leave Of Absence"},"submit":{"url":{"schema":"https","addr":"globalleaveofabsence.online/","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-21T02:03:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"www.unvacationhq.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"globalleaveofabsence.online","ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"domain_registered":"2024-11-02","domain_rank":0,"first_seen":"2025-08-17T02:03:35.34059Z","last_seen":"2025-08-17T02:03:35.34059Z","alert_count":0,"request_count":37,"received_data":1841386,"sent_data":18868,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Underscore.js:1.13.3","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"Yoast SEO:19.7.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Site Kit:1.84.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.0.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"www.unvacationhq.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":7,"request_count":7,"received_data":0,"sent_data":3214,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-13T15:10:36.82984Z","alert_count":0,"request_count":3,"received_data":35139,"sent_data":1649,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-13T15:14:14.224423Z","alert_count":0,"request_count":2,"received_data":123570,"sent_data":1477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-includes/js/underscore.minb37e.js?ver=1.13.3","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"42aa17e1f850a414638ee4a32a3aa807","sha1":"2e42d03a5e042701191650c041eae1cfb2d6c7b9","sha256":"0da4791b446818516f710c51707081aec7b23a7c5212fc0b2629c973210136a4","sha512":"edb01d61cb621880f18b83c753510ee0464590c18ace73ed713193f0c030201e3f2dade9f599740447328c4e2a64d538c8031ba5befc82f600cd2f080b74f99b","ssdeep":"384:i5N27pxYnTV0BZ/cdBGuWxtDmFHdloffLWj2eo0pnPDWWU:K29xqV0BOBW4DDU","tlshash":"0e8262c83ad7f059936320ba403f2497f23a6e6264acaa40d265e4fc7c7455dd137dac","size":18911,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-07-25T06:43:29.320364Z","times_seen":1575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min7433.js?ver=3.3.7","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aacce601cf3568045780a162f0b7768b","sha1":"6a161da8c621d4b41cd0040f1fce8f80661b56e6","sha256":"5164ce0c207ef0f918774fa757e7059fd2e62012b7b8e0d4c9ac6d9e0298000a","sha512":"94df33896a68862f0ff4ac267582bb64f39321049bb3d6eed9df98d39a9e5d972dda4b1916757539942eea8c8c95285f639fa0617c917415c43c0208533e046b","ssdeep":"1536:i1wT7LlDZfyUj1pCni0iEwsEJOXpv5P92WsC/bpUVJt4piWN2ORpDpPoZK5qcDDI:ihW6adyWf1yfm","tlshash":"373385dc70c2f06446d7b474a03f150ba2365dac044df551a7eac9a1abbae1eb232f74","size":52499,"data":"","first_seen":"2023-03-08T01:49:41Z","last_seen":"2026-07-22T05:04:33.789703Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"042f105ac625e13154a6755357e74c55","sha1":"5120e4f082f024e1240f48b4dc5f0cea61e5e5a9","sha256":"c8bc9cfd16007cfcac3f342d50ccd4d3043bb7c7127aa1a093eb38b35546faca","sha512":"9fa0e9884a5700d346aa4d284340ec0db537a9d8cc27f9e8298a8ef1d0073db05e4ef494224e6a78bd352d8302220e19554f6364367a27ea85270f5695e8ad56","ssdeep":"","tlshash":"4741517a3b9261997af208b3f12f5f0f3b2545031089a5768199a5a4393edd4c0fad1d","size":2165,"data":"","first_seen":"2025-08-17T02:03:40.716727Z","last_seen":"2025-08-17T02:03:40.716727Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c51b5be11f71c5e12aff7f05787fdfd","sha1":"5e99384e82d66bdfa4db7c8b43a9066c2896e46d","sha256":"f305ca5823e9ef3bf3cdd312369057a018addabb859d129e07543349fdd74d35","sha512":"e328675ed329a2f81fc6947fc5b5a8f1202a1a06c76a57ec2d11d4171d1f1baabf09b0e1868e518311a9da4e61606bbe08ca199a292fc30eb65c9eea193e5c3f","ssdeep":"","tlshash":"00900204411b0900b64189615026506975ca5450e045e44d66cd82505145b092a39014","size":47,"data":"","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-07-11T19:24:36.048425Z","times_seen":3418,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-includes/js/imagesloaded.mineda1.js?ver=4.1.4","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a56752b736635bf69cb069b8818cbfd","sha1":"42e0951fe74bb3f56a30f51291823bcd4a84d76e","sha256":"ff4bd34aa98a0214833619d3d751838db015722dfbbec15cd14dadc66cd67869","sha512":"a255d61de4e6cec2084aae0f027ccc0259039aef62268a27072c8097d348d76bb725ca35563386ceb068387c9ad3ab0e331bd270ba754a38a2a2d33944f305f5","ssdeep":"96:PwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:Pwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"90c122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","size":5629,"data":"","first_seen":"2023-03-07T01:02:40Z","last_seen":"2026-07-29T16:44:22.928537Z","times_seen":23344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min7433.js?ver=3.3.7","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"349c0933edd050e2b4c4b14ea24c3bdc","sha1":"82c18234ab2a72d6562e4486dae19de6959b3a30","sha256":"56c09d172dad6646d2e8877998d5c72bfe64800c440c6267a01bc537fe627aff","sha512":"f37087a53d604b10321fe3cb3eab2a4dde66f5dee9f3fcdc5d16f877d2df0d8e358bb5ab8e9e3fe28b76f3c23fe09d0a24aaced8e639f7ec447d35373c0db15e","ssdeep":"96:BDN3T9qA9fRraGb0HfPF4TlyHxV1bVujYmfbv2fM4Tx8o2:tN3pf9fdaGGf9pxfQjYOr6qo2","tlshash":"56b143d41a94fd2735f135c9e15b6b31662fd0333c2ab9c1ea22dcdd54e8e8183aa532","size":5462,"data":"","first_seen":"2023-03-07T13:18:18Z","last_seen":"2026-07-22T05:04:33.842735Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min05da.js?ver=4.0.2","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","size":12198,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-07-29T16:44:22.976048Z","times_seen":73744,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.minac9e.js?ver=3.7.7","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a5dea0a705cc2f4cd87dbaaa6666bc6","sha1":"678bc6f750f13adb29bbc158eb0d9cd813b736fa","sha256":"97cf1307c16a437b77b5f7f5c9bc0b985d0745a14be5a279019aca5a3432e264","sha512":"7c19d0edc28fe8733075534de6176483416bb3535f37b7607536aea2ddf9c5591d864225049c9a74735c1daf44c72688d91c1133bb018683ade11f16ea596807","ssdeep":"192:bP6Vw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3o:OX8fajqZFwtdykZwRXcoWI2P9o7S3o","tlshash":"0462337b7d000da93cac595852a27d446d4eb32fbb430c6bbdc59de623a23f5719e006","size":15055,"data":"","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-07-29T16:44:22.9975Z","times_seen":13172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-includes/js/wp-util.min5b21.js?ver=6.0.2","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8637362089372427b52fa10a43d8109c","sha1":"6009bed674718329dce6055ab09fa95181162d81","sha256":"b8e78b48acc08ce31457aff168d6fb2c814d51a8739a97693cdba585d60f5b35","sha512":"2674895f82bd2002a0c31c51fc139b01bdd78a22675252d72d99c1310faa2f31a6a0e32f5a0583ad8a08267369182f84828fa069a57e9ebee5866f247ccb2571","ssdeep":"","tlshash":"a6215685f15ab9e3013330b9c33f0607b332e8145a669951e4d8c4e1ae70d56f5b7a29","size":1340,"data":"","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-07-27T09:45:50.924866Z","times_seen":3844,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min1a7b.js?ver=1.7.7","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"afb55c29bdbcfc262d9fa56743572cad","sha1":"d4b6cb9df2b1b5477cd968fb05cf5faa1d13d6bf","sha256":"c30dab20b677f2b13f42a4a04385a3c6d380fa023a4a1c32f45f2996e152bfba","sha512":"458d91d1274af1448e950803384da02c7896521ef7dc47ac7735a8a37226b5292eba33def05f72f3ad435e2ecf2afdf5d79a6b7b91d145a2de3074b0c80997d3","ssdeep":"","tlshash":"ab016d38b83bbeda1c6f522414af07cfb251c4b2a2055c51432095b81e75eca630bf88","size":754,"data":"","first_seen":"2023-03-07T01:07:32Z","last_seen":"2026-07-29T13:41:26.439028Z","times_seen":5761,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-includes/js/jquery/ui/core.min0028.js?ver=1.13.1","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6aaf0a4e8eac131defea126f5b1b5fbf","sha1":"24da0326af36303e5a1e9799a3c26f7a1077928c","sha256":"240b702419d6c39ecc4896f0132ccfc9bc517e9aef0c782d99580e0c678b47d5","sha512":"a81796898efeb3673291b036432910026486146ccf28e2be0d802afac689104e9b99d969ce89048ea300afed2604977ecfa4b40be914c20a2f1c69f7b723de52","ssdeep":"384:Au1feJLyqVS3dsfA/N1H1i28fuxNhfGX0CiSZw/OwR229FkFvd:uS3Vb3vrN7kv","tlshash":"b692d78db2453815c5f7a275503f534fb132a29cb10a889df4acc9e92c7ae992073f79","size":20715,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-07-29T03:31:19.344662Z","times_seen":3544,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8503ac489d35ae51a33d0c64029c1349","sha1":"f12d970c9bb91736494c835133a1bb90d0be8477","sha256":"cb375c889d389b8ddeb2c7860183d29339a13712fae4e12ae305490b47efe223","sha512":"531207b1bc670f8a8e5a133df0cdeab2964cb4b05e56d218f7e9fd8907d95b8272d99f2c9467b91f068d603ced4186223ce4b9be01c487c83cfcc18402be580d","ssdeep":"","tlshash":"4021ac572e224e2547afa7c872c63baf48d4433235d0714c1699e06501fbcadf04a3e3","size":1250,"data":"","first_seen":"2025-08-17T02:03:40.718937Z","last_seen":"2025-08-17T02:03:40.718937Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor/assets/js/frontend.minac9e.js?ver=3.7.7","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9195e52afe51faf6fa959276ea149ae8","sha1":"5e18d4c1b5344b36fe9838b381d034a375619636","sha256":"0e4b2020366cf0e467191b309fe8f9a946228e2834bf2c053ae7cb8facb1d97f","sha512":"f5864738b12bfc2cd25f8c5a63b397e68bb2d57f0325af8ecb591b8352ad399d82a5916ea3752cae2e06b1d2609a4b0e04e8cfbe8cd3c9ee052b13844ced5148","ssdeep":"768:QRxiBDvxJMEa/mvGsfVehz8favEAz/c5G/TSebsvZiVH8URPSz5oedXLfPv3x+FZ:QRxU7xJMEaYfVnIEAz/c5+TSebsRiVHP","tlshash":"da0308563192d4aa51df48e7b0330219f3620dddb402b55eb6bdace6a4b1e8333767b0","size":40513,"data":"","first_seen":"2023-03-08T04:46:08Z","last_seen":"2026-07-25T06:56:37.739045Z","times_seen":644,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-includes/js/jquery/jquery.minaf6c.js?ver=3.6.0","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"02dd5d04add4759122013c5ab4dc5cc2","sha1":"a45a56e396ac549b4ff39b696ce9e0c16a7612de","sha256":"bd4de6a3fc0fb68d6f76ba7b93514b96a92e585c295b5351c31ad92a4b0777ea","sha512":"04690d9875e98f5ae6bf94f5c71b7a0177b374bc09609a0f58312e1c337348749a40e07fe226737dc248bd8fe2f6a489071258619affc7f1df644e4255159615","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vM:DIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e99309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89521,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-07-29T16:07:03.038867Z","times_seen":59851,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-includes/js/jquery/jquery-migrate.mind617.js?ver=3.3.2","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"79b4956b7ec478ec10244b5e2d33ac7d","sha1":"a46025b9d05e3df30d610a8aef14f392c7058dc9","sha256":"029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300","sha512":"217f86fee871fa36eca4f25830e3917c7bf57a681140b135c508aa32f2a1e3eff5a80661f3b5ba46747d0c305af10b658d207f449550f3d417d9683216feea8f","ssdeep":"192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS","tlshash":"8232c59d71a6b4624eb735b8b03f939f71b605d9250d8940d26cc9f6782c84ec22bf68","size":11224,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-07-29T16:07:03.027565Z","times_seen":85945,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"db6af428d11f6f273b47c28a08ea4516","sha1":"736c681bdcbb0a59df0c890c4463ecb4338a1dfe","sha256":"c96aa52e867f89ab8d2aef103015baf3753bc13c5b53a1e2fccf2849b7ef2dd9","sha512":"bcbbec6c1ee5768b1b365962dceff71c7b7154a167bc553e5cb8c6c4e4922babba3d13c136bbe8753ea72e3669cc2c09dec86c905d24a8d243fffada804392fc","ssdeep":"","tlshash":"67416321b984a57b8193e7463627bf03793c0135600179f9f8bc497c28bae7a2607c17","size":2065,"data":"","first_seen":"2025-08-17T02:03:40.720005Z","last_seen":"2025-08-17T02:03:40.720005Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/themes/astra/assets/js/minified/frontend.min2e46.js?ver=3.9.2","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"423e4eab18767461cb68a11c5b2a0cb4","sha1":"d5c17c5fbecfe815e7c27347155158e90e9fb709","sha256":"d6a23f9c4dec2f455c8e2340a99ad4db01a1d538bb1f2537bab3991ec64e14c7","sha512":"15feb39953f808f7578508f00d9daea092f47bf52875cbc6f6f2e93f700856f9e6631f4d23310d88986aed72cea4deda0b0517ca2d72c76f19801b5d182d51d9","ssdeep":"384:uYwLboOAySjd5yUa3oDo3oYCJLjanUyCdyGvyo+UylJNj4pyCAwyNCCBzycEQysD:uYwLboOvSjKU4oDo3oYCJifRo+LlJNjP","tlshash":"3d7284a66200253604ff1beaf4daaac8767024affe0944115979cc2e19b4fd351f1afd","size":16935,"data":"","first_seen":"2023-03-07T13:22:33Z","last_seen":"2026-07-27T11:10:52.259536Z","times_seen":1013,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor/assets/js/frontend-modules.minac9e.js?ver=3.7.7","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"be470f42763699211b6bde600035489e","sha1":"4ba8055c19103b570b98018e45204e3cab1d141f","sha256":"9b5283387ec103868d83ebcb8ed6516cf4b29fa6c1490991ce3aff980aadfe02","sha512":"8cbf41d2803fe22983a5e263921bacb947205c3bc195affe786bd395f810c84e912653d3ccbe4795039fa55e7d69413a810815e7156747ae3c0513c6ad1bcb6b","ssdeep":"768:qeAjA6wk9CrSk4cR8+8gNKRWWE1SeiwiIzyVZMts5z083FdfPquQ5RSSOMlt+1Sj:qeAjA6f9CrSk4cR8+MWWEsenJ83FdQ5z","tlshash":"47e2d6863f61f4a347fb8096a02f410bf3565894780de0d4b75bc9e178b498a6367f39","size":32929,"data":"","first_seen":"2023-03-08T04:46:08Z","last_seen":"2026-07-25T06:56:37.736534Z","times_seen":645,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ff152a840e29705f2933718a2571bc3","sha1":"6c7ed239bcd74ab7a0ea03b3dd4ab74ffceaff49","sha256":"e426295764322c0b4d881b5da28c2591e9ff651fc07636da1e2979a62a2f349c","sha512":"e434f20d6a3ab421f1b2a33bda0202062f523e2118ecbb21d716603b5987687777ed4348bca2f1e8402b7800dc5deae6ef052982eefebc410323caa36a2e0074","ssdeep":"","tlshash":"6aa022ac38282f0fa28c2ccbc028b3bf38a03320a8208c0033c2e8200200c08ce08202","size":70,"data":"","first_seen":"2023-03-07T01:07:32Z","last_seen":"2026-07-26T05:28:39.859481Z","times_seen":26357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f215c9370788561e1b9e30dd40697ef","sha1":"aca5a8d9d6bae876f32a5b9fb7d1d948afe855b0","sha256":"eed9d591cae9c609fb97d73f7fe3d192432da0246d97bbbad6d0de0a1bc0cc2d","sha512":"47f6f2d7cd6f2662c8eb580b3fe0d58dab3728ab07a17dca128aa9ccc0bfef261fb9fddfe58618f5c6fbe93b38cbf192713d70fb1d64d6825615f66386b8be59","ssdeep":"","tlshash":"c3a0113ae833aca80e8b000a288b0083e2200000f280a808208a03a0032acc28208e8a","size":84,"data":"","first_seen":"2023-03-07T01:07:32Z","last_seen":"2026-07-13T10:15:26.569805Z","times_seen":6408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor/assets/js/webpack.runtime.minac9e.js?ver=3.7.7","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"40b9d7ccf0f819551e24c793b1331410","sha1":"652f25c5c5ada11d6f98a3a6b0692f89a0cba560","sha256":"189526e3c25dc1cd28633db393e38d926f86432f000908ed3f55aaef43778cc0","sha512":"bd4fd905933703dbc5632113b54245ea18b43bde7af8e82b959f67e6560f9e87d8225d5bcb43cda6771cf6f893c1be54ef290c11c8af0ef44c1954bcf07f2ae3","ssdeep":"96:BeN6AUjqn93zFK245f8ZlarNVwbVLXkqfjQezovOA8S2:8N6j4935KTe8NwdXkymOhS2","tlshash":"27a120d41b90fc6b35e134c8e11aa731652fc0333c1bb881fa22dced94f8a8187a9971","size":4957,"data":"","first_seen":"2023-03-08T04:46:08Z","last_seen":"2026-07-25T06:56:37.719031Z","times_seen":643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3688fd64c409264431201fa55a828e81","sha1":"2b7eeefaa1edf3a7621f7576b35b01c895ef5367","sha256":"944433761a880eab1d567dd5389499af76aa03582c82a8aa88838e3c6c2134c6","sha512":"1393fe2f189899d68717be994820d19a7e89660ea5cd90cf4a2d3dd07b41c95c2f63a3a0833d2407f16be6a3eae698ab549eac52d4ffc82bcd2da0e4e46da210","ssdeep":"","tlshash":"bae026faea5a457101e6a1237bce739e293665a3a92a4c402899ce806838dd31126ed1","size":333,"data":"","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-07-29T17:10:29.829683Z","times_seen":39274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor-pro/assets/js/frontend.min7433.js?ver=3.3.7","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb60c80b1e0490202e367ff0f9d006f6","sha1":"4c4aeedfb5ca56a63c63ee6eb2be58aff59d3931","sha256":"b5d9026700bf205f5de2a7182f7e1339a574ba6f1f410b8b96d97872f4c5f715","sha512":"5283f91f354140cef8ad91936e35f12a7474a4d55a9dc88a274d42519cd31e0b9f89df95c76adfd18c89ddf46970431229bff54a4772ac17319bf30a1376c152","ssdeep":"1536:zTAF6qDhxhrZaKOleNjb7YzJcDlRuHLnre8gIlLmwrLt:WIlLvrLt","tlshash":"6343c98b3092f0a203eb9265502f410fb2b71ca8588de5d4a775d9f1beb981d6167f3c","size":58893,"data":"","first_seen":"2023-03-07T13:18:18Z","last_seen":"2026-07-22T05:04:33.83348Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/themes/astra/assets/css/minified/frontend.min2e46.css?ver=3.9.2","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/frontend.min2e46.css?ver=3.9.2 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 Jul 2022 07:10:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8419\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":46256,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (44114)","md5":"05c1f5cf18c535d5a5193d93c72e2bbd","sha1":"198164c57131fcf8f15a276e8e206cf5436e9f16","sha256":"4b9938bf8b25101b41c401110119babc4b8932180ca98f479ea45d909429aceb","sha512":"77f62897d6880ba7e95255e449c11beee6e37f387406e707bd0c492aca7e1e53b751c3a9a89021d7ffae601cf64a0ad763809f7b4d6cbfbabb817dddde0d0880","ssdeep":"768:kVbnru0p0j1rhWYolOlFnkHk8FHk/jtzdvNPR2/WLmihCFS70HQtBkMTqen9h7fX:0Xu0pvcjROHQtBkMTzI2dEa9","tlshash":"de23c76057d031195233873af982b9482a66d303e31f6ad7f8e78f6588c5bd70972e4d","first_seen":"2023-04-05T15:58:41Z","last_seen":"2026-07-20T06:57:32.739198Z","times_seen":298,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor-pro/assets/css/frontend-lite.min7433.css?ver=3.3.7","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/frontend-lite.min7433.css?ver=3.3.7 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Nov 2021 15:52:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5855\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50884,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (50841)","md5":"5926c62d94fe377aae871ded24905266","sha1":"f8fb718803011552a26cceaeefcdb0126b2f99af","sha256":"b50ef7d137c63acd09ebe0da69cf331b8f2e5137ebdc9ab56b70c35c9ba60948","sha512":"75a03ac0412942d91c7a2a34298257a7b6eca2262bb46de880f8656c0a81bb9275e6cc3d53a26e0d317f025a1f32624c5bd059f9fab9fdcd74b9bdcfb98386b9","ssdeep":"384:Hk2YMI0XwgAUJUWkkK9KCK/KhsHCUwa0VGw0VYw1H/eTpUp5ljM:TYMtSUK9KCK/KhsiUwa8Gw8YWH/eTpCM","tlshash":"23331ea3fc77150863bf452b81cb3acc3968c0d9945226eefd52a60b4be6d85336171e","first_seen":"2023-04-05T14:35:19Z","last_seen":"2026-07-22T05:04:33.849599Z","times_seen":10,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/uploads/elementor/css/post-14c0c1.css?ver=1640795874","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-14c0c1.css?ver=1640795874 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Dec 2021 07:37:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2318\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27256,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27256), with no line terminators","md5":"14e0bf55c5731116c4f145b58fa7bc95","sha1":"91b27a2e7b0d7048d8bce8ba695ada28662e5909","sha256":"d8d3835cc7ce3190607a4e5a225454854715e6545c0df1be195b1610f99a384e","sha512":"e88b81de315e07b92f1af85d67bad6270c7c7ad394cf5ec59a5d5f761c3ac601bc558342432818e26408511d32a2c583bee4a8902b357408f53e8f8327d88960","ssdeep":"384:+gxTzPs9S/IpggXgvgogmgPJgrxgOLO/igog8R:+qTzPs9uIpl+RPUJ8xDO/iHpR","tlshash":"c2c210987c935021702f72af9053a6cca135acddd53eb2d6e8329113f0b6da17be1d1a","first_seen":"2025-08-17T02:03:40.687791Z","last_seen":"2025-08-17T02:03:40.687791Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-includes/js/imagesloaded.mineda1.js?ver=4.1.4","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-includes/js/imagesloaded.mineda1.js?ver=4.1.4 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 13 Jun 2020 19:23:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1733\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5629,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5477)","md5":"3a56752b736635bf69cb069b8818cbfd","sha1":"42e0951fe74bb3f56a30f51291823bcd4a84d76e","sha256":"ff4bd34aa98a0214833619d3d751838db015722dfbbec15cd14dadc66cd67869","sha512":"a255d61de4e6cec2084aae0f027ccc0259039aef62268a27072c8097d348d76bb725ca35563386ceb068387c9ad3ab0e331bd270ba754a38a2a2d33944f305f5","ssdeep":"96:PwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:Pwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"90c122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","first_seen":"2023-03-07T01:02:40Z","last_seen":"2026-07-29T16:44:22.928537Z","times_seen":23344,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.unvacationhq.org/wp-content/plugins/elementor-pro/assets/js/slides.805ab056f4b77290515e.bundle.min.js","fqdn":"www.unvacationhq.org","domain":"unvacationhq.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:13.200Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/slides.805ab056f4b77290515e.bundle.min.js HTTP/1.1\r\nHost: www.unvacationhq.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T17:16:36.359793Z","times_seen":17601608,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"www.unvacationhq.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/uploads/2021/11/cropped-cropped-250-UN-192x192.png","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:13.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/uploads/2021/11/cropped-cropped-250-UN-192x192.png HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 17 Aug 2026 02:03:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 17 Nov 2021 05:54:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48435\r\ndate: Sun, 17 Aug 2025 02:03:13 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"00c4a5e49a287dc6c6a7c3929ef9015e","sha1":"a6b85f0ccd20f38c3047ae17b113d485ed4fe9e8","sha256":"fe1b162083eb5323d95e064f3d1d500154bb806a99d9cb92017b863f1bb75a53","sha512":"87e8a0454e1d0a79c1cef507ff4afec7e9aeb4390b6887b9dc64d7e148b34641106203b0bb0369d8b4ef7992a0443de4368a742e691290841501c7f74bd66874","ssdeep":"768:VCaut3xI/Rq3mlsriS45ZLIZ/R39zlDcMtMXEWaru0J8l+qL54F33dHV:xu7QU3isrzEIZ/RLcMtMNRlKHP","tlshash":"ab23021d08aa10292d39ef4165548cbfe5a2cd8c88a616ecc55fafb069106ef22dc5f9","first_seen":"2025-08-17T02:03:40.691066Z","last_seen":"2025-08-17T02:03:40.691066Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:13 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 09 Jan 2025 09:00:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 23584\r\ndate: Sun, 17 Aug 2025 02:03:13 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":140887,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (53395), with CRLF line terminators","md5":"90a12f706309c5ef2df8f437c7900940","sha1":"e6920e7a86b547df4d524c2ce6ee3c6ebdea6751","sha256":"ff972d5f4ba7faad9caf6418a427aaa86f0e173f038258f4c7eaa6e868a5dad0","sha512":"8293cc261a5c2b89b46f3beae91da3054f303e844c0ec98af6b27872b3d97ebfed2477697998ab90316b0fe6e73dd93db7b40700815f4f22c21fa237485b669d","ssdeep":"1536:SzunAltRAerQLapq1RTKGqbzaM8BudKfQL7wl+bYdH:SZd3aMguQ","tlshash":"dbd3e871be81152a212b037fe167b70c50a5ca93da0e27e9f4fc912a45e6fd231b351e","first_seen":"2025-08-17T02:03:40.692091Z","last_seen":"2025-08-17T02:03:40.692091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-17T02:03:11.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 09 Jan 2025 09:00:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 23584\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Underscore.js:1.13.3","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"Yoast SEO:19.7.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Site Kit:1.84.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.0.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":140887,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (53395), with CRLF line terminators","md5":"90a12f706309c5ef2df8f437c7900940","sha1":"e6920e7a86b547df4d524c2ce6ee3c6ebdea6751","sha256":"ff972d5f4ba7faad9caf6418a427aaa86f0e173f038258f4c7eaa6e868a5dad0","sha512":"8293cc261a5c2b89b46f3beae91da3054f303e844c0ec98af6b27872b3d97ebfed2477697998ab90316b0fe6e73dd93db7b40700815f4f22c21fa237485b669d","ssdeep":"1536:SzunAltRAerQLapq1RTKGqbzaM8BudKfQL7wl+bYdH:SZd3aMguQ","tlshash":"dbd3e871be81152a212b037fe167b70c50a5ca93da0e27e9f4fc912a45e6fd231b351e","first_seen":"2025-08-17T02:03:40.692091Z","last_seen":"2025-08-17T02:03:40.692091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":889,"timings":{"blocked":335,"dns":108,"connect":106,"send":0,"wait":213,"receive":1,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.minac9e.css?ver=3.7.7","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.minac9e.css?ver=3.7.7 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Jun 2021 05:07:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12384\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59356,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59170)","md5":"302f6f5e9bd20da6e993cdd3b21d3ff9","sha1":"b18e7b53115d3c52e3c16aaff2cfc4bf173fe230","sha256":"eb0d325954f3d0a0e40377cf99d4e56e452cfe155d8153d8df1aaee611f4e1b4","sha512":"fd02fea233e1beb090c181524433a3c047d1765af069e9e1b45db737a02b5da1dc7a723b9df4037eb8f9b0e754443bec49ee7f98c9c5b221339c36d0dca3830e","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzi:0E0PxXE4YXJgndFTfy9lt52","tlshash":"9943fbb8e54c01c9b731c44bef82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-13T21:51:28Z","last_seen":"2026-07-27T13:41:14.472504Z","times_seen":289,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor/assets/js/frontend-modules.minac9e.js?ver=3.7.7","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.minac9e.js?ver=3.7.7 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 02 Oct 2022 10:12:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10420\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32929,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32889)","md5":"be470f42763699211b6bde600035489e","sha1":"4ba8055c19103b570b98018e45204e3cab1d141f","sha256":"9b5283387ec103868d83ebcb8ed6516cf4b29fa6c1490991ce3aff980aadfe02","sha512":"8cbf41d2803fe22983a5e263921bacb947205c3bc195affe786bd395f810c84e912653d3ccbe4795039fa55e7d69413a810815e7156747ae3c0513c6ad1bcb6b","ssdeep":"768:qeAjA6wk9CrSk4cR8+8gNKRWWE1SeiwiIzyVZMts5z083FdfPquQ5RSSOMlt+1Sj:qeAjA6f9CrSk4cR8+MWWEsenJ83FdQ5z","tlshash":"47e2d6863f61f4a347fb8096a02f410bf3565894780de0d4b75bc9e178b498a6367f39","first_seen":"2023-03-08T04:46:08Z","last_seen":"2026-07-25T06:56:37.736534Z","times_seen":645,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor-pro/assets/js/frontend.min7433.js?ver=3.3.7","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min7433.js?ver=3.3.7 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 16 Nov 2021 15:52:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15728\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":58893,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58848)","md5":"fb60c80b1e0490202e367ff0f9d006f6","sha1":"4c4aeedfb5ca56a63c63ee6eb2be58aff59d3931","sha256":"b5d9026700bf205f5de2a7182f7e1339a574ba6f1f410b8b96d97872f4c5f715","sha512":"5283f91f354140cef8ad91936e35f12a7474a4d55a9dc88a274d42519cd31e0b9f89df95c76adfd18c89ddf46970431229bff54a4772ac17319bf30a1376c152","ssdeep":"1536:zTAF6qDhxhrZaKOleNjb7YzJcDlRuHLnre8gIlLmwrLt:WIlLvrLt","tlshash":"6343c98b3092f0a203eb9265502f410fb2b71ca8588de5d4a775d9f1beb981d6167f3c","first_seen":"2023-03-07T13:18:18Z","last_seen":"2026-07-22T05:04:33.83348Z","times_seen":84,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min05da.js?ver=4.0.2","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min05da.js?ver=4.0.2 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 11 Jan 2017 12:35:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2867\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12198,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12198), with no line terminators","md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-07-29T16:44:22.976048Z","times_seen":73744,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-includes/js/wp-util.min5b21.js?ver=6.0.2","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-includes/js/wp-util.min5b21.js?ver=6.0.2 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 25 Jun 2021 15:20:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 646\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1340,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1305)","md5":"8637362089372427b52fa10a43d8109c","sha1":"6009bed674718329dce6055ab09fa95181162d81","sha256":"b8e78b48acc08ce31457aff168d6fb2c814d51a8739a97693cdba585d60f5b35","sha512":"2674895f82bd2002a0c31c51fc139b01bdd78a22675252d72d99c1310faa2f31a6a0e32f5a0583ad8a08267369182f84828fa069a57e9ebee5866f247ccb2571","ssdeep":"","tlshash":"a6215685f15ab9e3013330b9c33f0607b332e8145a669951e4d8c4e1ae70d56f5b7a29","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-07-27T09:45:50.924866Z","times_seen":3844,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.unvacationhq.org/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2","fqdn":"www.unvacationhq.org","domain":"unvacationhq.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.861Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1\r\nHost: www.unvacationhq.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T17:16:36.359793Z","times_seen":17601608,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"www.unvacationhq.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:13.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min52d5.css?ver=5.15.3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 24 Aug 2025 02:03:13 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 17 Jun 2021 05:07:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 76764\r\ndate: Sun, 17 Aug 2025 02:03:13 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76764,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76764, version 331.-31261","md5":"f7307680c7fe85959f3ecf122493ea7d","sha1":"fce0da592a3e536d6d5df5b50cb513398d8c5161","sha256":"43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af","sha512":"d115a6f0df1f766fc83a77adeff79da5b0a463c01c13532cf48f29ed53a0c4ef1d87db38b8e492fbc3f97a0d192a9a6f636b837e65fcbeac03bb6f36336ca69e","ssdeep":"1536:UOsj0gqVLsxxVegJ1MvhvVpBJoY+q6G9NjFvzOCvXHYVSGhZJZ6xxsBV:UOsj3sVgmoYp6uRvzHYYsZJ+uf","tlshash":"8373028a852a583dc7fd1134a83c8ff111fba484c64b178c7a7179847b96fd3b4a51ca","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-07-29T13:41:26.406627Z","times_seen":30777,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":198,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/themes/astra/assets/css/minified/menu-animation.min2e46.css?ver=3.9.2","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/menu-animation.min2e46.css?ver=3.9.2 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 10 Dec 2020 08:30:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 339\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3412,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3412), with no line terminators","md5":"730e0907dfd019baf0c555a21f373670","sha1":"6bef5d7aab1206ca5095e6f589c47c9912873ac7","sha256":"b6e169ac07a49b2c9d2b726bb3c384097badcc093dc6322c9a2ba066ae8e06a8","sha512":"594a12a72bab9c38a1b108985cd2d6e6e9a47bb3b91791ac096caae90518b4a3dcaa833c8eb07da6385415e9a85f166e176f953c83b5397901d8014eb0c35c9b","ssdeep":"","tlshash":"756162c99fe002751152d37ad4aec11c97b88c93abde546933fa1a8e4b1438943f3d6b","first_seen":"2023-04-05T15:58:41Z","last_seen":"2026-07-29T07:58:58.318617Z","times_seen":3217,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-includes/css/dist/block-library/style.min5b21.css?ver=6.0.2","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min5b21.css?ver=6.0.2 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Jul 2022 19:51:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10946\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":88932,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (43771)","md5":"b7915926fe42d76e9c802353ab01dae4","sha1":"3a8192a4312f25f53de25b100d62829c0f14d67c","sha256":"d7705700d24d5919255576642ad2c28bfc790390b7183a369038ff5c1e814d51","sha512":"4b121702618150ec966af2ef5b6e104afa2bf9bbc50e4eccdf7847b7c2819b205e28310e662ab73e343ebc2ba95b35a7ab2649e9999dcfdaa8affcfb92c3d9ee","ssdeep":"768:/Y/7oaFHfK4x1z42kA5SOV+sQ354sMFFZ09FgmyfbglnNUNAbnq//zACIwcYBN0H:jaFHfx5kA5SOV+sQ354sbbOLI6NBFr8","tlshash":"6a933f5417b0dcf939ffab3a9e5ee248a513a941c24a5be7e036d190614ca494cf3b0f","first_seen":"2023-04-05T06:24:45Z","last_seen":"2026-07-29T09:38:42.97607Z","times_seen":8465,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min91ce.css?ver=5.16.0","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min91ce.css?ver=5.16.0 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 31 Jul 2022 19:11:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3633\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19303,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19257)","md5":"2a4a0c62a703b6523416a24d801119d5","sha1":"04b8d27fafa385799407fff135e7c083dd4ecf3a","sha256":"41aa305501c0ff03b8ddb1f1ad4a15267b4486aca76a65a74e8ea0455d8fa356","sha512":"3563ae1c95b0a0e215933e532f85cd5788525225df696a3b88511194da8ce8630e230b39dfef809cbbda409b740a34f6277447a1d19536a264fe4ae0ae613e39","ssdeep":"192:sP8XHGK+JRxSe6OSfNVsXZLUCpZETvebAmR+srfSbqkbQC4u/DUBMQ+b:pmK+JRQcx5ZETGNREmk4uBb","tlshash":"d582eba4e02922c92bb1c003e3d0774e7459f821eed9dd59fa5ba50c1fe16d3068ab7d","first_seen":"2023-04-10T13:47:12Z","last_seen":"2026-07-19T06:17:01.391871Z","times_seen":63,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 09 Jan 2025 09:00:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 23584\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":140887,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (53395), with CRLF line terminators","md5":"90a12f706309c5ef2df8f437c7900940","sha1":"e6920e7a86b547df4d524c2ce6ee3c6ebdea6751","sha256":"ff972d5f4ba7faad9caf6418a427aaa86f0e173f038258f4c7eaa6e868a5dad0","sha512":"8293cc261a5c2b89b46f3beae91da3054f303e844c0ec98af6b27872b3d97ebfed2477697998ab90316b0fe6e73dd93db7b40700815f4f22c21fa237485b669d","ssdeep":"1536:SzunAltRAerQLapq1RTKGqbzaM8BudKfQL7wl+bYdH:SZd3aMguQ","tlshash":"dbd3e871be81152a212b037fe167b70c50a5ca93da0e27e9f4fc912a45e6fd231b351e","first_seen":"2025-08-17T02:03:40.692091Z","last_seen":"2025-08-17T02:03:40.692091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.unvacationhq.org/wp-content/uploads/2021/11/unifil.jpg","fqdn":"www.unvacationhq.org","domain":"unvacationhq.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:13.103Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2021/11/unifil.jpg HTTP/1.1\r\nHost: www.unvacationhq.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T17:16:36.359793Z","times_seen":17601608,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"www.unvacationhq.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.minac9e.css?ver=3.7.7","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.minac9e.css?ver=3.7.7 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Jun 2021 05:07:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3987\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26702,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26516)","md5":"c55205bce667f5d812354fd1353e7389","sha1":"f22de0af271eba636a022c873c94fbcd81b4c89a","sha256":"c55902832fb84522d02ea1a60a30747403a140d8651fa748f13ba398b0c0df3a","sha512":"89a2e11075b7a7e64d8240ca062e3311f1fe69600c189ec8ee78ea0f78ca9db374bb1e0692e9aedaf8ee23bd58528bf6d0e20f977477daff073be57ee8e81bbd","ssdeep":"192:dP6RT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPbJVR8XD7mycP:0Ral4w0QK+PwK05eavpmgPPeXD7mycP","tlshash":"1ec20665930c60d3a3eef847ba0172a8277577999a864c54f30b7c9c8dc3a5772e8f18","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-29T16:47:28.868395Z","times_seen":86390,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor/assets/lib/animations/animations.minac9e.css?ver=3.7.7","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/animations.minac9e.css?ver=3.7.7 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Mar 2018 06:48:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2442\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18468,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10019)","md5":"4601ba55044413706c2022cb6c1c3d05","sha1":"5103ec2fbb389568ebf5cfe4fd721f3df2ff7aec","sha256":"fe513ef974b767510d0a2b9f1b4d3afa53185b89ab617c869e5e3d6db960192c","sha512":"8dab2d19378e34b40043621aac57b418e56486dcfebd1a5991be8a02ee6b071d07ec6bfd9408dea8ff0198995de9d42a46e66513d68b40b68056707e4e691e01","ssdeep":"384:FKJ30sBCwYe4oHjDl5fyLrHNck7Ige24YS5bqvcVV+:FKJ30sBCwYocYlm","tlshash":"c58269c9ee12104902a70373caca5e68c9388ec764325cfe7366544f0a51add73eba77","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-29T16:44:22.968043Z","times_seen":42872,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/uploads/2021/11/UN-VACATION-PORTAL.png","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/uploads/2021/11/UN-VACATION-PORTAL.png HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/wp-content/uploads/elementor/css/post-14c0c1.css?ver=1640795874\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 17 Aug 2026 02:03:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 27 Nov 2021 18:00:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 376933\r\ndate: Sun, 17 Aug 2025 02:03:13 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":376933,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 650 x 320, 8-bit/color RGB, non-interlaced","md5":"d5f6a42b9434c140876980463eaa4cdb","sha1":"b6fa4efa083dcfb5f97630b22bbc021dc7e9e775","sha256":"e358f7952cb5d28acd2697e02b79920f0dc6506aed1c138234dce5d6e1c1674e","sha512":"c9497007e8a83ce14d22ed14d89f3773846f81a79a7bf9d6c426fa0e74a18a1628b133ba5dd66fa4836e89165922d6a51eb3f1883a85fa10955f6c8386f1a1cb","ssdeep":"6144:b8ztwm/P3En2RIXxlHNXDszJj1L/ie8SwVtbIBUwbrBb+BhXjRwLIvvJTr0g8:uTvE2qBlHNXDszJceZMtcBNbFb+bXjRC","tlshash":"788423dd3ce3872c79135c0992b4ad9258d9116ef1ea1ca44e1fa134670a90caf7afc7","first_seen":"2025-08-17T02:03:40.700484Z","last_seen":"2025-08-17T02:03:40.700484Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/themes/astra/assets/fonts/astra.woff","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/fonts/astra.woff HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 24 Aug 2025 02:03:13 GMT\r\ncontent-type: font/woff\r\nlast-modified: Thu, 10 Dec 2020 08:30:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3304\r\ndate: Sun, 17 Aug 2025 02:03:13 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3304,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 3304, version 1.0","md5":"bfe0ed8503c926d68f58ed0408dfe0d0","sha1":"0346d02d96ff7d2a0278bc10f4dfdf365c80eac3","sha256":"ec7ef7aa5fd1e019f1c26193e95e46d481d4983673936a9dda086705ada6e3d5","sha512":"633772635848323c202a2e63451333d8d9b96d58f8778232d43448daf52758df1e741747088b7b482f40ca924a20ca910c53381496591eee686d3af8a356282f","ssdeep":"","tlshash":"2961d713d7dfde2ad022a73c09955766c7f0e8518760a78761d62bb00fa6bc48fa03d8","first_seen":"2023-04-07T09:04:00Z","last_seen":"2026-07-29T07:47:40.143401Z","times_seen":9005,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://globalleaveofabsence.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 13 Aug 2025 21:39:18 GMT\r\nexpires: Thu, 13 Aug 2026 21:39:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 275035\r\nlast-modified: Wed, 23 Apr 2025 16:07:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-07-29T17:17:50.879368Z","times_seen":269381,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":106,"dns":0,"connect":14,"send":0,"wait":14,"receive":1,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/poppins/v23/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://globalleaveofabsence.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 13 Aug 2025 21:40:30 GMT\r\nexpires: Thu, 13 Aug 2026 21:40:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 274963\r\nlast-modified: Wed, 23 Apr 2025 16:07:25 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-07-29T17:13:55.711674Z","times_seen":289812,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":101,"dns":0,"connect":14,"send":0,"wait":14,"receive":2,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.unvacationhq.org/wp-content/uploads/2021/11/asdasa.png","fqdn":"www.unvacationhq.org","domain":"unvacationhq.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:13.101Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2021/11/asdasa.png HTTP/1.1\r\nHost: www.unvacationhq.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T17:16:36.359793Z","times_seen":17601608,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"www.unvacationhq.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins%3A500%2C700\u0026display=fallback\u0026ver=3.9.2","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css?family=Poppins%3A500%2C700\u0026display=fallback\u0026ver=3.9.2 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 17 Aug 2025 02:03:12 GMT\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2426,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"af58fae9ad0e05e084c24e69d6273566","sha1":"82a2d4305665e5810121a07dbfdf04a8429effb4","sha256":"e51075b28da5e3e4c79c1a28fbd0e12e2570d35cfee136c1caaba13139d2b9c7","sha512":"56344987c28870f9881637e407095044ff67674fccc5d26b0b8f4354f13eabd9bee06875fb2ba430dddd850c539bc9c6b574aa7c201a35e891554659e15a98c1","ssdeep":"","tlshash":"48419d91083be1049b935cc222cf7e37fe0ea1547414e5786bfd0c98ada7c294361b6d","first_seen":"2025-08-17T02:03:40.703075Z","last_seen":"2025-08-17T02:03:40.703075Z","times_seen":1,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":151,"dns":1,"connect":28,"send":0,"wait":49,"receive":0,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor/assets/css/frontend-lite.minac9e.css?ver=3.7.7","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend-lite.minac9e.css?ver=3.7.7 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 02 Oct 2022 10:12:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12992\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":108428,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65497)","md5":"bb929f65f0502bd9c7188e0f2485caee","sha1":"ccefd7316236b8db7ab521eda604456492388a59","sha256":"b370f6233409b571bdb0abef8bdee915f95fd28740fa9a1f28953d1037eeb232","sha512":"8edebd23c91b404626680eef71247dce3fdcdaa73dcd555cacc9bb0a317f54713644a034d985db63f2b5f3a370ebec3dd1aa14def573c6d2859437101eedcd7f","ssdeep":"768:kI6VYI8DUx0r8xPm0Em67bKIMs378nq7yq9zWL67CSbf9g3l9UgfwhRVHUofiHuZ:ki9zWL67CWV0ofiOKvYtPyFs","tlshash":"07b36f237e037229616f4d2b83c7769c5324c5d2da122adaf9819803c7fbde5373a856","first_seen":"2023-04-05T08:09:08Z","last_seen":"2026-07-25T02:10:06.810338Z","times_seen":370,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.minac9e.js?ver=3.7.7","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.minac9e.js?ver=3.7.7 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 07 Jan 2021 12:38:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4035\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15055,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14869)","md5":"7a5dea0a705cc2f4cd87dbaaa6666bc6","sha1":"678bc6f750f13adb29bbc158eb0d9cd813b736fa","sha256":"97cf1307c16a437b77b5f7f5c9bc0b985d0745a14be5a279019aca5a3432e264","sha512":"7c19d0edc28fe8733075534de6176483416bb3535f37b7607536aea2ddf9c5591d864225049c9a74735c1daf44c72688d91c1133bb018683ade11f16ea596807","ssdeep":"192:bP6Vw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3o:OX8fajqZFwtdykZwRXcoWI2P9o7S3o","tlshash":"0462337b7d000da93cac595852a27d446d4eb32fbb430c6bbdc59de623a23f5719e006","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-07-29T16:44:22.9975Z","times_seen":13172,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min7433.js?ver=3.3.7","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min7433.js?ver=3.3.7 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 16 Nov 2021 15:52:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2256\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5462,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5419)","md5":"349c0933edd050e2b4c4b14ea24c3bdc","sha1":"82c18234ab2a72d6562e4486dae19de6959b3a30","sha256":"56c09d172dad6646d2e8877998d5c72bfe64800c440c6267a01bc537fe627aff","sha512":"f37087a53d604b10321fe3cb3eab2a4dde66f5dee9f3fcdc5d16f877d2df0d8e358bb5ab8e9e3fe28b76f3c23fe09d0a24aaced8e639f7ec447d35373c0db15e","ssdeep":"96:BDN3T9qA9fRraGb0HfPF4TlyHxV1bVujYmfbv2fM4Tx8o2:tN3pf9fdaGGf9pxfQjYOr6qo2","tlshash":"56b143d41a94fd2735f135c9e15b6b31662fd0333c2ab9c1ea22dcdd54e8e8183aa532","first_seen":"2023-03-07T13:18:18Z","last_seen":"2026-07-22T05:04:33.842735Z","times_seen":85,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor/assets/js/frontend.minac9e.js?ver=3.7.7","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.minac9e.js?ver=3.7.7 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 02 Oct 2022 10:12:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11702\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40513,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (40474)","md5":"9195e52afe51faf6fa959276ea149ae8","sha1":"5e18d4c1b5344b36fe9838b381d034a375619636","sha256":"0e4b2020366cf0e467191b309fe8f9a946228e2834bf2c053ae7cb8facb1d97f","sha512":"f5864738b12bfc2cd25f8c5a63b397e68bb2d57f0325af8ecb591b8352ad399d82a5916ea3752cae2e06b1d2609a4b0e04e8cfbe8cd3c9ee052b13844ced5148","ssdeep":"768:QRxiBDvxJMEa/mvGsfVehz8favEAz/c5G/TSebsvZiVH8URPSz5oedXLfPv3x+FZ:QRxU7xJMEaYfVnIEAz/c5+TSebsRiVHP","tlshash":"da0308563192d4aa51df48e7b0330219f3620dddb402b55eb6bdace6a4b1e8333767b0","first_seen":"2023-03-08T04:46:08Z","last_seen":"2026-07-25T06:56:37.739045Z","times_seen":644,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/abeezee/v22/esDR31xSG-6AGleN2tWkkA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/abeezee/v22/esDR31xSG-6AGleN2tWkkA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://globalleaveofabsence.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17072\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 Aug 2025 19:13:08 GMT\r\nexpires: Fri, 14 Aug 2026 19:13:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 197405\r\nlast-modified: Tue, 19 Apr 2022 18:27:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17072,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17072, version 1.0","md5":"45462752342c1004d9c92488ebcb5e0b","sha1":"3abfc280cfddd6bc1962e7e2d582af70e799f35e","sha256":"e9b78ce1cbff9e258afa3a91f5b9a0fe64ce792691eda7f66b9eaad19e468e83","sha512":"72a7ad773cff9b88eed09b1d35a311f804e4804398056778c43e40f66e0369850d1d5835f32fd5c435ad2e9f4f9d40618131a93add4e552dd08a72eea177a71b","ssdeep":"384:BIwdrpGkY90rnZiGkfmAehHlS6xSIkhlch:/rpGp9cZiGkfledw5Iksh","tlshash":"e772d062266f1729f5b44bc1e79c7b5ca194729118e38f828f35299e74238c12ef7802","first_seen":"2023-05-02T20:49:25Z","last_seen":"2026-07-26T15:02:23.076341Z","times_seen":1124,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":197,"dns":1,"connect":27,"send":0,"wait":15,"receive":4,"ssl":170},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/uploads/2021/11/cropped-cropped-250-UN-32x32.png","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:13.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/uploads/2021/11/cropped-cropped-250-UN-32x32.png HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 17 Aug 2026 02:03:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 17 Nov 2021 05:54:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2817\r\ndate: Sun, 17 Aug 2025 02:03:13 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2817,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"e62c58505a983496655bf72db58850c2","sha1":"b1a5c61603f91cde32b5958c69f5f76f1d8d532f","sha256":"4380445bee35db4d0601ac7c51fc9c0abb65ab1e085375a2aedb98946f957d0c","sha512":"c826d58743b64611e16c238d090ba3ac0802ef03cfff23faced78efe5c41139da1b7d2780513a76f300211d6d9c6084adc7a04b9472a26e63cf41920ae3f2422","ssdeep":"","tlshash":"04517e05b75df9cde3689196080b1de9851b219d83733c9a557118fe7e643cca4226cd","first_seen":"2025-08-17T02:03:40.707807Z","last_seen":"2025-08-17T02:03:40.707807Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min7433.js?ver=3.3.7","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min7433.js?ver=3.3.7 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 16 Nov 2021 15:52:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12435\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":52499,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52456)","md5":"aacce601cf3568045780a162f0b7768b","sha1":"6a161da8c621d4b41cd0040f1fce8f80661b56e6","sha256":"5164ce0c207ef0f918774fa757e7059fd2e62012b7b8e0d4c9ac6d9e0298000a","sha512":"94df33896a68862f0ff4ac267582bb64f39321049bb3d6eed9df98d39a9e5d972dda4b1916757539942eea8c8c95285f639fa0617c917415c43c0208533e046b","ssdeep":"1536:i1wT7LlDZfyUj1pCni0iEwsEJOXpv5P92WsC/bpUVJt4piWN2ORpDpPoZK5qcDDI:ihW6adyWf1yfm","tlshash":"373385dc70c2f06446d7b474a03f150ba2365dac044df551a7eac9a1abbae1eb232f74","first_seen":"2023-03-08T01:49:41Z","last_seen":"2026-07-22T05:04:33.789703Z","times_seen":31,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/uploads/elementor/css/post-1139f338.css?ver=1640795873","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-1139f338.css?ver=1640795873 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Dec 2021 07:37:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 338\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1079,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1079), with no line terminators","md5":"cb18d6192d1c812b8f4c9bc2b2a79b6f","sha1":"b9e588ba5be6ff343b281bebf7537e101bd8ec22","sha256":"dca97e240130da421c5df1177de64405fa0a2dd54214428ba634a6555165ee81","sha512":"311cff283b6cbbdfe071c02ef8f155c0f46b6335796bc3574733bd3bc94a519705304dc26d67cd86a3ea551978545d32c8a7ab28b0f0ca3c526d4087eada0980","ssdeep":"","tlshash":"0d11f045b923d032d077093fd2c7a02c112cc45b51af9aebe42d8649f9bfb0aa259947","first_seen":"2025-08-17T02:03:40.71029Z","last_seen":"2025-11-26T20:00:27.080816Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CABeeZee%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=auto\u0026ver=6.0.2","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CABeeZee%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=auto\u0026ver=6.0.2 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 17 Aug 2025 02:03:12 GMT\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":119772,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"bada4bcd9c3822a0b08f1c552aa531e7","sha1":"fc03868cf4572ff1591cd19a47a91dca3dba3eb2","sha256":"b5b35d2bcc23b34340a7fae75e85f2eb4d0c1e08eb5c44802e624fcf725722c0","sha512":"88cabb64044b6a8b7ea8bb1fbd2f7d5d77e8b7afa0c442581f1f951983e2c5a5c4c91b7d3a3cb2932b4adc1092e5802d6ced698c928e92de05b3e797597ebe05","ssdeep":"768:iFDFjFKFjFaBFeKFpFNFhc8f8aSefqOW3XEXa9eEV57qK9KaEe9cowV1S1afeS32:qdEbqZQXG1Ij2pk3Sdo","tlshash":"79c30ea1041b9440ab831ce223ce7e30fe4f92547181d076abfdab6badd7d63526835d","first_seen":"2025-06-28T02:42:18.061355Z","last_seen":"2025-08-19T20:38:08.675424Z","times_seen":6,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":244,"dns":1,"connect":15,"send":0,"wait":53,"receive":0,"ssl":283},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min52d5.css?ver=5.15.3","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min52d5.css?ver=5.15.3 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Jun 2021 05:07:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12133\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57912,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57726)","md5":"eeb705d0bdccfd645d3bbd46dd1fbab3","sha1":"066def290f42ed8c00860e573cc880bd46e9ced4","sha256":"d01a2ba2805c78957e15a2958135de0f3cb88e95159dd0f6c0a032bd76b1b0e9","sha512":"39d11741808e95d8ea504b2e30ab19463f771eddb741196121bf04fd7d2c6f066199ef1e530ea0f2aec077118929a91c05bbfbfbf3d7d067366ed7fb46ef1c64","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzO:0E0PxXE4YXJgndFTfy9lt5C","tlshash":"1843f9b8e54c01cab731c44bef42b2bc61b6f73de5914d95f00e691c2ad26a81185fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-29T16:44:22.957056Z","times_seen":27632,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min52d5.css?ver=5.15.3","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min52d5.css?ver=5.15.3 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Jun 2021 05:07:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 290\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":679,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (493)","md5":"efa88cfc042384d91e95914e69345b33","sha1":"82c415139d88242f163874366d879fe636385091","sha256":"1e335f8b9a948eedbf189b98fdb5584d1896a4eaa7f17aa064e2e3a2c41e0844","sha512":"1a2a2a5f437155491a2a15fd1b0183000b8fea16e4d82444fbf11dfbd7d81165569007c64c45abb63e856695587e2f5d0ea075b5a7a9d1fd55ee9ec431204b7b","ssdeep":"","tlshash":"62012ba506110045c2820b063adaba1dad06d2587c196e53a12fdd190cf9e5f11f6f49","first_seen":"2023-04-10T13:47:12Z","last_seen":"2026-07-27T13:08:27.546889Z","times_seen":201,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/elementor/assets/js/webpack.runtime.minac9e.js?ver=3.7.7","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.minac9e.js?ver=3.7.7 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 02 Oct 2022 10:12:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2044\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4957,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4918)","md5":"40b9d7ccf0f819551e24c793b1331410","sha1":"652f25c5c5ada11d6f98a3a6b0692f89a0cba560","sha256":"189526e3c25dc1cd28633db393e38d926f86432f000908ed3f55aaef43778cc0","sha512":"bd4fd905933703dbc5632113b54245ea18b43bde7af8e82b959f67e6560f9e87d8225d5bcb43cda6771cf6f893c1be54ef290c11c8af0ef44c1954bcf07f2ae3","ssdeep":"96:BeN6AUjqn93zFK245f8ZlarNVwbVLXkqfjQezovOA8S2:8N6j4935KTe8NwdXkymOhS2","tlshash":"27a120d41b90fc6b35e134c8e11aa731652fc0333c1bb881fa22dced94f8a8187a9971","first_seen":"2023-03-08T04:46:08Z","last_seen":"2026-07-25T06:56:37.719031Z","times_seen":643,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-includes/js/jquery/jquery-migrate.mind617.js?ver=3.3.2","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.mind617.js?ver=3.3.2 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Nov 2020 10:36:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3995\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11224,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11126)","md5":"79b4956b7ec478ec10244b5e2d33ac7d","sha1":"a46025b9d05e3df30d610a8aef14f392c7058dc9","sha256":"029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300","sha512":"217f86fee871fa36eca4f25830e3917c7bf57a681140b135c508aa32f2a1e3eff5a80661f3b5ba46747d0c305af10b658d207f449550f3d417d9683216feea8f","ssdeep":"192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS","tlshash":"8232c59d71a6b4624eb735b8b03f939f71b605d9250d8940d26cc9f6782c84ec22bf68","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-07-29T16:07:03.027565Z","times_seen":85945,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-includes/js/jquery/ui/core.min0028.js?ver=1.13.1","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min0028.js?ver=1.13.1 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 24 May 2022 21:26:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6637\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20715,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"6aaf0a4e8eac131defea126f5b1b5fbf","sha1":"24da0326af36303e5a1e9799a3c26f7a1077928c","sha256":"240b702419d6c39ecc4896f0132ccfc9bc517e9aef0c782d99580e0c678b47d5","sha512":"a81796898efeb3673291b036432910026486146ccf28e2be0d802afac689104e9b99d969ce89048ea300afed2604977ecfa4b40be914c20a2f1c69f7b723de52","ssdeep":"384:Au1feJLyqVS3dsfA/N1H1i28fuxNhfGX0CiSZw/OwR229FkFvd:uS3Vb3vrN7kv","tlshash":"b692d78db2453815c5f7a275503f534fb132a29cb10a889df4acc9e92c7ae992073f79","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-07-29T03:31:19.344662Z","times_seen":3544,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min1a7b.js?ver=1.7.7","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min1a7b.js?ver=1.7.7 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 29 Sep 2022 06:18:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 339\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":754,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (754), with no line terminators","md5":"afb55c29bdbcfc262d9fa56743572cad","sha1":"d4b6cb9df2b1b5477cd968fb05cf5faa1d13d6bf","sha256":"c30dab20b677f2b13f42a4a04385a3c6d380fa023a4a1c32f45f2996e152bfba","sha512":"458d91d1274af1448e950803384da02c7896521ef7dc47ac7735a8a37226b5292eba33def05f72f3ad435e2ecf2afdf5d79a6b7b91d145a2de3074b0c80997d3","ssdeep":"","tlshash":"ab016d38b83bbeda1c6f522414af07cfb251c4b2a2055c51432095b81e75eca630bf88","first_seen":"2023-03-07T01:07:32Z","last_seen":"2026-07-29T13:41:26.439028Z","times_seen":5761,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.unvacationhq.org/wp-content/uploads/2021/11/secretariat_1.jpg","fqdn":"www.unvacationhq.org","domain":"unvacationhq.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:13.105Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2021/11/secretariat_1.jpg HTTP/1.1\r\nHost: www.unvacationhq.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T17:16:36.359793Z","times_seen":17601608,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"www.unvacationhq.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-content/themes/astra/assets/js/minified/frontend.min2e46.js?ver=3.9.2","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/frontend.min2e46.js?ver=3.9.2 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 07 Sep 2022 05:59:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3808\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16935,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16935), with no line terminators","md5":"423e4eab18767461cb68a11c5b2a0cb4","sha1":"d5c17c5fbecfe815e7c27347155158e90e9fb709","sha256":"d6a23f9c4dec2f455c8e2340a99ad4db01a1d538bb1f2537bab3991ec64e14c7","sha512":"15feb39953f808f7578508f00d9daea092f47bf52875cbc6f6f2e93f700856f9e6631f4d23310d88986aed72cea4deda0b0517ca2d72c76f19801b5d182d51d9","ssdeep":"384:uYwLboOAySjd5yUa3oDo3oYCJLjanUyCdyGvyo+UylJNj4pyCAwyNCCBzycEQysD:uYwLboOvSjKU4oDo3oYCJifRo+LlJNjP","tlshash":"3d7284a66200253604ff1beaf4daaac8767024affe0944115979cc2e19b4fd351f1afd","first_seen":"2023-03-07T13:22:33Z","last_seen":"2026-07-27T11:10:52.259536Z","times_seen":1013,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.unvacationhq.org/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js","fqdn":"www.unvacationhq.org","domain":"unvacationhq.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:13.203Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1\r\nHost: www.unvacationhq.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T17:16:36.359793Z","times_seen":17601608,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"www.unvacationhq.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-includes/js/jquery/jquery.minaf6c.js?ver=3.6.0","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.minaf6c.js?ver=3.6.0 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 10 Mar 2021 16:37:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30273\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89521,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"02dd5d04add4759122013c5ab4dc5cc2","sha1":"a45a56e396ac549b4ff39b696ce9e0c16a7612de","sha256":"bd4de6a3fc0fb68d6f76ba7b93514b96a92e585c295b5351c31ad92a4b0777ea","sha512":"04690d9875e98f5ae6bf94f5c71b7a0177b374bc09609a0f58312e1c337348749a40e07fe226737dc248bd8fe2f6a489071258619affc7f1df644e4255159615","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vM:DIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e99309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-07-29T16:07:03.038867Z","times_seen":59851,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalleaveofabsence.online/wp-includes/js/underscore.minb37e.js?ver=1.13.3","fqdn":"globalleaveofabsence.online","domain":"globalleaveofabsence.online","tld":"online"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:12.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.globalleaveofabsence.online.undeliverycomp.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 17:53:33 GMT","end":"Thu, 02 Oct 2025 17:53:32 GMT"},"fingerprint":{"sha1":"AF:28:C7:89:FF:B7:76:40:EB:61:DB:74:EE:AF:8F:A2:C3:DD:0B:62","sha256":"C5:2D:78:4B:73:EA:3A:97:0B:E5:AE:15:D1:82:90:AA:99:CC:54:8B:FA:F0:E8:7A:AB:54:0F:9A:5B:4B:19:0E"}}},"request":{"raw":"GET /wp-includes/js/underscore.minb37e.js?ver=1.13.3 HTTP/1.1\r\nHost: globalleaveofabsence.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalleaveofabsence.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 16 Sep 2025 02:03:12 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 24 May 2022 21:26:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7176\r\ndate: Sun, 17 Aug 2025 02:03:12 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18911,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18876)","md5":"42aa17e1f850a414638ee4a32a3aa807","sha1":"2e42d03a5e042701191650c041eae1cfb2d6c7b9","sha256":"0da4791b446818516f710c51707081aec7b23a7c5212fc0b2629c973210136a4","sha512":"edb01d61cb621880f18b83c753510ee0464590c18ace73ed713193f0c030201e3f2dade9f599740447328c4e2a64d538c8031ba5befc82f600cd2f080b74f99b","ssdeep":"384:i5N27pxYnTV0BZ/cdBGuWxtDmFHdloffLWj2eo0pnPDWWU:K29xqV0BOBW4DDU","tlshash":"0e8262c83ad7f059936320ba403f2497f23a6e6264acaa40d265e4fc7c7455dd137dac","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-07-25T06:43:29.320364Z","times_seen":1575,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.unvacationhq.org/wp-content/uploads/2021/11/COvid.jpg","fqdn":"www.unvacationhq.org","domain":"unvacationhq.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalleaveofabsence.online/","date":"2025-08-17T02:03:13.108Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2021/11/COvid.jpg HTTP/1.1\r\nHost: www.unvacationhq.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T17:16:36.359793Z","times_seen":17601608,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"www.unvacationhq.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}