{"report_id":"f085703b-2d6c-4a31-a2df-f60124f99a2c","version":6,"status":"done","tags":[],"date":"2025-10-26T10:45:19Z","url":{"schema":"http","addr":"109.106.252.112/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9999723\u0026pdata=https:/","fqdn":"109.106.252.112","domain":"109.106.252.112","tld":""},"ip":{"addr":"109.106.252.112","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"title":"Home - UPS shipping errors and packing tips"},"submit":{"url":{"schema":"http","addr":"109.106.252.112/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9999723\u0026pdata=https:/","fqdn":"109.106.252.112","domain":"109.106.252.112","tld":""},"ip":{"addr":"109.106.252.112","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-30T10:45:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ups-error.com","ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"domain_registered":"2019-09-17","domain_rank":495372,"first_seen":"2020-04-16T05:26:44Z","last_seen":"2025-10-24T11:29:58.75395Z","alert_count":32,"request_count":32,"received_data":999268,"sent_data":16427,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"All in One SEO Pack:4.8.7.2","description":"All in One SEO plugin optimizes WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"punycode:1.0.0","description":"A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.","website":"https://github.com/mathiasbynens/punycode.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Mailcheck:1.1.2","description":"Mailcheck is a JavaScript library designed to address the issue of misspelled email addresses during user input.","website":"https://github.com/mailcheck/mailcheck","common_platform_enumeration":"","icon":"Mailcheck.png","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.164.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"All in One SEO:4.8.7.2","description":"All in One SEO optimizes a WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]}]},{"fqdn":"109.106.252.112","ip":{"addr":"109.106.252.112","port":80,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":143759,"sent_data":1026,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-19T22:12:19.186805Z","alert_count":0,"request_count":1,"received_data":427768,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"images.unsplash.com","ip":{"addr":"151.101.194.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-05-29","domain_rank":86676,"first_seen":"2015-08-06T06:03:25Z","last_seen":"2025-10-21T05:28:49.73509Z","alert_count":0,"request_count":2,"received_data":103864,"sent_data":1286,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"859a1666f00751637b472b72cec7d514","sha1":"073d7c9b30dde3dd4ab61b75c2ff5a788a542a5e","sha256":"0f72f80a6961bcae4be4920c9680ff89f43da7ff739861350bddcad8ff97470d","sha512":"1752a27338738e4728a3ddd5dd46e0d5a091aed9a350c8933ae6d616e607c3fe5159c26061c410ff5cc4e22e958497f22f8f2ecc3415910ad63d746a2a1e3200","ssdeep":"","tlshash":"c161b9de3775348b32b604d16a3f0e07fb7258361a88d034cab9a7141cb1463d37ae5a","size":3384,"data":"","first_seen":"2025-10-05T04:25:11.275987Z","last_seen":"2025-11-16T08:41:22.46997Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T13:49:26.30716Z","times_seen":638763,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/plugins/wpforms-lite/assets/lib/jquery.validate.min.js?ver=1.21.0","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"9152a2ca7c22170d57da0b724782d17d","sha1":"33f17178d9b71ce26cff40ff4e46a2ff92af1326","sha256":"607426a3217b1ed9f5cc7c637e7306fde073a1f34a4126704340c0e98b48a43e","sha512":"c5e19249ceaa265507fcd3ce38fd8cb82a4006948ec4e70373f566a08ac8818521f8d3a4313233264d4af0305d1d2f38d24726166f009c454d5774caf15d6503","ssdeep":"768:pcWZ6wC8lHvr8dkMioFpg5S3yBQyQEny+L+gxV4Ky4vZD4:pFCir8d3ioFpg5S3yBQyQEny+PaKyqd4","tlshash":"19b29689769271165e9720f4908ba60b60b66961e018f83cb5f8e4d1bef4fcc50f7b78","size":25307,"data":"","first_seen":"2024-08-25T23:37:28Z","last_seen":"2026-04-04T13:42:13.022445Z","times_seen":9371,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"190bf5a6f3e99640be2a1c899798145a","sha1":"5c88bea7df1ee8f8adc3e00fe33465d3cfca388e","sha256":"dc39305dd9a24521cefe059e189d17234b7bfc36888815cd220ca3c2f4a18064","sha512":"025f6db2079c2d620b34ad14678dbd5d87fe54b3ddd98c941442bf13b80b81aaeb0cf4b0f46465e4cbeefd39052d534c2ffbfaa07253ba3ec22ba3a2e6c1e7e8","ssdeep":"","tlshash":"0001477324c10afbc9bab80257563b993a1333eae678741049dc550434bfe07e0d4cc8","size":697,"data":"","first_seen":"2025-10-24T11:30:03.284617Z","last_seen":"2025-11-16T08:41:22.470876Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/plugins/wp-statistics/assets/js/tracker.js?ver=14.15.5","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca2be7699b36cdb54806c8f512492520","sha1":"f054bad5a98ce4d60e9f560c2f93a364efedab93","sha256":"c01fa4f79ce47a5a684b37c31f49b9304499fb1eba255aeb9d03cffb3d7e83ee","sha512":"8a510ae4a71f25b9dc99026fd4b0f883a41821e2774476e8d765eb2cb151d5fcea73168f25cd5ec4170680b3831dd67f21fa0d2245bd2830b8b6872cf3db333c","ssdeep":"192:5nQ998xYO9SkmsKlsLqWOGAOZPSeIWCE+D:5nQ9WxqCLw/WCEq","tlshash":"0c0284467bd25af1ccf23468152a2a3975ab0ed33202e170f828ddd3445c6d6e743b7a","size":8951,"data":"","first_seen":"2025-08-11T14:39:25.499896Z","last_seen":"2026-04-03T22:09:27.948375Z","times_seen":1611,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"955151146bc15383a2e4dd0134da7ad4","sha1":"2fc5ab37bc1c25139675579ed4fbcd830391262b","sha256":"01d6428c077d1cd49e1c926b1681d20a8a9fa67611924836003c4b2aa607b658","sha512":"0ef4e2df5e77105a8db1d5e85a320050fb1e23cf37781e07b1880185f2ba2c15f19ea20ef90d6c72c32c71e4bf249d2691e092daa131e82d8a4259eac686f5fc","ssdeep":"","tlshash":"10f02232ae981624e06e518a78afa3bd7f3e4235ab011c34ad1ebd3c8785d864612a00","size":602,"data":"","first_seen":"2025-10-05T04:25:11.277373Z","last_seen":"2025-11-16T08:41:22.47184Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-P8QZGVWM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9a76442e5098cd6c42d767cc25b6707","sha1":"337a24147d97873291cceef4b499a5d585f9afaf","sha256":"b768c745a111ca758b7df50963c2cd0637419be2cfc92b9969beb701a655a422","sha512":"60a42c1d799675fc7043048675f6c08f7edc100b87e1bb4028a03624fc3a26ecd059eaa9fa7ab951b7ba4b5d0f37d718af8f7a6e477d011e39c305e35ce6b036","ssdeep":"6144:xBUyJBX178429Z8nP57wr/s0s/+Kxxc20hYllAk6KlhDjMc:/PJBl929Z8nP58DG/mYl5X","tlshash":"4f9419ce73d670269396f078503f018ba57b29a2b45cc896f189cce42d74a9a4277f7c","size":427164,"data":"","first_seen":"2025-10-26T10:45:25.572059Z","last_seen":"2025-10-26T10:45:25.572059Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/themes/extendable/assets/js/navigation-customization.js","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"00512510279f7b550ba007f0b9399082","sha1":"76185681f3b32d60c55853c24a92e1f3642da803","sha256":"2fdc2b54d5a2e6369cc0cd2c817a1cf49d45d48b2c2daea01705cdd3e14a74c2","sha512":"ab4d5956ce0a6bdf1fd4b3a0f41d954613f94f643062f8ba2e42af7f54a8e063d4ff4f34156b07bf83c660191a5375001e74e6a2a266a3ab728d913032757e45","ssdeep":"","tlshash":"1f11ce3c46b260750223a2ff03e7528179b09417e44688d97a7cc74d6fc0960e776b5e","size":1048,"data":"","first_seen":"2025-07-04T08:26:21.29354Z","last_seen":"2026-04-03T14:38:46.554167Z","times_seen":798,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/plugins/wpforms-lite/assets/lib/punycode.min.js?ver=1.0.0","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"23b0d9051790b4a386f66ff1836815bc","sha1":"0dc76a6bcad4bdce1b88ec6e68215733c97fc520","sha256":"69a15ba379260f131f7dfa2a5414cbdc48db661ac21d696773c7e67259255ca1","sha512":"0a042362b87d03c344926446dbdafb436bf5ccbbab4826a8fe27c21b3cd1d8661620c88c636400379fcf4b66a75a63ccd21e4ddf8b86cec11ee972092641126b","ssdeep":"","tlshash":"803172993743b05446d0f481180b54a86cecdf50280aa4a8d7027bab88f4fe5e47efac","size":1713,"data":"","first_seen":"2023-03-07T12:04:46Z","last_seen":"2026-04-04T12:18:16.369735Z","times_seen":23196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/plugins/wpforms-lite/assets/js/frontend/wpforms-modern.min.js?ver=1.9.8.1","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec590fd1db434e26795792279783f0d3","sha1":"2a516d62759580bf49048682094caf33e020937c","sha256":"9525f994b6fcb36afa42ff71edc9588df8911c1eb560af2958d7da8494b1222e","sha512":"ab975c8e26b9c6bf5c69af10c955bce506ed9f90b5ff29576fa975783e55db15acc24e64083c0718b5b1cb50c58b002a3d278fbdb7020327f5b35dff313d6885","ssdeep":"96:Vyc7ImLg9VAsjujgHawXuIHa2Plml2flIYleYlbWVfc9jFPIXdtf0+p1ftY8E34B:h7IZjAsjegLLwfAJPIXDfNfftYZ343RH","tlshash":"70c1c7b065611fdbd91f60bd38ff57832701b8b1cd829e71a12184272ead9ca2277b07","size":6005,"data":"","first_seen":"2025-06-05T14:55:30.060973Z","last_seen":"2026-04-04T11:31:37.048416Z","times_seen":3533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"109ecd7a5db87f00e65d345b77d35af6","sha1":"c66861c01aea1d24bd27652e7b55152a4850d145","sha256":"165cc50d501719caea80126aefbf88c799ee0f01af6953afcbc26ce11d5173ca","sha512":"bcb32cba0877140ae53b5717d64e1cb2bba4feb470d4178decb5cd8f3172852395ed40b9682ecde35f70476797f238684cc26fa8b8fecfa168e5fe211d17962e","ssdeep":"","tlshash":"b111aac4b20506b404612919c0340bc9e2b9699cb5cb1ca7cc0c9c1cf1b251f4176f7e","size":1049,"data":"","first_seen":"2025-04-01T15:25:16.188472Z","last_seen":"2026-04-04T05:36:58.157794Z","times_seen":13068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7623e032008ccbbc539356ec183517db","sha1":"035b09360a8611aa06dc520c827516086f49bb5a","sha256":"be744d75b7e0eb2e01f38d5046bece04994be8aed5a5770b2d9c8ef23c5472f7","sha512":"3b2023497eee7892fcd911101f63c3304f4f2d13a3c243ac9972cbadb64d7fcb4db06314c8ff21fe8b67e1c9670c23a0b74b5a3ccf980da3e8049f7b96bbd541","ssdeep":"","tlshash":"99c0c0ab22bc1d95cd79cac00042501c80078d134b3374f2b7ec808c01f0ee21cfc291","size":182,"data":"","first_seen":"2025-10-05T04:25:11.279114Z","last_seen":"2025-11-16T08:41:22.473743Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/plugins/wpforms-lite/assets/js/frontend/wpforms.min.js?ver=1.9.8.1","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf25cee22c8244872e4b02a2ba90f07b","sha1":"232e82fc124308809046c502472bf211c5e3f3ed","sha256":"123d8cf5f204646119ce1557edf7ac419502d86fad6320faa55e0b67b2d996b4","sha512":"5de7b3281ba5074c2201d8a037f6dfbf4125207dc42436b6f509d3cce77b803af874a242da7963c21fe3824b17409d48a454bebca826ed433ca6e73bdf5414aa","ssdeep":"768:LgxOxrVS81SVC0ONtpu5y6BUJfsXZmcd2gWhZOHrQcu0+Jsj1nhBH2b:Lg3stoIOVpm8WhZOHg0+uNub","tlshash":"5833a97476102fe299bf51f664df53436321b9b2ce0e8c90a6a355760e78cc26213f3a","size":51379,"data":"","first_seen":"2025-09-24T10:16:59.344435Z","last_seen":"2026-04-04T08:05:15.947699Z","times_seen":1604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/plugins/wpforms-lite/assets/js/share/utils.min.js?ver=1.9.8.1","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6d4e2674cd89be5410d2e0bb310825c","sha1":"a8c20048302c6d5933b6653f754d7276272415cd","sha256":"5c299dcc0ea739ddcb05af1f0e0c1549e4e40ac1bd5bd55cbb0cb9c7ed41c5f1","sha512":"139951e42fd9957b8c9dcd24a8bd8b76b79362414ee88a3cd5e34116f00d5f3d127704076723b33647a5d48ddde0f7723aae748c81e95079189cbccd3f2d8fab","ssdeep":"","tlshash":"773112e079c3a98d9b57713e90268601a77ffcd1aa5b29b1dd978801380644e72f2a54","size":1490,"data":"","first_seen":"2025-06-05T14:55:30.080511Z","last_seen":"2026-04-04T13:42:13.032961Z","times_seen":5912,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/plugins/wpforms-lite/assets/lib/mailcheck.min.js?ver=1.1.2","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"84cdf2af726ea0ad5c67b7ec6479e363","sha1":"bba43108f022eaa28a7637c1ed7b7cb287d1691d","sha256":"8a3820962c15d26c4cdc9eff4f8c66ed29f96e353b7893285cb14962d6a6956d","sha512":"f33efcc2b5cef492d562aff1ec40006a9620b57a82eff925a63f163c56e4b05f930e682141a81ff0180326a7b6a91f9d5877ff5dcdd786241a85ea8ae2c03a76","ssdeep":"","tlshash":"e1814051a2a12ca599b060dd388fb445a47aec252b8ce8f8f654aca15e3471070fbced","size":4014,"data":"","first_seen":"2023-03-07T01:33:05Z","last_seen":"2026-04-04T12:18:16.363099Z","times_seen":25188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"03b2b4aae4109476fba108b5287eb299","sha1":"e28eedcbf215b586583385837d69faaaf7c6579f","sha256":"47865c1dd89c16271dbe7cb71d6563e31e40fd1bf2dfff90c86b44735c585e3e","sha512":"001c830d9a50a10c006995cf761512799727dc20ffb6bdedb355e174a622eb9fc4042b684198f76793aefff80e311c734d9408a1ec9a767a6852a51112baddea","ssdeep":"","tlshash":"06112f48b2c18eb064e67fd0421d3a3914f74a4364249ba0d6a45c5d01bfc8cbb62213","size":868,"data":"","first_seen":"2025-10-26T08:47:24.299452Z","last_seen":"2025-10-26T10:53:30.732095Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T13:49:26.298459Z","times_seen":685383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/plugins/google-site-kit/dist/assets/js/googlesitekit-events-provider-wpforms-9774e7805b244d82c869.js","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cfa2ee23333b567548a8cbcbf0f5982","sha1":"3902d0f9f86f23ce23bf25c7479bfb4b1ddba60f","sha256":"f0adead99f8d9f3cd7e168356a5a3079eedf462de87a7da9641bb77ee3c37d27","sha512":"80a4a4c808f46b20177fec8ee1a931010e5d14047c467a7f976cb5b2529b569eeb61558804f2f1a2d2a2347a1e2041500c1b275b1b4c31bbb4b36d8b4183b2b6","ssdeep":"96:Hl69XlpAvFfw9X0uK4iamf93Dk3Gi10GAeN1Y/7BVOIyEyi4GSWYj9Ad:F2XLMY9y4iagk3GPUWPryEpdd","tlshash":"a79188ccb3d7f5f29be6e5a090778106f12c3916385d6800e26688e17c66e8b61b2b35","size":4419,"data":"","first_seen":"2025-10-21T02:58:49.636627Z","last_seen":"2026-03-30T02:33:34.942073Z","times_seen":413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19251,"data":"","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-04-04T13:47:46.943916Z","times_seen":195806,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"54f270dbb5ec295561f345593c3c832e","sha1":"415afeda97a336dd9046ea2c7692c7f9bca961b6","sha256":"2f23a152dbfe67d9f1699f8f24888cef566fc661ec6fcd46860376ab3d5b6806","sha512":"229d796b05fe48aac47adc03c87508a8e2835867b9a7e68458e6c811952d01f3f501b16d4f765c1d802e42a99c4054f00aa5b784b524294f5defc9544a1dbbd2","ssdeep":"","tlshash":"79613422f9444c7ef59702d4f4e6ae421bad4580ef015689e1d8d8be0bc9e45c417a2f","size":3411,"data":"","first_seen":"2025-10-05T04:25:11.280369Z","last_seen":"2025-11-16T08:41:22.475585Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/plugins/wpforms-lite/assets/js/frontend/fields/address.min.js?ver=1.9.8.1","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c7f814165ea7c970f8bffb2a5ff4ff8","sha1":"0bf79ae49853182174b1f1ae8178897f1bfa6c73","sha256":"6ac9ab6e57f088a352017885d50d287cffbd3d38ced9d7be7379ce84dca0ddff","sha512":"33aeca56a90eaef952a3a3eab021fcf744946bf58ea2794a6a620ec233a988bd7fb5e5ee48ba69f52587402425658bc84f1925c5bac9519a1323852566e68e5e","ssdeep":"","tlshash":"b4116d78e2181fcdeafb029260dfc317170559f2cd1a89565387aae7299c741a94fb30","size":1057,"data":"","first_seen":"2025-06-05T14:55:29.986691Z","last_seen":"2026-04-04T13:42:13.032463Z","times_seen":6224,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"images.unsplash.com/photo-1624137527136-66e631bdaa0e?ixid=M3w0MzUxNjF8MHwxfHNlYXJjaHw0fHxjYXJkYm9hcmQlMjBib3h8ZW58MHx8fHwxNzU5NjEyNDYyfDA\u0026ixlib=rb-4.1.0\u0026orientation=portrait?fit=crop\u0026crop=entropy%2Cfaces\u0026auto=format%2Ccompress\u0026w=1280","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.194.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1624137527136-66e631bdaa0e?ixid=M3w0MzUxNjF8MHwxfHNlYXJjaHw0fHxjYXJkYm9hcmQlMjBib3h8ZW58MHx8fHwxNzU5NjEyNDYyfDA\u0026ixlib=rb-4.1.0\u0026orientation=portrait?fit=crop\u0026crop=entropy%2Cfaces\u0026auto=format%2Ccompress\u0026w=1280 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-imgix-id: 53b13713b2318edf491ee33e869a92318d82e2bf\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 22 Oct 2025 04:58:54 GMT\r\nserver: imgix\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nage: 366364\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230048-FRA, cache-hel1410025-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 47537\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":47537,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ef6ae284af022ba2aa5fa073cd09194e","sha1":"de054b1f820412cec10566fcd5965b0d6514a0b5","sha256":"d8ee98cfed5e80b7524a475227ef4e228da052e872fadb7944ee976e360c7409","sha512":"e5e1b40f44eacd559d18ee86377462360d6ab1c8d7af765ea7a0b97a9a88cebc7d50ae679bf1b4551e669b13c77d4ac7d4aa617596919de49fd9a5c23d82e2f3","ssdeep":"768:RBfmxHSjDFsfpkjUJUwiCMlwRua17wgEwjIF2ocE9Xy9VqjKH040t9g+u:KxSDFQfCv453P+XoVq2040vU","tlshash":"8823f25f2732199ee384dc68dd671d5222f337075c84e97768817cec158e0b5123aaaf","first_seen":"2025-10-05T04:25:11.273424Z","last_seen":"2025-11-18T12:34:50.778722Z","times_seen":95,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":8,"dns":3,"connect":14,"send":0,"wait":15,"receive":18,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/themes/extendable/assets/js/navigation-customization.js","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-content/themes/extendable/assets/js/navigation-customization.js HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 03 Oct 2025 20:58:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 407\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1048,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"00512510279f7b550ba007f0b9399082","sha1":"76185681f3b32d60c55853c24a92e1f3642da803","sha256":"2fdc2b54d5a2e6369cc0cd2c817a1cf49d45d48b2c2daea01705cdd3e14a74c2","sha512":"ab4d5956ce0a6bdf1fd4b3a0f41d954613f94f643062f8ba2e42af7f54a8e063d4ff4f34156b07bf83c660191a5375001e74e6a2a266a3ab728d913032757e45","ssdeep":"","tlshash":"1f11ce3c46b260750223a2ff03e7528179b09417e44688d97a7cc74d6fc0960e776b5e","first_seen":"2025-07-04T08:26:21.29354Z","last_seen":"2026-04-03T14:38:46.554167Z","times_seen":798,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/plugins/wpforms-lite/assets/js/frontend/wpforms-modern.min.js?ver=1.9.8.1","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-content/plugins/wpforms-lite/assets/js/frontend/wpforms-modern.min.js?ver=1.9.8.1 HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 04 Oct 2025 14:32:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1866\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6005,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6005), with no line terminators","md5":"ec590fd1db434e26795792279783f0d3","sha1":"2a516d62759580bf49048682094caf33e020937c","sha256":"9525f994b6fcb36afa42ff71edc9588df8911c1eb560af2958d7da8494b1222e","sha512":"ab975c8e26b9c6bf5c69af10c955bce506ed9f90b5ff29576fa975783e55db15acc24e64083c0718b5b1cb50c58b002a3d278fbdb7020327f5b35dff313d6885","ssdeep":"96:Vyc7ImLg9VAsjujgHawXuIHa2Plml2flIYleYlbWVfc9jFPIXdtf0+p1ftY8E34B:h7IZjAsjegLLwfAJPIXDfNfftYZ343RH","tlshash":"70c1c7b065611fdbd91f60bd38ff57832701b8b1cd829e71a12184272ead9ca2277b07","first_seen":"2025-06-05T14:55:30.060973Z","last_seen":"2026-04-04T11:31:37.048416Z","times_seen":3533,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:59.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.3 HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Jun 2025 01:53:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4769\r\ndate: Sun, 26 Oct 2025 10:44:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19251,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-04-04T13:47:46.943916Z","times_seen":195806,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-includes/blocks/image/style.min.css?ver=6.8.3","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-includes/blocks/image/style.min.css?ver=6.8.3 HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 02 Nov 2025 10:44:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Feb 2025 15:46:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1448\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6808,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6808), with no line terminators","md5":"b6cacb67309eb1fe94f7b2013688f581","sha1":"563bff46031918bf95ebbf81c5cba548a5c9eb6d","sha256":"12389828f28e367b1837badcda0cefbe35a22c750307b1d625a3c4c86181d9ea","sha512":"3679fdf57291b2e94a725a7d08f20233d4c29bbe72489914606e1fc8c5e582110b7cab00129c4bbad8b512d1f99e8e0e114b630c5057e77dedb9c5f04201526b","ssdeep":"96:+zXuPyPrPhbPGmfsHy8IPLh7TRiWdAZG6O+my5yLrAvwZV4D0DXiQpeiX:SXuPu7mS8IP97/y5mAyKyU0br4C","tlshash":"b6e13511435054b795eb8327344a93a80719ffc3eeade7de7456c30292c72954a77f06","first_seen":"2025-04-14T12:09:10.364157Z","last_seen":"2026-04-04T04:28:20.99996Z","times_seen":2691,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/plugins/wpforms-lite/assets/js/frontend/wpforms.min.js?ver=1.9.8.1","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-content/plugins/wpforms-lite/assets/js/frontend/wpforms.min.js?ver=1.9.8.1 HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 04 Oct 2025 14:32:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14050\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":51379,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (49192)","md5":"cf25cee22c8244872e4b02a2ba90f07b","sha1":"232e82fc124308809046c502472bf211c5e3f3ed","sha256":"123d8cf5f204646119ce1557edf7ac419502d86fad6320faa55e0b67b2d996b4","sha512":"5de7b3281ba5074c2201d8a037f6dfbf4125207dc42436b6f509d3cce77b803af874a242da7963c21fe3824b17409d48a454bebca826ed433ca6e73bdf5414aa","ssdeep":"768:LgxOxrVS81SVC0ONtpu5y6BUJfsXZmcd2gWhZOHrQcu0+Jsj1nhBH2b:Lg3stoIOVpm8WhZOHg0+uNub","tlshash":"5833a97476102fe299bf51f664df53436321b9b2ce0e8c90a6a355760e78cc26213f3a","first_seen":"2025-09-24T10:16:59.344435Z","last_seen":"2026-04-04T08:05:15.947699Z","times_seen":1604,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/plugins/wpforms-lite/assets/lib/jquery.validate.min.js?ver=1.21.0","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-content/plugins/wpforms-lite/assets/lib/jquery.validate.min.js?ver=1.21.0 HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 04 Oct 2025 14:32:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7806\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25308,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25168)","md5":"9152a2ca7c22170d57da0b724782d17d","sha1":"33f17178d9b71ce26cff40ff4e46a2ff92af1326","sha256":"607426a3217b1ed9f5cc7c637e7306fde073a1f34a4126704340c0e98b48a43e","sha512":"c5e19249ceaa265507fcd3ce38fd8cb82a4006948ec4e70373f566a08ac8818521f8d3a4313233264d4af0305d1d2f38d24726166f009c454d5774caf15d6503","ssdeep":"768:pcWZ6wC8lHvr8dkMioFpg5S3yBQyQEny+L+gxV4Ky4vZD4:pFCir8d3ioFpg5S3yBQyQEny+PaKyqd4","tlshash":"19b29689769271165e9720f4908ba60b60b66961e018f83cb5f8e4d1bef4fcc50f7b78","first_seen":"2024-08-25T23:37:28Z","last_seen":"2026-04-04T13:42:13.022445Z","times_seen":9371,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-json/wp-statistics/v2/hit","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:59.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"POST /wp-json/wp-statistics/v2/hit HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 190\r\nOrigin: https://ups-error.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nx-robots-tag: noindex\r\nlink: \u003chttps://ups-error.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link\r\naccess-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type\r\ncache-control: no-cache\r\nallow: POST\r\naccess-control-allow-origin: https://ups-error.com\r\naccess-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\ncontent-length: 19\r\ncontent-encoding: br\r\ndate: Sun, 26 Oct 2025 10:44:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"28ec1eee5f4049e3c4f2135069c1d2c8","sha1":"3505519507ca1c2a089c46e100b80408ca278421","sha256":"edc48cd3b0bc4fa7ba23aad40b8508a17d370ca38be174bae2a2f64634e65a2b","sha512":"f71618e40ebaa14ab6d523a2341258c0da264b545388f8fffd14c31c64b35f94b21eb633316c4d77afcd864aade1db588ef6387ee0c4787e6f7770db0abc1183","ssdeep":"","tlshash":"f06000020000002088800a000220aa302a200a20080a0080000c30200020080800a002","first_seen":"2023-04-06T19:00:00Z","last_seen":"2026-04-04T13:24:56.056077Z","times_seen":8973,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/themes/extendable/assets/css/wpforms.css?ver=2.0.29","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-content/themes/extendable/assets/css/wpforms.css?ver=2.0.29 HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 02 Nov 2025 10:44:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 20:58:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 811\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4765,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8541866b7be073c1dbe4111d7905ea84","sha1":"cf2dfcd73d6ea7a6a7b7e67428ea4bf7310f321d","sha256":"0932313fb7fa406b5cbb85517c5362be9fffbc7db174954749d30d35d7c44236","sha512":"ecbaf6a6a10e393e6b68da88f023422733a7b3e8b69af134030f64b9089c955d5529e65cfbedff6a26a779806c5511d6ead90df9ceb702978f4ad238cf308564","ssdeep":"96:+MEzL2y9iACBzdCzgTzJmxHO7blVO7OSHDHmzmRQIN3fipyC7vezuKNsyTsyitXv:+eVz4zkzJisrsPBAqz9N3WtHz4zlzIRV","tlshash":"18a10923fda15be9b40d077912cbb7fe3fb986120600bf74bac572a14f823a61057259","first_seen":"2025-09-11T12:56:22.449404Z","last_seen":"2026-04-03T14:38:46.520277Z","times_seen":125,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1631010231931-d2c396b444ec?ixid=M3w0MzUxNjF8MHwxfHNlYXJjaHwyMHx8c2hpcHBpbmclMjBwYWNrYWdlfGVufDB8fHx8MTc1OTYxMjQ2Mnww\u0026ixlib=rb-4.1.0\u0026orientation=landscape?fit=crop\u0026crop=entropy%2Cfaces\u0026auto=format%2Ccompress\u0026w=1280","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.194.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1631010231931-d2c396b444ec?ixid=M3w0MzUxNjF8MHwxfHNlYXJjaHwyMHx8c2hpcHBpbmclMjBwYWNrYWdlfGVufDB8fHx8MTc1OTYxMjQ2Mnww\u0026ixlib=rb-4.1.0\u0026orientation=landscape?fit=crop\u0026crop=entropy%2Cfaces\u0026auto=format%2Ccompress\u0026w=1280 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-imgix-id: a9e303b6aa3eeb5b5cddce639c9162a1ab4be32d\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 17 Oct 2025 05:45:10 GMT\r\nserver: imgix\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nage: 795589\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220155-FRA, cache-hel1410025-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 55073\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55073,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b4d22d3cc10138c5a277bb5692799928","sha1":"2ea07335f38f237c08b04dd0218c69ad21d72bb5","sha256":"0a451ab8cc38836215d2766341403f47de8ceb397c0cb7b2c4d65987bc0c4335","sha512":"d2154ad6a13b12d42ab8b284ac03715dddf493c9d0ab6bdc31a1022f63cded37a568cbc6fa6909f58293ea04ff3ed3b14f5f511edde0aa36f3ff24846cff8815","ssdeep":"1536:ND7BR7cYwFW37xk1Dg6i/TSLvhNEzJxPmM:NHcdW3l6iebL4MM","tlshash":"6b330273a7ef655cf9453cb12a5df2331490348e3a7c4540c382db929284fa2eea68d7","first_seen":"2025-10-05T04:25:11.267148Z","last_seen":"2025-11-18T12:34:50.790682Z","times_seen":95,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":55,"dns":2,"connect":28,"send":0,"wait":18,"receive":14,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4678\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T13:49:26.30716Z","times_seen":638763,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"109.106.252.112/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9999723\u0026pdata=https:/","fqdn":"109.106.252.112","domain":"109.106.252.112","tld":""},"ip":{"addr":"109.106.252.112","port":80,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-26T10:44:57.459Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9999723\u0026pdata=https:/ HTTP/1.1\r\nHost: 109.106.252.112\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\nContent-Type: text/html\r\nContent-Length: 771\r\nDate: Sun, 26 Oct 2025 10:44:57 GMT\r\nServer: LiteSpeed\r\nCache-Control: no-cache, no-store, must-revalidate, max-age=0\r\nLocation: https://ups-error.com?wsidchk=9999723\u0026pdata=https:/\r\nplatform: hostinger\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":143275,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":597,"timings":{"blocked":201,"dns":0,"connect":197,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/themes/extendable/style.css?ver=2.0.29","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-content/themes/extendable/style.css?ver=2.0.29 HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 02 Nov 2025 10:44:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 20:58:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2926\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11551,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"204b3c0bce029a7af61124ede2a6e7e8","sha1":"e707ff45cb8cfc73fc669a893a261dab7add1e10","sha256":"b8349ec439c2a5fd25e3ac556db49b3c3c252ba2ba822d28f362126f1932e5a8","sha512":"a1b97a4a7f7b5d86fbc86791dc41b9345487a436a048e3c48ddab31e5ad3688ca4c0f2f0ef248ace2636d454b9bd91738c26c4419160d83885facb78ecd2bfbb","ssdeep":"192:EGQjwEf042hSeHGzCzYzSzL5euNw9PSCzOz9znszTqO/BkZi3c:UPgyQ8aw3kFnu15MAc","tlshash":"ff324f80dfb19cf419bec32b1e19a458d727c5024b093ed4f1e2e5a4a68cb6445efb4b","first_seen":"2025-09-10T15:20:17.454486Z","last_seen":"2026-04-03T14:38:46.568113Z","times_seen":310,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/plugins/wp-statistics/assets/js/tracker.js?ver=14.15.5","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-content/plugins/wp-statistics/assets/js/tracker.js?ver=14.15.5 HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 20 Oct 2025 20:52:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2658\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8951,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4474)","md5":"ca2be7699b36cdb54806c8f512492520","sha1":"f054bad5a98ce4d60e9f560c2f93a364efedab93","sha256":"c01fa4f79ce47a5a684b37c31f49b9304499fb1eba255aeb9d03cffb3d7e83ee","sha512":"8a510ae4a71f25b9dc99026fd4b0f883a41821e2774476e8d765eb2cb151d5fcea73168f25cd5ec4170680b3831dd67f21fa0d2245bd2830b8b6872cf3db333c","ssdeep":"192:5nQ998xYO9SkmsKlsLqWOGAOZPSeIWCE+D:5nQ9WxqCLw/WCEq","tlshash":"0c0284467bd25af1ccf23468152a2a3975ab0ed33202e170f828ddd3445c6d6e743b7a","first_seen":"2025-08-11T14:39:25.499896Z","last_seen":"2026-04-03T22:09:27.948375Z","times_seen":1611,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/plugins/wpforms-lite/assets/lib/mailcheck.min.js?ver=1.1.2","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-content/plugins/wpforms-lite/assets/lib/mailcheck.min.js?ver=1.1.2 HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 04 Oct 2025 14:32:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1615\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4014,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4014), with no line terminators","md5":"84cdf2af726ea0ad5c67b7ec6479e363","sha1":"bba43108f022eaa28a7637c1ed7b7cb287d1691d","sha256":"8a3820962c15d26c4cdc9eff4f8c66ed29f96e353b7893285cb14962d6a6956d","sha512":"f33efcc2b5cef492d562aff1ec40006a9620b57a82eff925a63f163c56e4b05f930e682141a81ff0180326a7b6a91f9d5877ff5dcdd786241a85ea8ae2c03a76","ssdeep":"","tlshash":"e1814051a2a12ca599b060dd388fb445a47aec252b8ce8f8f654aca15e3471070fbced","first_seen":"2023-03-07T01:33:05Z","last_seen":"2026-04-04T12:18:16.363099Z","times_seen":25188,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/?wsidchk=9999723\u0026pdata=https:/","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-26T10:44:57.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /?wsidchk=9999723\u0026pdata=https:/ HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncontent-type: text/html; charset=UTF-8\r\nx-redirect-by: WordPress\r\nlocation: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\ncontent-length: 0\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":143275,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":172,"dns":80,"connect":34,"send":0,"wait":104,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-includes/blocks/navigation/style.min.css?ver=6.8.3","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-includes/blocks/navigation/style.min.css?ver=6.8.3 HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 02 Nov 2025 10:44:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Feb 2025 15:46:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2057\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16449,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16449), with no line terminators","md5":"d9709693f6fa74e9eae622c2b6d3fbfa","sha1":"8562935219e2b4299d36f0304c0382ee16390a9e","sha256":"377c5dd7befdaaeb1b293089c92885e8af3b42fca9e72e098a3bfc384ff33207","sha512":"aa5a96889c07344ed34ebcdea1830d2a5012a782b89f346c2c148c52596235ac69c1583563598f87b3978f8b06b86a984ee6b28ab6399dcdb9878e11008c208c","ssdeep":"192:qx7il1yFvomVogxLKuUxuOY7f7GUg54jyH9iXHuplUYv/m7tm7uxqERn23m9eAL/:CYsFvo7E9f7GUg5eyH9iXO/UYv/kDxR/","tlshash":"a872bfd05bb49cf4a9bb933b6e4490184633e902c5097bd5a0f3e694b68cb545be3f0b","first_seen":"2025-04-16T10:49:17.674495Z","last_seen":"2026-04-04T13:47:46.945413Z","times_seen":12582,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-includes/blocks/social-links/style.min.css?ver=6.8.3","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-includes/blocks/social-links/style.min.css?ver=6.8.3 HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 02 Nov 2025 10:44:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Mar 2025 18:08:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1467\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11740,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11740), with no line terminators","md5":"bd28f62393b318a586cab036956f29ba","sha1":"43c91c8019360dad76b7c92826e866b30327ccf5","sha256":"0716d31d1ee3728bf05645447f91be6cbf69faea560ecc571990d01ef739b295","sha512":"acefc37262fba714ee3f49739a46c28fca4daa7bbb61835e355110d85e735608a1b9eac306c1b0dce82d95ef1a3be7d31c4ccea436a227d18668ae6bea0d47f9","ssdeep":"96:J+becpmYNmwqWQOvdNtzUlGE/2Q3pXWxBbtPDX9bj9thWLprYM/02WMKlQsAtfsF:lBBwqWQqNNAYQAR","tlshash":"23328008875d8ce2348bce14c58ef35ee69629c099dd07a7d531a321598c27c74bbbaf","first_seen":"2025-04-16T10:49:17.683684Z","last_seen":"2026-04-04T05:36:58.124162Z","times_seen":2758,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/uploads/2025/10/featured-image-6-1.jpg","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/featured-image-6-1.jpg HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 02 Nov 2025 10:44:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Oct 2025 21:17:31 GMT\r\naccept-ranges: bytes\r\ncontent-length: 177233\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":177233,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1470x980, components 3","md5":"fcc6015c5d0a660929efa917b0f4b864","sha1":"4e859ac33b9a74e656f22d39ed2e09e122e0550c","sha256":"fd8f0cc1849aae6b57c4644ddeaa1c60daf525334914c988681a4285206c0726","sha512":"9a3d197d12873576c2620100bc28343612efcec5d90c9fb418a4be172b04f9ed6bf5d58adb0c9bc08eb2495ea1bebf9d510c8a66118b04780f6f9b5f2bfd8145","ssdeep":"3072:9NxYcpEXW/Ze8AGzqTEdhrW4RTUnFSIHTblp919vy/Vopi46lS8//0g0TPKRr9NN:+cIW/ZcQW4RTUFlTj9vympi4yS8//0jO","tlshash":"23040235ef8fe7405f47b02c542d3cb8431a26e59ae46d0b4a86687d927ed10b60f73a","first_seen":"2025-10-05T04:25:11.257584Z","last_seen":"2025-11-18T12:34:50.786812Z","times_seen":95,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/plugins/google-site-kit/dist/assets/js/googlesitekit-events-provider-wpforms-9774e7805b244d82c869.js","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-content/plugins/google-site-kit/dist/assets/js/googlesitekit-events-provider-wpforms-9774e7805b244d82c869.js HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 21 Oct 2025 19:43:05 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1622\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4419,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4419), with no line terminators","md5":"4cfa2ee23333b567548a8cbcbf0f5982","sha1":"3902d0f9f86f23ce23bf25c7479bfb4b1ddba60f","sha256":"f0adead99f8d9f3cd7e168356a5a3079eedf462de87a7da9641bb77ee3c37d27","sha512":"80a4a4c808f46b20177fec8ee1a931010e5d14047c467a7f976cb5b2529b569eeb61558804f2f1a2d2a2347a1e2041500c1b275b1b4c31bbb4b36d8b4183b2b6","ssdeep":"96:Hl69XlpAvFfw9X0uK4iamf93Dk3Gi10GAeN1Y/7BVOIyEyi4GSWYj9Ad:F2XLMY9y4iagk3GPUWPryEpdd","tlshash":"a79188ccb3d7f5f29be6e5a090778106f12c3916385d6800e26688e17c66e8b61b2b35","first_seen":"2025-10-21T02:58:49.636627Z","last_seen":"2026-03-30T02:33:34.942073Z","times_seen":413,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/plugins/wpforms-lite/assets/js/share/utils.min.js?ver=1.9.8.1","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-content/plugins/wpforms-lite/assets/js/share/utils.min.js?ver=1.9.8.1 HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 04 Oct 2025 14:32:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 727\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1490,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1490), with no line terminators","md5":"f6d4e2674cd89be5410d2e0bb310825c","sha1":"a8c20048302c6d5933b6653f754d7276272415cd","sha256":"5c299dcc0ea739ddcb05af1f0e0c1549e4e40ac1bd5bd55cbb0cb9c7ed41c5f1","sha512":"139951e42fd9957b8c9dcd24a8bd8b76b79362414ee88a3cd5e34116f00d5f3d127704076723b33647a5d48ddde0f7723aae748c81e95079189cbccd3f2d8fab","ssdeep":"","tlshash":"773112e079c3a98d9b57713e90268601a77ffcd1aa5b29b1dd978801380644e72f2a54","first_seen":"2025-06-05T14:55:30.080511Z","last_seen":"2026-04-04T13:42:13.032961Z","times_seen":5912,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/plugins/wpforms-lite/assets/js/frontend/fields/address.min.js?ver=1.9.8.1","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-content/plugins/wpforms-lite/assets/js/frontend/fields/address.min.js?ver=1.9.8.1 HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 04 Oct 2025 14:32:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 413\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1057,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1057), with no line terminators","md5":"7c7f814165ea7c970f8bffb2a5ff4ff8","sha1":"0bf79ae49853182174b1f1ae8178897f1bfa6c73","sha256":"6ac9ab6e57f088a352017885d50d287cffbd3d38ced9d7be7379ce84dca0ddff","sha512":"33aeca56a90eaef952a3a3eab021fcf744946bf58ea2794a6a620ec233a988bd7fb5e5ee48ba69f52587402425658bc84f1925c5bac9519a1323852566e68e5e","ssdeep":"","tlshash":"b4116d78e2181fcdeafb029260dfc317170559f2cd1a89565387aae7299c741a94fb30","first_seen":"2025-06-05T14:55:29.986691Z","last_seen":"2026-04-04T13:42:13.032463Z","times_seen":6224,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/uploads/fonts/fraunces-latin-700-normal.woff2","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:59.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-content/uploads/fonts/fraunces-latin-700-normal.woff2 HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 02 Nov 2025 10:44:59 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 04 Oct 2025 21:16:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18212\r\ndate: Sun, 26 Oct 2025 10:44:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18212,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18212, version 1.0","md5":"d99d78cac1e88c84a702f0cf1d9f9af3","sha1":"cc613be9ac3a852613d3fdd6121abe8aa63640d9","sha256":"c38570d224b830056e69484bb9e768e1d3fa7ba4755c8891a3c6d366194d2ff3","sha512":"c28c714928fcafcefbbf51055966aceff9878c7fa0f03170456ef6e70d91c77f9bb95590a8672e57b8beedbb32b9cf9e02b303c658579c27961959d248adcbb9","ssdeep":"384:d3fDO/63NDAp/BKtH9bhoPHrzn/L4dyT84/Jbsp2D4Noi:d3fSoDbhhWT8duJaGkF","tlshash":"7182d000aa323f4dd73765ec346ddac9ea4e187cb8002429e79b3ebd570a0f0541626f","first_seen":"2025-03-07T23:01:09.229795Z","last_seen":"2026-03-27T13:04:21.652503Z","times_seen":138,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"109.106.252.112/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9999723\u0026pdata=https:/","fqdn":"109.106.252.112","domain":"109.106.252.112","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-26T10:44:56.372Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9999723\u0026pdata=https:/ HTTP/1.1\r\nHost: 109.106.252.112\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":660,"timings":{"blocked":660,"dns":0,"connect":197,"send":0,"wait":0,"receive":0,"ssl":205},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-includes/js/dist/script-modules/block-library/query/view.min.js?ver=f55e93a1ad4806e91785","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/block-library/query/view.min.js?ver=f55e93a1ad4806e91785 HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 03 Mar 2025 18:08:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 661\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1476,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1476), with no line terminators","md5":"bbeb69c65bb213492ceacc488c4ec4c9","sha1":"a2ebe19f24f0f177df81a4064e2e5689e8ffd964","sha256":"f5c8a76c4fbe02fb974efb7c76c21e06a131ec5c10e48427c6b70b90273a9c44","sha512":"72b9d7edc63aa3294b0af55c1a74dbabd2580edf1bd001b82220a5067b538e4ae67c2a708a62137e2e42e0ad7d40cb6705f998c4fd61e306b25f5ba5ab428f30","ssdeep":"","tlshash":"833145323191d1a51ddf5975970a14017363809d2818e1f06f489d395f933c7fa761e7","first_seen":"2025-05-05T11:18:09.678334Z","last_seen":"2026-04-02T22:49:45.684472Z","times_seen":265,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/plugins/wpforms-lite/assets/images/submit-spin.svg","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-content/plugins/wpforms-lite/assets/images/submit-spin.svg HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 02 Nov 2025 10:44:58 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 04 Oct 2025 14:32:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 309\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":509,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8651ef6101d05b1c7b9340ea9e63b98d","sha1":"2efc98059ba9c28d93312c2e51f63feb76f8a3b6","sha256":"7ffd6ec4d1b1980400d8cc710d2edd0fb7833e2c83262f8401247043ca258149","sha512":"1b718c8b2f58defbf6b77798a4a4d600a10ce5860911613cb89c93e3da16b267c311cf70d48eebb93d1158e7533b20282bd2404f738f2dde5b3b10c7afc7eb95","ssdeep":"","tlshash":"4ff05025d4158d685e188579e79e3960013da2d2460e14bdfac41533e4085dfa8af75a","first_seen":"2023-05-05T07:59:50Z","last_seen":"2026-04-04T13:42:13.02793Z","times_seen":8378,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 28 Aug 2023 17:14:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29744\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T13:49:26.298459Z","times_seen":685383,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/uploads/fonts/fraunces-latin-400-normal.woff2","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:59.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-content/uploads/fonts/fraunces-latin-400-normal.woff2 HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 02 Nov 2025 10:44:59 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 04 Oct 2025 21:16:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17968\r\ndate: Sun, 26 Oct 2025 10:44:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17968,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17968, version 1.0","md5":"15ccd91d7a8fe0b1b5401d250360cc0b","sha1":"1a13692de773ef1da6f207ef9e7d47b994f8e6a5","sha256":"e558f39453a9c611908be04294b50dea5f21ae6c49b41c6e47f4115e91f90209","sha512":"d10687067cb889ac63a9ecdfc7e48040df328103abd44c69f400a627bdbbaf9551c08635779db6ef1aad15764a0d326c9735806847fa84169d9d939fb8461b1a","ssdeep":"384:WwlndyzmBkWLILki3qugav0IshlrZY+OLbAWJbY9pA0La:WwlItWE9Ylhl137HA0W","tlshash":"ed82d0cbe22f6dc49e046c73b758286d0ea159102e32e754d969e5bfcf01ede1e40986","first_seen":"2025-03-29T08:24:58.4784Z","last_seen":"2026-04-04T08:02:13.953248Z","times_seen":172,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/uploads/fonts/sora-latin-500-normal.woff2","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:59.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-content/uploads/fonts/sora-latin-500-normal.woff2 HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 02 Nov 2025 10:44:59 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 04 Oct 2025 21:16:45 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15056\r\ndate: Sun, 26 Oct 2025 10:44:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15056,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15056, version 1.0","md5":"a713640bfe1bf6c86e94899bd4440946","sha1":"142b287d6c355482bdd4930517fa0a7f5a819556","sha256":"edd010ebf2f4940b52d8b98296a499c0a783d838e427fa301c67f80959c1f441","sha512":"8bf324a4b131236972caf7e5265af4a1af11243b14c6c075fd77d835751b5f7ba5b9cf527aa3927b758967402de7016bb62f2846df4a68f12212cda79b1fcfe1","ssdeep":"384:Oi8n+Xii04Jz7pWx+0UIecbQV0Lb2N4XFBpidKlEWxWFtgqQ:h8n+Xe46lF82LiN0BpidxWxRd","tlshash":"cb62c03366adc4804e0952709d017f1ae2c7ec1eedd56f4a36e7e696d34990c8ba83d2","first_seen":"2025-09-21T07:50:01.067648Z","last_seen":"2026-04-01T04:30:26.549377Z","times_seen":147,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/favicon.ico","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:59.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 26 Oct 2025 10:44:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-04T13:49:37.596003Z","times_seen":115707,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=61572d447d60c0aa5240","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=61572d447d60c0aa5240 HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 03 Mar 2025 18:08:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1049\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3358,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (3358), with no line terminators","md5":"39b6679f083c89806ae1dab66a6b1f83","sha1":"ccc3e4d82490e24c5bab603beb04961ba3225571","sha256":"091b36f4ce349cd155f3d0ffb19f46e954f82aa4eb78dd9091da2ab9c9f20a99","sha512":"9b61e3a83ee4cbdf339401bc60d30e6e58f4871e4411398bbbdfde7e31f1fc6e8624be8e63fcfc1d238e923695f3fa95b5b182ee08fdfb026b8720ef8d6062b3","ssdeep":"","tlshash":"7c610234306575b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","first_seen":"2025-04-16T10:49:17.676934Z","last_seen":"2026-04-04T13:47:46.945962Z","times_seen":12670,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/plugins/wpforms-lite/assets/lib/punycode.min.js?ver=1.0.0","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-content/plugins/wpforms-lite/assets/lib/punycode.min.js?ver=1.0.0 HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 04 Oct 2025 14:32:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 833\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1713,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1713), with no line terminators","md5":"23b0d9051790b4a386f66ff1836815bc","sha1":"0dc76a6bcad4bdce1b88ec6e68215733c97fc520","sha256":"69a15ba379260f131f7dfa2a5414cbdc48db661ac21d696773c7e67259255ca1","sha512":"0a042362b87d03c344926446dbdafb436bf5ccbbab4826a8fe27c21b3cd1d8661620c88c636400379fcf4b66a75a63ccd21e4ddf8b86cec11ee972092641126b","ssdeep":"","tlshash":"803172993743b05446d0f481180b54a86cecdf50280aa4a8d7027bab88f4fe5e47efac","first_seen":"2023-03-07T12:04:46Z","last_seen":"2026-04-04T12:18:16.369735Z","times_seen":23196,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/plugins/wpforms-lite/assets/css/frontend/modern/wpforms-full.min.css?ver=1.9.8.1","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-content/plugins/wpforms-lite/assets/css/frontend/modern/wpforms-full.min.css?ver=1.9.8.1 HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 02 Nov 2025 10:44:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Oct 2025 14:32:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15371\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":166106,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"40b440b7e903d2db648e57f94481cf14","sha1":"92303779e0cc7a983ef695912134308c172c859c","sha256":"57a3b3b9d93b5bbc1f484721eb863cf5ce87d5c835ca158a9f39ad7bea3124f8","sha512":"ef5c2c2bc3ff5a984f0fcca203b440293819cd415210661f110ba8c985b6dbcf0e46555f800fd7d8d2b056665cde328486acbc035e0e26a19d22febb0bf852c6","ssdeep":"768:LakOgzRho+uCWo4WlixWixkLajBosVBMuCq:LakOgzRbWo4WltpajBosVBMHq","tlshash":"94f3dc394b016ffae9bf489e61cf87c30b12cf23de455eadba138826de801625513765","first_seen":"2025-09-24T10:16:59.358155Z","last_seen":"2026-04-03T16:20:01.158468Z","times_seen":954,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-P8QZGVWM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:12 GMT","end":"Wed, 24 Dec 2025 14:32:11 GMT"},"fingerprint":{"sha1":"C1:75:0D:E5:E8:4D:AC:7F:C9:7A:40:D5:6C:2B:22:CE:ED:8F:6D:BB","sha256":"63:AB:E3:89:62:5A:B4:D8:9D:D3:5C:77:AE:75:C5:DE:49:CE:BA:43:6B:22:49:EF:48:59:47:A7:0E:75:FF:C2"}}},"request":{"raw":"GET /gtag/js?id=GT-P8QZGVWM HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 26 Oct 2025 10:44:59 GMT\r\nexpires: Sun, 26 Oct 2025 10:44:59 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 142152\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":427164,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"a9a76442e5098cd6c42d767cc25b6707","sha1":"337a24147d97873291cceef4b499a5d585f9afaf","sha256":"b768c745a111ca758b7df50963c2cd0637419be2cfc92b9969beb701a655a422","sha512":"60a42c1d799675fc7043048675f6c08f7edc100b87e1bb4028a03624fc3a26ecd059eaa9fa7ab951b7ba4b5d0f37d718af8f7a6e477d011e39c305e35ce6b036","ssdeep":"6144:xBUyJBX178429Z8nP57wr/s0s/+Kxxc20hYllAk6KlhDjMc:/PJBl929Z8nP58DG/mYl5X","tlshash":"4f9419ce73d670269396f078503f018ba57b29a2b45cc896f189cce42d74a9a4277f7c","first_seen":"2025-10-26T10:45:25.572059Z","last_seen":"2025-10-26T10:45:25.572059Z","times_seen":1,"resource_available":true,"data":null}},"time_used":838,"timings":{"blocked":324,"dns":0,"connect":29,"send":0,"wait":74,"receive":83,"ssl":325},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/uploads/2025/10/ext-custom-logo-1759612601704.webp","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:58.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/ext-custom-logo-1759612601704.webp HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 02 Nov 2025 10:44:58 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sat, 04 Oct 2025 21:16:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7170\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7170,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a1bc74f74b7433861b7431b8e85f7af3","sha1":"bd0872b30d281ba38783b51a98732bf311a4eb32","sha256":"9cfea3301397982e5b5f79a4abcd5cee561a499bb87196b5d8990fb07bab6a02","sha512":"b69d9938d732200aacc5612394d30590a1bfdc9e4878a8b62bef0ec373cf7eba1f8f3d25de060221e13d45c8cab68765a37b628f2a063200ea90ff9691aa03c6","ssdeep":"96:HnRTaGlT1HJpAOVqYPAlNEPca+B5LwFc7juhloD1S2xLAqEu1I0i0AdPqAqGekCK:HnMQ1LAOC8U5LwFnloDN0qQP7fqJpGi0","tlshash":"1de1bd2190bfc0cf925d9047348c89613a7bae8324baabc2674ca308e5375e60911e8e","first_seen":"2025-10-05T04:25:11.24874Z","last_seen":"2025-11-18T12:34:50.774216Z","times_seen":95,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/wp-content/uploads/fonts/fraunces-latin-500-normal.woff2","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","date":"2025-10-26T10:44:59.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /wp-content/uploads/fonts/fraunces-latin-500-normal.woff2 HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 02 Nov 2025 10:44:59 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 04 Oct 2025 21:16:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18000\r\ndate: Sun, 26 Oct 2025 10:44:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18000, version 1.0","md5":"2285bacdef3984dba57d8d235343fd33","sha1":"3a6751c10aa671e79b895d284ba12acc644cf318","sha256":"7975c1ef7caf89d0606dd985d35abe31a619c19262cf13f5a05938cc68fb27b2","sha512":"9fed5c27be8618a83ec5c1241fa022baad440058f37b33f4c950687961eb9f6d8ed583d61256b47e1dc7109952e2bec7849ce7fdd0a91bafd22def68d3c5e67d","ssdeep":"384:8sOMYbBV/VixoZ1Pa1Z1T7hD/O5+99SY7XEL5:8PNNV9ixa8Ha+99PQ","tlshash":"8782d0d85cea9f4c9d6da5b6ef100af5c2125f30d67ec670ae4705a84c8e02b9b34794","first_seen":"2025-10-04T07:52:02.550277Z","last_seen":"2026-03-16T09:40:47.630463Z","times_seen":111,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ups-error.com/?wsidchk=9999723\u0026pdata=https%3A%2F","fqdn":"ups-error.com","domain":"ups-error.com","tld":"com"},"ip":{"addr":"51.195.15.20","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-26T10:44:58.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ups-error.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:58:34 GMT","end":"Thu, 01 Jan 2026 19:58:33 GMT"},"fingerprint":{"sha1":"4B:D6:30:1A:A9:84:4A:7F:61:BA:91:7C:54:D9:C0:40:71:E4:9A:A2","sha256":"A3:08:4F:AE:BF:5B:AE:76:8C:76:00:C3:6E:72:60:80:86:B0:EE:1B:6E:38:94:2C:8A:66:B3:A2:36:E8:11:2C"}}},"request":{"raw":"GET /?wsidchk=9999723\u0026pdata=https%3A%2F HTTP/1.1\r\nHost: ups-error.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://ups-error.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://ups-error.com/wp-json/wp/v2/pages/138\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://ups-error.com/\u003e; rel=shortlink\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 26 Oct 2025 10:44:58 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"All in One SEO Pack:4.8.7.2","description":"All in One SEO plugin optimizes WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"punycode:1.0.0","description":"A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.","website":"https://github.com/mathiasbynens/punycode.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Mailcheck:1.1.2","description":"Mailcheck is a JavaScript library designed to address the issue of misspelled email addresses during user input.","website":"https://github.com/mailcheck/mailcheck","common_platform_enumeration":"","icon":"Mailcheck.png","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.164.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"All in One SEO:4.8.7.2","description":"All in One SEO optimizes a WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":143275,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (25614), with CRLF, LF line terminators","md5":"72549e9f60edef20fc2f902cd815912c","sha1":"7a34f8413441012e6f6bd4f01b6a7f9c15bae80b","sha256":"ceca1899704c4e6fa78a9fbc9a59a96ae92357145119a772d9d6410c494917b3","sha512":"db343ea6b5f5739aa9d2fc2db01b3e544e4ad2b03d6a5b4563beb6f1c4f1792221d91aa55153718a672c78bb90fb516109c1b1379e7b8318c55aaa829bd0d780","ssdeep":"3072:1HxAZNWCd5pG+uZMI+4wvSHIeTKxbZIU5CEhiYACpTxyt5hkkGteZ0YRCgRwgWnr:txAZZd5GZMI+4wvSHIeTKxbZIU5CEhii","tlshash":"ebe32b32567448f97d2f8baad08e771a7548e902ce0266e1f5eac0585dd8db706f330e","first_seen":"2025-10-26T10:45:25.576258Z","last_seen":"2025-10-26T10:45:25.576258Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ups-error.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}