{"report_id":"f2e8f6bc-6403-49d0-bdb1-922b4414bc2b","version":6,"status":"done","tags":[],"date":"2025-11-06T13:35:05Z","url":{"schema":"http","addr":"emailverificationaddon.com/","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"emailverificationaddon.com/","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"title":"Email verification directly in Google Sheets with EVADDON","dom":{"size":38273,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3622)","md5":"e9fae9d4119c398c41951f2400e9e2f4","sha1":"ff441a6fc4f649072fca20047db94dcd812711e4","sha256":"718b1789301cba99a3cc4ec1aace46d1190e571ab1b206232777ccb58f2c6889","sha512":"9f590c784fe02a4bf4e03a16dd9100ccb617eccde990b4659ae48a2d16a4af331f88000aed22ab070cccdde5def7d1c46f0f2a5ff798e9b62ee9390630c0fef8","ssdeep":"768:yQhPsf9WvRwwZZHJ3gAj6jEg3E8+Lii4WoX4mx/3:yqI9WvPZHJ3PuXiii4WoX4w/3","tlshash":"5503b7b3aa4e1567279313f6f019f3886337812ecd564dd1b9ba405c12c6e92fb73826","dom_hash":"domhashd86c33a37648e3e57a332bc92961c838","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"emailverificationaddon.com/","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-11T13:35:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"emailverificationaddon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"emailverificationaddon.com","ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":14,"request_count":14,"received_data":591443,"sent_data":7383,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Linkedin Ads","description":"Linkedin Ads is a paid marketing tool that offers access to Linkedin social networks through various sponsored posts and other methods.","website":"https://business.linkedin.com/marketing-solutions/ads","common_platform_enumeration":"","icon":"Linkedin.svg","categories":["Advertising"]},{"name":"Twenty Twenty","description":"Twenty Twenty is the default WordPress theme for 2020.","website":"https://wordpress.org/themes/twentytwenty","common_platform_enumeration":"","icon":"WordPress.svg","categories":["WordPress themes"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:5.7.6","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Yoast SEO:18.4.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-11-02T22:13:40.433865Z","alert_count":0,"request_count":2,"received_data":774532,"sent_data":913,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"emailverificationaddon.com/","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"5fafab1886c1b8eb18e8be7acdd612c9","sha1":"92dc747b0d915897c9e02dc4a2ddc2cb51fcddd4","sha256":"f8c8e4685c7da42381912446fa22c06f3ff39c868e815923c769a9b2ea186a7c","sha512":"f7adf8ff1939ed1f4dab06eec9586655acba353e92e5bdf78c6119b6ac94725fa7346801568fc2129a913e5cafc5cbf1f2061423a593360f3187648c037754f9","ssdeep":"","tlshash":"ee4142763b9155596af208b3f12f5b0e3f26450300c9aa378698a9e0397edd1d0fbd1d","size":2134,"data":"","first_seen":"2025-11-06T13:35:11.059726Z","last_seen":"2025-11-06T13:35:11.059726Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emailverificationaddon.com/","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"382baaa0b6a4b709817aa3d9a76cf798","sha1":"790e0412f8e01e83192ce7117731d4e07be8890b","sha256":"d8dd9e4bee02cb49c521217c4f44067b3dfa7d425f698fa8e90056c535188877","sha512":"26deba541f7ebe0bba1f7c3949122031ae1d9d8ed1d3481dc4f644900983ddcf453d89707aad6084b6e99965c4468044dd7bda913b9ef74bde3cc6a58e6b8dd6","ssdeep":"","tlshash":"38b002b975114d75468e110d717dd3f43c780044f7433501d17c64492070dc69801e48","size":97,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-04T20:49:26.445767Z","times_seen":4140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-3237080-73","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d63b4d8b46b59ed0b3e8881e29e5f38","sha1":"9b0a964268361e6714c44a7b7ba3505ca63ff57b","sha256":"8e58da37e70f660e30400b533fa726fc6f0c6571417b7b1559e14fb21e02d865","sha512":"a48558dad0445495ea143875514d3d4783a073ca4b337f08d5b46574675bc8cf586d4d03221a6f4945399b3a62ccfd07569ddee606a1ff84c1771aaebc80a7ce","ssdeep":"3072:43T/Xys4XV4Kf098i7DPQ6ZFqVVPitpsHbrmxsROgd0Nd3IBGbYhxP71NVUnM:0YF46EDtmOxWOgd0Nd3IQbYhxz1NVUnM","tlshash":"e964f7cd73d6742683a3a478503f018bb17a69d1f88cc895e186dcd42e70aaa4277f7d","size":314864,"data":"","first_seen":"2025-11-06T13:35:11.055359Z","last_seen":"2025-11-06T13:35:11.055359Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emailverificationaddon.com/sandbox%20eval%20code","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-04T22:47:02.274221Z","times_seen":772812,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emailverificationaddon.com/wp-includes/js/wp-emoji-release.min.js?ver=5.7.6","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"eaa8641bcda2371f4024a71fbb67de3b","sha1":"0e46c39d3821683c856605a82254115f9a6a7792","sha256":"0c5f584d1ea2c3313dc8c55824c2a572d3cf2eae87c5ca62a58e598aec9ddb5c","sha512":"82b6b84d0a7a28d6a8b013ee41eef27e1df8c1fca396dfb4ed6d01249e12479230cb2d3683a56eb80651d22046c74506d194fa34b05e2a8ad8a08ae297f79aeb","ssdeep":"384:inJ5kNuPTbUUh31//bEP+XgA3FqC2effJmp3:iJ5aUUUh31//YWXgA7ffC3","tlshash":"ad52ce9b732b5f9b743e37d78d96cf4ec5da55832580e078dafeb68129a00598374c80","size":14229,"data":"","first_seen":"2023-03-07T01:02:17Z","last_seen":"2026-04-04T22:20:09.714378Z","times_seen":9103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-FSJNVFYQN3\u0026cx=c\u0026gtm=4e5b41h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c89e510ee775b2f7512ecdde43c3e7db","sha1":"20fdc82cbcddfbca91e7b47c4e7b482b322a1425","sha256":"b558dd9786c8df9e6b3b2125b967f81de0b6b50076877f50baea7ae5c59cc841","sha512":"aa1e5d928f51fbca7e17b67ca48509fb55a27a1258c20aab52591efdedefa8d30c1e32b569be36f4c6f765ce412ad7d8bcea278371bb7b329c5e69cbcfc8a75a","ssdeep":"6144:M1YF4X+EDtIXXRR0tBOgd0Nd3IQJYhWA5rP+6sn:bFWRaXRR056YhxrQ","tlshash":"6da409ce73c674265396f468502f01cba9bb24a2b49cc89af189ccf02d7469a4177f7d","size":458434,"data":"","first_seen":"2025-11-06T13:35:11.050777Z","last_seen":"2025-11-06T13:35:11.050777Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emailverificationaddon.com/wp-includes/js/wp-embed.min.js?ver=5.7.6","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"905225d5711b559d3092387d5ffbedbd","sha1":"6f6c39075263bafb9e8c10f1b34a1a0f7ee03c9d","sha256":"5be614bce53f767993a5f5f14a6badd6aae6bf3af7cbdbf4d31520de49e27991","sha512":"5ad34cf11acf45ae256b2641496be13939cd5e0212810c43ab20cadbb313a1d99cb3a451148e160d80f1f952a8514480c2953bc6ca0c4697a466a01e1c3d5f8d","ssdeep":"","tlshash":"5c21522a3228943758db11d3bc4535cad2e11fed681215d20e38cc49eae4e935969fe0","size":1426,"data":"","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-04-04T21:41:06.797306Z","times_seen":4511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emailverificationaddon.com/wp-content/plugins/bj-lazy-load/js/bj-lazy-load.min.js?ver=2","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f7d8e4e89b3a30253ab1489c4498423","sha1":"9067585742e620a1fdd327e2f89aba331af9734c","sha256":"5bc5fe165e8fab88549d56628bcc4ad463235f7f995c0477fb90fc78698be265","sha512":"06da70254593ba7661d918c4138d98429b2fb2eb1507bcf4c441e3f92c0726a16f39b073f54441fbab6e85fb386144fc59f848f3dab6c83bf5d382c155fab3e6","ssdeep":"","tlshash":"f231203e32142f797ac66aebb7adb743287223bb46531c605c6adcb09024e4114b7697","size":1636,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-04T15:34:57.069625Z","times_seen":573,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emailverificationaddon.com/wp-content/themes/twentytwenty/assets/js/index.js?ver=1.0.0","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d6d01927aa235ae92e56262fb8d587b","sha1":"ce59172739d4b97271f4ec7ac8fb525662dcf3b8","sha256":"4caa8d30188b3e8be5f4b7cbd34f35cd5bbb04ced5dcab3ef231f62a128a1ba1","sha512":"76a11557d8e7379c6db89d8bc7dd85e0c10a37a4aa2a0601966d14cd2472bd683da8cc84a432c49fa67e60d0487d2bfcab793cc2f425ee401b05e0b125439639","ssdeep":"768:dtM+55qp6SFBg93RmW5EDhLVbD4kqAAU7vhxDAt/VeKQXT4:dRqUSFBWBmW5EtLVbD1qAAU7vhxDm44","tlshash":"14c245d27f4f227f459af36a923d91c8fb3dd0f9e142102978ed8959156081102aeffa","size":26387,"data":"","first_seen":"2023-03-07T16:29:26Z","last_seen":"2026-04-02T04:07:17.203158Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emailverificationaddon.com/","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3b7b8ff59c263f03ab45a479fd736b4","sha1":"5de54771e3c8ad954b0f9d130e4c90b67e89a6bb","sha256":"c6ecc2fa9c7f5b06165b2ea4dbd469b2b5bbc7f4b9a3aec0f2c9bae339f3b7e4","sha512":"0df71e29f38dadbfb81553b957b5c7860164ba995d321d146f54e9aad96361902ddefc9a66310489a5e57a39841a582e848a12ec07c7531365a3687da2a776e3","ssdeep":"","tlshash":"9ac08c98270a8c7166ab27004f2fb909b0222222a8a00c20081aa348a720f07d704854","size":163,"data":"","first_seen":"2025-11-06T13:35:11.0619Z","last_seen":"2025-11-06T13:35:11.0619Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emailverificationaddon.com/","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"b645e1f686de78d9e5c926162cd9fb98","sha1":"053d5a10d23e26867feb35d3d86bd6f887483946","sha256":"4d980642506fd92cfa3ab40efc30f46161a00b3a53e9dc9db0bbb99799af47eb","sha512":"5a942769b7d284e74e172ddd2ac43c11afc2ebf97592c1205d636c728d713ba845040cb6dabe880b61da4f916e255be1ffb735ced97aa89c0a3c02ed9f94f7ac","ssdeep":"","tlshash":"59c04cb03b15743644e23874c31badc0f57f331571395498e58740507333943f5d8944","size":174,"data":"","first_seen":"2025-11-06T13:35:11.062626Z","last_seen":"2025-11-06T13:35:11.062626Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emailverificationaddon.com/","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"39b5ffa9b65969699dfccbe4a07fc732","sha1":"8e66f018f154d5411c87b7adc97213ebc505ea32","sha256":"b23c0712f10477a2ce1027da7e86972e9e294b0198a712a2c6457bbb351dd662","sha512":"4228270b767d4c1177647e335d95df6157aacca65b893a6ac14580d45341d79fd103c579dfd207be75eac70fb884e6a7729b42b4d725b0d805f6d166a790de38","ssdeep":"","tlshash":"0ee0d8692c415778d3b130f762bfe74574b111845dd4d414808dd8583930f9b9866bcb","size":358,"data":"","first_seen":"2023-03-07T12:05:14Z","last_seen":"2026-04-04T22:28:41.489094Z","times_seen":8454,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emailverificationaddon.com/","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"03d6d38af8c34d50a7d4f77919f3f6c7","sha1":"90e18129a2b50addce02c98c923534d242233216","sha256":"9f7a87d73cf34cd5d76d600a5ce326ac1ce32a021067b1bb50587fa488b13444","sha512":"28832956f6898aae55555f210e05bbb1a396fa48244b0c83057e36c721287e4976063ed6fc28a6dcdaa282010e9e9afb74fe50405a2428205e765219a4f2d833","ssdeep":"","tlshash":"bee07dfafd5b457111e7a1237bce739e293275a3e92a4c402889ce806c38dd31126dd1","size":329,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-04T20:49:26.47168Z","times_seen":9067,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-04T22:47:02.276956Z","times_seen":771261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"emailverificationaddon.com/wp-includes/css/dist/block-library/style.min.css?ver=5.7.6","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emailverificationaddon.com/","date":"2025-11-06T13:34:42.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"emailverificationaddon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 18:07:26 GMT","end":"Mon, 05 Jan 2026 18:07:25 GMT"},"fingerprint":{"sha1":"4A:F7:15:E1:2A:35:2E:43:F7:66:F8:9D:90:15:97:3F:CB:21:37:7E","sha256":"D7:FC:88:B6:50:C1:17:DE:ED:6F:75:91:14:DF:46:F4:26:F9:58:FD:69:B7:6D:D7:33:48:E2:EE:4B:D6:8A:45"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=5.7.6 HTTP/1.1\r\nHost: emailverificationaddon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emailverificationaddon.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.2\r\ndate: Thu, 06 Nov 2025 13:34:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 17 Apr 2021 10:25:35 GMT\r\netag: W/\"607ab79f-e33b\"\r\nexpires: Thu, 13 Nov 2025 13:34:42 GMT\r\ncache-control: max-age=604800\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58171,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (29677)","md5":"b5d1e2c87b60ce71c3fd90ca27073250","sha1":"b65e3890ef1565f98971b344b4c85866a5f33860","sha256":"2cd9de3dd26246204749cff259bc34e8e6a47ae5d6e4528b9b28c75d68d50cde","sha512":"0698905368e41d22f1026dcc64f716be70bfde1bc05bc85918242af9c30351166726b4dc4426898e9ef0428ef0a2f875d8fed54bbc8b925289363a39fabba165","ssdeep":"384:T2vicPcBZDn/KRM34XMX6cD+d+AwlVHI+LQ3R+T55GPh5IIINXTXlx:AXMX6E+d+AwlxI+LQ3RC4h5DwTVx","tlshash":"83431f2413b5ccf935afab3c8d9de248e146a981c54a97e7f432e060624c95a5cf3b1f","first_seen":"2023-04-05T07:33:55Z","last_seen":"2026-04-04T22:20:09.738617Z","times_seen":3707,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"emailverificationaddon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emailverificationaddon.com/wp-content/uploads/2020/08/evaddon-v7-logo-circle-512px.png","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://emailverificationaddon.com/","date":"2025-11-06T13:34:42.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"emailverificationaddon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 18:07:26 GMT","end":"Mon, 05 Jan 2026 18:07:25 GMT"},"fingerprint":{"sha1":"4A:F7:15:E1:2A:35:2E:43:F7:66:F8:9D:90:15:97:3F:CB:21:37:7E","sha256":"D7:FC:88:B6:50:C1:17:DE:ED:6F:75:91:14:DF:46:F4:26:F9:58:FD:69:B7:6D:D7:33:48:E2:EE:4B:D6:8A:45"}}},"request":{"raw":"GET /wp-content/uploads/2020/08/evaddon-v7-logo-circle-512px.png HTTP/1.1\r\nHost: emailverificationaddon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emailverificationaddon.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.2\r\ndate: Thu, 06 Nov 2025 13:34:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 8367\r\nlast-modified: Fri, 07 Aug 2020 15:19:47 GMT\r\netag: \"5f2d7113-20af\"\r\nexpires: Sat, 06 Dec 2025 13:34:42 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8367,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"4e3be8b3dcec2750f85c29de5b675589","sha1":"0f9165a80c5070c14ebe8916885e5a88dbe2cceb","sha256":"c7c922db6becdd3ed74487c653ebb149888cab9fc1bf2defca6967a161f83589","sha512":"d35c209408d258136839bf50660010b15aae2e929b75ecf9f6e37e14e00380141c247ce6c628c42054425851b02035eb22f40cbdbdbffba063008bba9e09aa93","ssdeep":"192:SSX8Li8dzijD6PPLVflOlYHH4/2MGUB0rsJCYefXID4k:t0i8dzijOpfwen4/RD0r4C1Sp","tlshash":"b502aef2bdc412ed9392c86b4a391d06cc254b82bf106b06743bda106619bcf25e5aca","first_seen":"2025-11-06T13:35:11.048956Z","last_seen":"2025-11-06T13:35:11.048956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"emailverificationaddon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emailverificationaddon.com/wp-includes/js/wp-emoji-release.min.js?ver=5.7.6","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emailverificationaddon.com/","date":"2025-11-06T13:34:42.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"emailverificationaddon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 18:07:26 GMT","end":"Mon, 05 Jan 2026 18:07:25 GMT"},"fingerprint":{"sha1":"4A:F7:15:E1:2A:35:2E:43:F7:66:F8:9D:90:15:97:3F:CB:21:37:7E","sha256":"D7:FC:88:B6:50:C1:17:DE:ED:6F:75:91:14:DF:46:F4:26:F9:58:FD:69:B7:6D:D7:33:48:E2:EE:4B:D6:8A:45"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=5.7.6 HTTP/1.1\r\nHost: emailverificationaddon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emailverificationaddon.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.2\r\ndate: Thu, 06 Nov 2025 13:34:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Feb 2021 23:36:04 GMT\r\netag: W/\"601b3364-3795\"\r\nexpires: Thu, 13 Nov 2025 13:34:42 GMT\r\ncache-control: max-age=604800\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14229,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11272)","md5":"eaa8641bcda2371f4024a71fbb67de3b","sha1":"0e46c39d3821683c856605a82254115f9a6a7792","sha256":"0c5f584d1ea2c3313dc8c55824c2a572d3cf2eae87c5ca62a58e598aec9ddb5c","sha512":"82b6b84d0a7a28d6a8b013ee41eef27e1df8c1fca396dfb4ed6d01249e12479230cb2d3683a56eb80651d22046c74506d194fa34b05e2a8ad8a08ae297f79aeb","ssdeep":"384:inJ5kNuPTbUUh31//bEP+XgA3FqC2effJmp3:iJ5aUUUh31//YWXgA7ffC3","tlshash":"ad52ce9b732b5f9b743e37d78d96cf4ec5da55832580e078dafeb68129a00598374c80","first_seen":"2023-03-07T01:02:17Z","last_seen":"2026-04-04T22:20:09.714378Z","times_seen":9103,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"emailverificationaddon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-FSJNVFYQN3\u0026cx=c\u0026gtm=4e5b41h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emailverificationaddon.com/","date":"2025-11-06T13:34:43.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:40 GMT","end":"Mon, 05 Jan 2026 08:37:39 GMT"},"fingerprint":{"sha1":"A0:B4:2E:82:A1:27:01:D4:2F:43:C6:5A:4C:76:BD:AA:46:E7:DF:A1","sha256":"EE:18:CE:69:D5:34:E0:87:E6:41:61:C2:8F:06:9E:82:E4:85:2F:5E:5E:4B:99:79:9B:C2:6B:E3:A6:EC:EA:A9"}}},"request":{"raw":"GET /gtag/js?id=G-FSJNVFYQN3\u0026cx=c\u0026gtm=4e5b41h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emailverificationaddon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 06 Nov 2025 13:34:43 GMT\r\nexpires: Thu, 06 Nov 2025 13:34:43 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 149428\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":458434,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8449)","md5":"c89e510ee775b2f7512ecdde43c3e7db","sha1":"20fdc82cbcddfbca91e7b47c4e7b482b322a1425","sha256":"b558dd9786c8df9e6b3b2125b967f81de0b6b50076877f50baea7ae5c59cc841","sha512":"aa1e5d928f51fbca7e17b67ca48509fb55a27a1258c20aab52591efdedefa8d30c1e32b569be36f4c6f765ce412ad7d8bcea278371bb7b329c5e69cbcfc8a75a","ssdeep":"6144:M1YF4X+EDtIXXRR0tBOgd0Nd3IQJYhWA5rP+6sn:bFWRaXRR056YhxrQ","tlshash":"6da409ce73c674265396f468502f01cba9bb24a2b49cc89af189ccf02d7469a4177f7d","first_seen":"2025-11-06T13:35:11.050777Z","last_seen":"2025-11-06T13:35:11.050777Z","times_seen":1,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emailverificationaddon.com/wp-content/themes/twentytwenty/print.css?ver=1.0.0","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emailverificationaddon.com/","date":"2025-11-06T13:34:42.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"emailverificationaddon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 18:07:26 GMT","end":"Mon, 05 Jan 2026 18:07:25 GMT"},"fingerprint":{"sha1":"4A:F7:15:E1:2A:35:2E:43:F7:66:F8:9D:90:15:97:3F:CB:21:37:7E","sha256":"D7:FC:88:B6:50:C1:17:DE:ED:6F:75:91:14:DF:46:F4:26:F9:58:FD:69:B7:6D:D7:33:48:E2:EE:4B:D6:8A:45"}}},"request":{"raw":"GET /wp-content/themes/twentytwenty/print.css?ver=1.0.0 HTTP/1.1\r\nHost: emailverificationaddon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emailverificationaddon.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.2\r\ndate: Thu, 06 Nov 2025 13:34:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 Jan 2021 15:44:46 GMT\r\netag: W/\"60084fee-ab3\"\r\nexpires: Thu, 13 Nov 2025 13:34:42 GMT\r\ncache-control: max-age=604800\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2739,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b014e0b450ff70eb961fb89ef1811356","sha1":"bd46ade0c61e944f6545cd029edc040c6492ecec","sha256":"2193af07e37734d3adce890f316c5b226dae4f270d274107287748d40fb4a84b","sha512":"e12eb43552269fb6c5b193b2eb86366344047815cbc8ee4e84353db83eec4afd92104d39ce884a85c1db9f9f76a24b9728e7c98943dc32c706c5ba3f2045caf7","ssdeep":"","tlshash":"2251a0a0ac5725913671d334b67b1124fb375767c18290ca79f8c308ab74225a16cede","first_seen":"2023-04-07T18:18:53Z","last_seen":"2026-04-04T05:17:44.738246Z","times_seen":119,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"emailverificationaddon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emailverificationaddon.com/wp-content/uploads/2020/08/cropped-evaddon-v7-logo-circle-512px-32x32.png","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emailverificationaddon.com/","date":"2025-11-06T13:34:43.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"emailverificationaddon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 18:07:26 GMT","end":"Mon, 05 Jan 2026 18:07:25 GMT"},"fingerprint":{"sha1":"4A:F7:15:E1:2A:35:2E:43:F7:66:F8:9D:90:15:97:3F:CB:21:37:7E","sha256":"D7:FC:88:B6:50:C1:17:DE:ED:6F:75:91:14:DF:46:F4:26:F9:58:FD:69:B7:6D:D7:33:48:E2:EE:4B:D6:8A:45"}}},"request":{"raw":"GET /wp-content/uploads/2020/08/cropped-evaddon-v7-logo-circle-512px-32x32.png HTTP/1.1\r\nHost: emailverificationaddon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emailverificationaddon.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.2\r\ndate: Thu, 06 Nov 2025 13:34:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1292\r\nlast-modified: Fri, 07 Aug 2020 15:22:15 GMT\r\netag: \"5f2d71a7-50c\"\r\nexpires: Sat, 06 Dec 2025 13:34:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1292,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"9ccb1d7041a51d791c350755ab99b33e","sha1":"041a043d935b3777b8df8f9220aebe3bbec160e9","sha256":"b10bf7670c2bcbf822f00b9498db803e7497fe55d2268ab232cae589993dd6b9","sha512":"fda249dded7d6ca64a4fc806a4d0c58116eff102f93d5df1543df10eaf3b1add12cfce8985b65d6df9fc926494c3fb393253be63265674e1e442b27c35319032","ssdeep":"","tlshash":"49219885c3c1d26190fbf911920c16f54d91905563fab7d59669106f1cf200fd9abb63","first_seen":"2025-11-06T13:35:11.052431Z","last_seen":"2025-11-06T13:35:11.052431Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"emailverificationaddon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emailverificationaddon.com/wp-content/uploads/2020/07/evaddon-v6_9-color-scale-G-Suite-1024x640.png","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://emailverificationaddon.com/","date":"2025-11-06T13:34:43.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"emailverificationaddon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 18:07:26 GMT","end":"Mon, 05 Jan 2026 18:07:25 GMT"},"fingerprint":{"sha1":"4A:F7:15:E1:2A:35:2E:43:F7:66:F8:9D:90:15:97:3F:CB:21:37:7E","sha256":"D7:FC:88:B6:50:C1:17:DE:ED:6F:75:91:14:DF:46:F4:26:F9:58:FD:69:B7:6D:D7:33:48:E2:EE:4B:D6:8A:45"}}},"request":{"raw":"GET /wp-content/uploads/2020/07/evaddon-v6_9-color-scale-G-Suite-1024x640.png HTTP/1.1\r\nHost: emailverificationaddon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emailverificationaddon.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.2\r\ndate: Thu, 06 Nov 2025 13:34:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 69975\r\nlast-modified: Wed, 01 Jul 2020 16:53:10 GMT\r\netag: \"5efcbf76-11157\"\r\nexpires: Sat, 06 Dec 2025 13:34:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69975,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 640, 8-bit colormap, non-interlaced","md5":"e8b486e43d95ee2c010965aa6b18cf0b","sha1":"d7f919d6ff8f9c141673b53e1f74618a7b700972","sha256":"eb2c9a4882ac08b3cc5d2c3f6840796594c3c3fddeb33269c2b153936a3092d0","sha512":"8c7b56c712bf2316d48d37251930036f3e21de327c74e8077fa1e979cde82834ef906af09a7f36dd04da32617eb7e1c99c06b96757e62825cb235bc01fc7c936","ssdeep":"1536:m6SZPtIivd1iFcYUkkhywj77Hf0V7wKKP5V0VsjZZxwY:oPOiuFcPTywj/0wKKRmszxb","tlshash":"1963024b685f3420ab2e993e7ac15b14f5bccd381b99a3900167ac1d92326d57cf1b2b","first_seen":"2025-11-06T13:35:11.053192Z","last_seen":"2025-11-06T13:35:11.053192Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"emailverificationaddon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emailverificationaddon.com/","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-06T13:34:42.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"emailverificationaddon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 18:07:26 GMT","end":"Mon, 05 Jan 2026 18:07:25 GMT"},"fingerprint":{"sha1":"4A:F7:15:E1:2A:35:2E:43:F7:66:F8:9D:90:15:97:3F:CB:21:37:7E","sha256":"D7:FC:88:B6:50:C1:17:DE:ED:6F:75:91:14:DF:46:F4:26:F9:58:FD:69:B7:6D:D7:33:48:E2:EE:4B:D6:8A:45"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: emailverificationaddon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.2\r\ndate: Thu, 06 Nov 2025 13:34:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-pingback: https://emailverificationaddon.com/xmlrpc.php\r\nset-cookie: pll_language=en; expires=Fri, 06-Nov-2026 13:34:42 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax\r\nlink: \u003chttps://emailverificationaddon.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://emailverificationaddon.com/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; type=\"application/json\", \u003chttps://emailverificationaddon.com/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Linkedin Ads","description":"Linkedin Ads is a paid marketing tool that offers access to Linkedin social networks through various sponsored posts and other methods.","website":"https://business.linkedin.com/marketing-solutions/ads","common_platform_enumeration":"","icon":"Linkedin.svg","categories":["Advertising"]},{"name":"Twenty Twenty","description":"Twenty Twenty is the default WordPress theme for 2020.","website":"https://wordpress.org/themes/twentytwenty","common_platform_enumeration":"","icon":"WordPress.svg","categories":["WordPress themes"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:5.7.6","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Yoast SEO:18.4.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]}],"data":{"size":37562,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3622), with CRLF, LF line terminators","md5":"d9c0e678c6ae342119c10f987acc30d3","sha1":"fd128fe0641e1b3ded51030d56f440b5692fc836","sha256":"eb9a987120f472df44c69ae3093839d19edda4b1a8f74dee3840369fac661d6f","sha512":"06271640aa37bf3de7c82200075f3a017f901a345179d472fd1e993dd9b2f4803ba89565e47f024b95c89d90a18cb0b7076a48aed33efbd4c2ee426c00a0f07c","ssdeep":"768:GPh5Ef9Wvw8wo6T6D0pjvj5P3W8icii4WoX4PxIp:GHQ9Wvww6T6DW75Xii4WoX4ZIp","tlshash":"31f2b7b3b64b1466279313f6f029f3487327912ece1649c1b9ba409d12c6d92fb73866","first_seen":"2025-11-06T13:35:11.053937Z","last_seen":"2025-11-06T13:35:11.053937Z","times_seen":1,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":102,"dns":22,"connect":22,"send":0,"wait":75,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"emailverificationaddon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emailverificationaddon.com/wp-content/themes/twentytwenty/assets/js/index.js?ver=1.0.0","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emailverificationaddon.com/","date":"2025-11-06T13:34:42.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"emailverificationaddon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 18:07:26 GMT","end":"Mon, 05 Jan 2026 18:07:25 GMT"},"fingerprint":{"sha1":"4A:F7:15:E1:2A:35:2E:43:F7:66:F8:9D:90:15:97:3F:CB:21:37:7E","sha256":"D7:FC:88:B6:50:C1:17:DE:ED:6F:75:91:14:DF:46:F4:26:F9:58:FD:69:B7:6D:D7:33:48:E2:EE:4B:D6:8A:45"}}},"request":{"raw":"GET /wp-content/themes/twentytwenty/assets/js/index.js?ver=1.0.0 HTTP/1.1\r\nHost: emailverificationaddon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emailverificationaddon.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.2\r\ndate: Thu, 06 Nov 2025 13:34:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 20 Jan 2021 15:44:46 GMT\r\netag: W/\"60084fee-6713\"\r\nexpires: Thu, 13 Nov 2025 13:34:42 GMT\r\ncache-control: max-age=604800\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"0d6d01927aa235ae92e56262fb8d587b","sha1":"ce59172739d4b97271f4ec7ac8fb525662dcf3b8","sha256":"4caa8d30188b3e8be5f4b7cbd34f35cd5bbb04ced5dcab3ef231f62a128a1ba1","sha512":"76a11557d8e7379c6db89d8bc7dd85e0c10a37a4aa2a0601966d14cd2472bd683da8cc84a432c49fa67e60d0487d2bfcab793cc2f425ee401b05e0b125439639","ssdeep":"768:dtM+55qp6SFBg93RmW5EDhLVbD4kqAAU7vhxDAt/VeKQXT4:dRqUSFBWBmW5EtLVbD1qAAU7vhxDm44","tlshash":"14c245d27f4f227f459af36a923d91c8fb3dd0f9e142102978ed8959156081102aeffa","first_seen":"2023-03-07T16:29:26Z","last_seen":"2026-04-02T04:07:17.203158Z","times_seen":50,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"emailverificationaddon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-3237080-73","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emailverificationaddon.com/","date":"2025-11-06T13:34:42.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:40 GMT","end":"Mon, 05 Jan 2026 08:37:39 GMT"},"fingerprint":{"sha1":"A0:B4:2E:82:A1:27:01:D4:2F:43:C6:5A:4C:76:BD:AA:46:E7:DF:A1","sha256":"EE:18:CE:69:D5:34:E0:87:E6:41:61:C2:8F:06:9E:82:E4:85:2F:5E:5E:4B:99:79:9B:C2:6B:E3:A6:EC:EA:A9"}}},"request":{"raw":"GET /gtag/js?id=UA-3237080-73 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emailverificationaddon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 06 Nov 2025 13:34:42 GMT\r\nexpires: Thu, 06 Nov 2025 13:34:42 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 06 Nov 2025 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 109950\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":314864,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"7d63b4d8b46b59ed0b3e8881e29e5f38","sha1":"9b0a964268361e6714c44a7b7ba3505ca63ff57b","sha256":"8e58da37e70f660e30400b533fa726fc6f0c6571417b7b1559e14fb21e02d865","sha512":"a48558dad0445495ea143875514d3d4783a073ca4b337f08d5b46574675bc8cf586d4d03221a6f4945399b3a62ccfd07569ddee606a1ff84c1771aaebc80a7ce","ssdeep":"3072:43T/Xys4XV4Kf098i7DPQ6ZFqVVPitpsHbrmxsROgd0Nd3IBGbYhxP71NVUnM:0YF46EDtmOxWOgd0Nd3IQbYhxz1NVUnM","tlshash":"e964f7cd73d6742683a3a478503f018bb17a69d1f88cc895e186dcd42e70aaa4277f7d","first_seen":"2025-11-06T13:35:11.055359Z","last_seen":"2025-11-06T13:35:11.055359Z","times_seen":1,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":114,"dns":0,"connect":14,"send":0,"wait":51,"receive":57,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emailverificationaddon.com/wp-includes/js/wp-embed.min.js?ver=5.7.6","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emailverificationaddon.com/","date":"2025-11-06T13:34:42.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"emailverificationaddon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 18:07:26 GMT","end":"Mon, 05 Jan 2026 18:07:25 GMT"},"fingerprint":{"sha1":"4A:F7:15:E1:2A:35:2E:43:F7:66:F8:9D:90:15:97:3F:CB:21:37:7E","sha256":"D7:FC:88:B6:50:C1:17:DE:ED:6F:75:91:14:DF:46:F4:26:F9:58:FD:69:B7:6D:D7:33:48:E2:EE:4B:D6:8A:45"}}},"request":{"raw":"GET /wp-includes/js/wp-embed.min.js?ver=5.7.6 HTTP/1.1\r\nHost: emailverificationaddon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emailverificationaddon.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.2\r\ndate: Thu, 06 Nov 2025 13:34:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Feb 2021 23:36:04 GMT\r\netag: W/\"601b3364-592\"\r\nexpires: Thu, 13 Nov 2025 13:34:42 GMT\r\ncache-control: max-age=604800\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1426,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1391)","md5":"905225d5711b559d3092387d5ffbedbd","sha1":"6f6c39075263bafb9e8c10f1b34a1a0f7ee03c9d","sha256":"5be614bce53f767993a5f5f14a6badd6aae6bf3af7cbdbf4d31520de49e27991","sha512":"5ad34cf11acf45ae256b2641496be13939cd5e0212810c43ab20cadbb313a1d99cb3a451148e160d80f1f952a8514480c2953bc6ca0c4697a466a01e1c3d5f8d","ssdeep":"","tlshash":"5c21522a3228943758db11d3bc4535cad2e11fed681215d20e38cc49eae4e935969fe0","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-04-04T21:41:06.797306Z","times_seen":4511,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"emailverificationaddon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emailverificationaddon.com/wp-content/themes/twentytwenty/style.css?ver=5.7.6","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emailverificationaddon.com/","date":"2025-11-06T13:34:42.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"emailverificationaddon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 18:07:26 GMT","end":"Mon, 05 Jan 2026 18:07:25 GMT"},"fingerprint":{"sha1":"4A:F7:15:E1:2A:35:2E:43:F7:66:F8:9D:90:15:97:3F:CB:21:37:7E","sha256":"D7:FC:88:B6:50:C1:17:DE:ED:6F:75:91:14:DF:46:F4:26:F9:58:FD:69:B7:6D:D7:33:48:E2:EE:4B:D6:8A:45"}}},"request":{"raw":"GET /wp-content/themes/twentytwenty/style.css?ver=5.7.6 HTTP/1.1\r\nHost: emailverificationaddon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emailverificationaddon.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.2\r\ndate: Thu, 06 Nov 2025 13:34:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 Jan 2021 15:44:46 GMT\r\netag: W/\"60084fee-1f236\"\r\nexpires: Thu, 13 Nov 2025 13:34:42 GMT\r\ncache-control: max-age=604800\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":127542,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2955), with CRLF line terminators","md5":"9a9f093598a24f4c1f02b248183b6783","sha1":"48d651833eed76d072f10329d2aa07033aa75366","sha256":"4b3f8d28fa386043322e6d29d5a62609bfa92d6e62124d132145ec421862f399","sha512":"4e0e55222a92b9acc09c5134783e565c9797e65d869582c82760d313e273e8e77cf28fdb8591bb2beebee2907fa3e3fb1e92a98f21946ed742d34eaf53b0fe8d","ssdeep":"768:YsoA3N+CJVXWaAAMRaBKxgszXuVBRw8pTVK/Dgp1bRPOjli6q+gkfG/wh9StCTdA:YsP9qALdjTKXWMaK0oHxtE","tlshash":"e5c388982f9378da836fd755bfb45a42ee800060cb9781ddf4e3c604a1c86a417ed79e","first_seen":"2024-10-26T18:14:06.217008Z","last_seen":"2026-04-01T08:54:31.533394Z","times_seen":14,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"emailverificationaddon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emailverificationaddon.com/wp-content/themes/twentytwenty-child/style.css?ver=1.0.0","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emailverificationaddon.com/","date":"2025-11-06T13:34:42.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"emailverificationaddon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 18:07:26 GMT","end":"Mon, 05 Jan 2026 18:07:25 GMT"},"fingerprint":{"sha1":"4A:F7:15:E1:2A:35:2E:43:F7:66:F8:9D:90:15:97:3F:CB:21:37:7E","sha256":"D7:FC:88:B6:50:C1:17:DE:ED:6F:75:91:14:DF:46:F4:26:F9:58:FD:69:B7:6D:D7:33:48:E2:EE:4B:D6:8A:45"}}},"request":{"raw":"GET /wp-content/themes/twentytwenty-child/style.css?ver=1.0.0 HTTP/1.1\r\nHost: emailverificationaddon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emailverificationaddon.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.2\r\ndate: Thu, 06 Nov 2025 13:34:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 07 Jun 2020 11:42:25 GMT\r\netag: W/\"5edcd2a1-26e\"\r\nexpires: Thu, 13 Nov 2025 13:34:42 GMT\r\ncache-control: max-age=604800\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":622,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"aeddf19c9721d6c045e94725dfba1819","sha1":"88f9b3bafc9ca82725f5f1115a80f3b323c31472","sha256":"9f95a4193e7a03935e9806b406daf53090ad7a7454752578108fa873a24ac091","sha512":"9711ce37b7dc393285c21951fa59f8f28568724e9ef7f9074ae4ee21aa27c0bf31bda55d473f7db799403718a3290085eccdaa02560d6635cb4064ce602e6f9f","ssdeep":"","tlshash":"9ff00c8779c263520b3d8204e427fab9be3c2148a6db1838b88623b407952b552f8b02","first_seen":"2025-11-06T13:35:11.057019Z","last_seen":"2025-11-06T13:35:11.057019Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"emailverificationaddon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emailverificationaddon.com/wp-content/plugins/bj-lazy-load/js/bj-lazy-load.min.js?ver=2","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emailverificationaddon.com/","date":"2025-11-06T13:34:42.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"emailverificationaddon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 18:07:26 GMT","end":"Mon, 05 Jan 2026 18:07:25 GMT"},"fingerprint":{"sha1":"4A:F7:15:E1:2A:35:2E:43:F7:66:F8:9D:90:15:97:3F:CB:21:37:7E","sha256":"D7:FC:88:B6:50:C1:17:DE:ED:6F:75:91:14:DF:46:F4:26:F9:58:FD:69:B7:6D:D7:33:48:E2:EE:4B:D6:8A:45"}}},"request":{"raw":"GET /wp-content/plugins/bj-lazy-load/js/bj-lazy-load.min.js?ver=2 HTTP/1.1\r\nHost: emailverificationaddon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emailverificationaddon.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.2\r\ndate: Thu, 06 Nov 2025 13:34:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 15 Jun 2020 08:49:33 GMT\r\netag: W/\"5ee7361d-664\"\r\nexpires: Thu, 13 Nov 2025 13:34:42 GMT\r\ncache-control: max-age=604800\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1636,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1636), with no line terminators","md5":"4f7d8e4e89b3a30253ab1489c4498423","sha1":"9067585742e620a1fdd327e2f89aba331af9734c","sha256":"5bc5fe165e8fab88549d56628bcc4ad463235f7f995c0477fb90fc78698be265","sha512":"06da70254593ba7661d918c4138d98429b2fb2eb1507bcf4c441e3f92c0726a16f39b073f54441fbab6e85fb386144fc59f848f3dab6c83bf5d382c155fab3e6","ssdeep":"","tlshash":"f231203e32142f797ac66aebb7adb743287223bb46531c605c6adcb09024e4114b7697","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-04T15:34:57.069625Z","times_seen":573,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"emailverificationaddon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emailverificationaddon.com/wp-content/themes/twentytwenty/assets/fonts/inter/Inter-upright-var.woff2","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://emailverificationaddon.com/","date":"2025-11-06T13:34:43.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"emailverificationaddon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 18:07:26 GMT","end":"Mon, 05 Jan 2026 18:07:25 GMT"},"fingerprint":{"sha1":"4A:F7:15:E1:2A:35:2E:43:F7:66:F8:9D:90:15:97:3F:CB:21:37:7E","sha256":"D7:FC:88:B6:50:C1:17:DE:ED:6F:75:91:14:DF:46:F4:26:F9:58:FD:69:B7:6D:D7:33:48:E2:EE:4B:D6:8A:45"}}},"request":{"raw":"GET /wp-content/themes/twentytwenty/assets/fonts/inter/Inter-upright-var.woff2 HTTP/1.1\r\nHost: emailverificationaddon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emailverificationaddon.com/wp-content/themes/twentytwenty/style.css?ver=5.7.6\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.2\r\ndate: Thu, 06 Nov 2025 13:34:43 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 223892\r\nlast-modified: Wed, 20 Jan 2021 15:44:46 GMT\r\netag: \"60084fee-36a94\"\r\nexpires: Sat, 06 Dec 2025 13:34:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":223892,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 223892, version 1.0","md5":"2f136faf2d0ef6368898d1a515ab707c","sha1":"81dbe45ccd7fae3a0a298c5c166b4317c985f538","sha256":"e03c2df7ef439d2708bbc168a21c0a00da63e5664d286120c994c39644addd03","sha512":"101987a2a66af01ed0c606bb77eee816437b5867c13baa43a407850efca4ceee016e98058c671ecf6ebe71bc080f01149f39287c32d3a0ee9c11266461469a7e","ssdeep":"6144:5m4/XjDCEXvILq89p5NOlpBRLCpHJfd1UxgXnQSVxkv:Hp/bsKBRupHJ11UulK","tlshash":"ac2423f545f36c03e0a32794dd7ee83a21bd9f8892e281c4f66947c470baac89347569","first_seen":"2023-04-19T20:24:59Z","last_seen":"2026-04-04T07:45:46.3258Z","times_seen":2038,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"emailverificationaddon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emailverificationaddon.com/wp-content/uploads/2020/08/cropped-evaddon-v7-logo-circle-512px-192x192.png","fqdn":"emailverificationaddon.com","domain":"emailverificationaddon.com","tld":"com"},"ip":{"addr":"188.166.49.231","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emailverificationaddon.com/","date":"2025-11-06T13:34:43.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"emailverificationaddon.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 18:07:26 GMT","end":"Mon, 05 Jan 2026 18:07:25 GMT"},"fingerprint":{"sha1":"4A:F7:15:E1:2A:35:2E:43:F7:66:F8:9D:90:15:97:3F:CB:21:37:7E","sha256":"D7:FC:88:B6:50:C1:17:DE:ED:6F:75:91:14:DF:46:F4:26:F9:58:FD:69:B7:6D:D7:33:48:E2:EE:4B:D6:8A:45"}}},"request":{"raw":"GET /wp-content/uploads/2020/08/cropped-evaddon-v7-logo-circle-512px-192x192.png HTTP/1.1\r\nHost: emailverificationaddon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emailverificationaddon.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.2\r\ndate: Thu, 06 Nov 2025 13:34:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 11266\r\nlast-modified: Fri, 07 Aug 2020 15:22:15 GMT\r\netag: \"5f2d71a7-2c02\"\r\nexpires: Sat, 06 Dec 2025 13:34:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11266,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"37cc7544aaa996568ab3cf83ba9e6b73","sha1":"8d5cc3eb4152c3a6cd44dd4f36e359dc00c5bfd9","sha256":"fe1039af054e6bd39b699d55d1b32fdfac53640e071b2d8142a30ba539094cbd","sha512":"a821ad8dbc3987e977903344046108bb6aba777024eb793d3865f2cea0738339c86b850d75a37ed503297a30099d9cc5893d5d1c00a71263134c59001f5b9838","ssdeep":"192:0v8SJzGC4J/q3tbN6ZWkUqnLbNZ2E8HDJo1K0V/hqUEckePy2oV8/dFgh:i8SJzGChhIWdAZuHDJ70V/hqUrkAywFW","tlshash":"4532bfed935ef9bd41424b1413b08855689909d5bbc2e1983f0ff8add8f0097e98914a","first_seen":"2025-11-06T13:35:11.058882Z","last_seen":"2025-11-06T13:35:11.058882Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"emailverificationaddon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}