{"report_id":"f40686f2-6df7-43fd-9dd3-89747a79bf19","version":0,"status":"done","tags":[],"date":"2026-09-03T19:17:23Z","url":{"schema":"http","addr":"heartlinewellness.com/","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"ip":{"addr":"23.235.223.233","port":0,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"heartlinewellness.com/","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"title":"– Heartline Wellness Center","dom":{"size":13823,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1746)","md5":"aae0f4621eb94812409cf45216c1c0c9","sha1":"ec46c8afd6387833bd1bdd924cf10deb6f63e564","sha256":"4bee56623fc64642c962c57c225004f45f33fa686188179649d62f8e7b9ba27b","sha512":"3556f8a00a4748a270a2b6a1b817a9898ea83b5d46aa71eef91d7132ff2faad362fe401f2b8fe3fe35d9d33aa7526c1066187532ac4faa7a4301b5c0b4b366f1","ssdeep":"192:Qcd8mtHs01kdGyhcNteo14DvwI4bebBmnjG1FvmAxNBMzMA8r4rW:FbMoWcTeo14DI6/mYNyQAjW","tlshash":"9552e8b7ca59990a013a4d05f085354cd637521f92068ba2fbfe4b7b3340df7982ab5c","dom_hash":"domhash519bb76efae63188189d485fe95c9e7f","first_seen":"2026-09-03T18:45:30.927265Z","last_seen":"2026-09-03T19:17:24.927723Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"heartlinewellness.com/","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"ip":{"addr":"23.235.223.233","port":0,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-08T19:17:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"heartlinewellness.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"heartlinewellness.com","ip":{"addr":"23.235.223.233","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"domain_registered":"2004-12-11","domain_rank":0,"first_seen":"2026-06-23T11:36:22.662699Z","last_seen":"2026-09-03T18:45:29.97938Z","alert_count":36,"request_count":12,"received_data":170467,"sent_data":6217,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:4.9.26","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"heartlinewellness.com/","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"ip":{"addr":"23.235.223.233","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4bd82276f3d6692c4c21dacf41e65e6b","sha1":"da96f993abecd36b10d1656db10a18b60895fc2e","sha256":"30415ba556517c117be045045b646b3a56b7c0f5e8b2704cc4663e37e5d2dca8","sha512":"52ef0af00e5aa2b2930b47fa9911d21214dd463d2dc687a56fda53a51bce58ef430ed1eaafdaae708132215a90dd15a28a3eb84dcc8c6dc595b77db82df4cacb","ssdeep":"","tlshash":"1741337a3b95645966f208b3f12f2b0f3f2555070089aa36c598e9b0393ede1d0fad1d","size":2041,"data":"","first_seen":"2026-06-23T11:36:25.495191Z","last_seen":"2026-09-03T19:17:24.940419Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heartlinewellness.com/","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"ip":{"addr":"23.235.223.233","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3b32775b3e602c7da2bc08489b8585c","sha1":"33707398921efc77c3e2e470105b3f12f921e86b","sha256":"87f09e37c48ea5f8de889324adddd918ac0bb43faba11f84006bd07c9310f86e","sha512":"3ae86dbc838b7cd53f52a444609a4bb380ce656d42a5e0b312e6038ead2fcc4a8f9a66a89c19c6f09363621f7384e7f7b750b6a066bb95ce15b628b4e54a474e","ssdeep":"","tlshash":"53217ac7ee0ad18408799e05c3cb2c5f65e3273114972128f9deefc46328c655d5670b","size":1166,"data":"","first_seen":"2026-06-23T11:36:25.496623Z","last_seen":"2026-09-03T19:17:24.941168Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heartlinewellness.com/","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"ip":{"addr":"23.235.223.233","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1ac7a20ccae4a42cd0bb061fa8e688cc","sha1":"f1db3d4c76cd16ab94c0ec2a01eac0704b7e45ee","sha256":"174f942f3c017626973a9fd0baaca4b1a3e8b236970639124902c646efe399bf","sha512":"6c81215bb5dee31fe0192a91e833e5fbd0ef33de7400b4b445db12823c3c5c8e00cd4803b90d94e08ebebf1c5166d789a4cba6bb9d928a5c899fc40b840db930","ssdeep":"","tlshash":"3f01dcd3ee4fd2841dbd9f0181876d8e95e3133215a32008c8a3e7c1a32cda1ad5ab1a","size":800,"data":"","first_seen":"2026-06-23T11:36:25.498002Z","last_seen":"2026-09-03T19:17:24.941871Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heartlinewellness.com/","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"ip":{"addr":"23.235.223.233","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4ccb6f357a233e1a3123b194d0dacc33","sha1":"204a4834372a3ed6eacaf108c385c3b8156a81a9","sha256":"5e8f6b9ed45ca398a45208ff446235b9342704f9952a30edd71c3bb6506d192e","sha512":"5ad8eb1f0d70724a4ecdce8230506ec48867bdf1e19631a6156261f360fbf361df41e32af0bbdba9c8a89574741cb09e692a10f1685daa81b53202539a5ca3fc","ssdeep":"","tlshash":"6cf0478b2b1186f226c50f1783bf06055c9187611cc2315c87989fc493a9b53dca9f3f","size":603,"data":"","first_seen":"2026-06-23T11:36:25.501592Z","last_seen":"2026-09-03T19:17:24.945694Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heartlinewellness.com/","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"ip":{"addr":"23.235.223.233","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8c8f3be884ed38df2e0179cd74ef3b51","sha1":"236f27cf09a3e5863ba4129d8180cce806499c9e","sha256":"df617709eb112dc13d0bedc1ba71e44f81e7fb8b6038955a8d76d175bc3a5db9","sha512":"b790bcdd7a23b039b6c7103c1801e4bcf56a86f8a9da41171e05128d54eab2a3ab5b02640c83f2550943c99f16b769830de2f474b600057b20c602995d1ec822","ssdeep":"","tlshash":"40e0f1e2444fc0804cbbe040d4173bcae7215eb3161a12758383b80654319b20a1b109","size":396,"data":"","first_seen":"2026-06-23T11:36:25.499326Z","last_seen":"2026-09-03T19:17:24.946279Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heartlinewellness.com/","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"ip":{"addr":"23.235.223.233","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2fe36a88415684f0178a9d6112ffefea","sha1":"ea02d915924a66aac86b40df4e0a098a4989136f","sha256":"52c1fccd4e4b449d8b1b04f5f72fd8f790341f14c20c64b6192a1a0509e55a3c","sha512":"fc6bd2a9d43d99e658ccb9a955d2b58628d785f5c877100b83cb78a718090b311f28bc960afe10c889bd19076abe0606c79cb251187adc59b51ef3e1b0848a79","ssdeep":"","tlshash":"ebc0808173905418043811313051b291f0b1d17d4f4102065b45cd510188c3d59ac665","size":155,"data":"","first_seen":"2026-06-23T11:36:25.500584Z","last_seen":"2026-09-03T19:17:24.946794Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heartlinewellness.com/wp-includes/js/comment-reply.min.js?ver=4.9.26","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"ip":{"addr":"23.235.223.233","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ef21a469fc37e845d6303fcfea70897","sha1":"a86ec94ec7bee9227bcdf8d6374cabe82ae43e49","sha256":"6b2e2d56e7b0e80d919bc65dd94f8cd95e57ad9298fc4fecc005301ea8339c9f","sha512":"3cb53bb9f6d50c5c01b499619c15947c7b529b52d847afd40b891908cb08d3c1b33cbe0e229b617accda88258b335b240d09e4194cf270050b817ffedec23dc0","ssdeep":"","tlshash":"21111fb431c96c726382d12c17be872a74b1131c7d0942a5c02a64b57264ed75116fed","size":1076,"data":"","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-09-04T11:27:56.915042Z","times_seen":3230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heartlinewellness.com/wp-includes/js/wp-embed.min.js?ver=4.9.26","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"ip":{"addr":"23.235.223.233","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"43928880ff5ebadcd513755b011732cd","sha1":"d0fdb17db490123ed700c2caa5d2d764794cb6d5","sha256":"37c5f58f12814dd0ecc28f15b7765c6bcd31a9479d330b4ef896e140bf89dc38","sha512":"ba9ec90a842c0aad802294c3fe144c0ed737e51586ed19dc15dcf518dd0c9790e6ba5a1a8bc9e8a09d48cac3941df65c4d1d77b3b79d76a6cfac9b306c2da710","ssdeep":"","tlshash":"4d21526a3239d43e54e715d3bc8435cad2b21be9a85200d14a798848f5a8f93886afe1","size":1443,"data":"","first_seen":"2023-05-16T22:20:04Z","last_seen":"2026-09-04T05:14:33.067141Z","times_seen":15936,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heartlinewellness.com/wp-includes/js/wp-emoji-release.min.js?ver=4.9.26","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"ip":{"addr":"23.235.223.233","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe0575b66568074463f12485d90f6d4c","sha1":"aeedd9ab3b7874e63f647042963cb1301a38b391","sha256":"647a6b36f3fd1f21bae171270111096b4613c23a47e6621628a51bae9c82b0b7","sha512":"0d209cbc9550cfcf49ca7ca5a1243e1578c0a42f9fb28c1fa8d353cea26f24eed282547f47fe858126e1ba9a4aa4d8ddbd2cbdef9db5a45f24cfbfd6383bff9e","ssdeep":"192:WuKiKqdccoXJW+TJr3J//bEvAbWXXR6AooHyrOUVsbEJEoesM0m3dJXWP/2//:0qlkJW+TJr3J//bEI+XgA5UCOeffJmW3","tlshash":"8032229f732b5f9b743e36db8e96cf4d95d949932580e038cafef68129e005983b4850","size":11943,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-09-03T23:07:07.50592Z","times_seen":7203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"heartlinewellness.com/wp-content/themes/chateau-2.0/css/iphone.css","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"ip":{"addr":"23.235.223.233","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heartlinewellness.com/","date":"2026-09-03T19:16:54.277Z","timestamp":1788463014277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.heartlinewellness.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 13:12:06 GMT","end":"Mon, 19 Oct 2026 13:12:05 GMT"},"fingerprint":{"sha1":"5C:22:EA:9A:4F:E4:06:20:1A:7D:2C:C2:D7:77:0B:1D:F6:C1:45:DB","sha256":"16:F8:41:37:EE:81:78:BC:D3:EF:D2:B2:47:FB:79:C4:25:B7:25:17:5B:83:D5:AF:5B:7A:5F:CF:D0:8A:4B:24"}}},"request":{"raw":"GET /wp-content/themes/chateau-2.0/css/iphone.css HTTP/1.1\r\nHost: heartlinewellness.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heartlinewellness.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 21 Mar 2012 22:13:07 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2273\r\ncontent-type: text/css\r\ndate: Thu, 03 Sep 2026 19:16:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2273,"size_decoded":2475,"mime_type":"text/css","magic":"ASCII text","md5":"cddfa63605e33f3cc20b41ee6657cc62","sha1":"3823bdacd4f9e0752ed288071ad21790fd4731ff","sha256":"b99e0ee206c48210d7681eac24c2d2ac9f66576386d045ea411f0933e8d1c3c9","sha512":"28aed988675bb8bf7c0556ee5895ad74e2c497845d8d21c69619f45f36112a683f5b72bb5d8ca83ce65c81b7228e3d4345e932fb851d113e9af871e19d45c28c","ssdeep":"","tlshash":"1841f116ad923159431bc266f6862db9be511c37c28268fadc220e39cf4b7d50374139","first_seen":"2026-02-15T17:14:43.929341Z","last_seen":"2026-09-03T19:17:24.928763Z","times_seen":4,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"heartlinewellness.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heartlinewellness.com/wp-content/themes/chateau-2.0/css/print.css","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"ip":{"addr":"23.235.223.233","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heartlinewellness.com/","date":"2026-09-03T19:16:54.278Z","timestamp":1788463014278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.heartlinewellness.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 13:12:06 GMT","end":"Mon, 19 Oct 2026 13:12:05 GMT"},"fingerprint":{"sha1":"5C:22:EA:9A:4F:E4:06:20:1A:7D:2C:C2:D7:77:0B:1D:F6:C1:45:DB","sha256":"16:F8:41:37:EE:81:78:BC:D3:EF:D2:B2:47:FB:79:C4:25:B7:25:17:5B:83:D5:AF:5B:7A:5F:CF:D0:8A:4B:24"}}},"request":{"raw":"GET /wp-content/themes/chateau-2.0/css/print.css HTTP/1.1\r\nHost: heartlinewellness.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heartlinewellness.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 21 Mar 2012 22:13:07 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1043\r\ncontent-type: text/css\r\ndate: Thu, 03 Sep 2026 19:16:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1043,"size_decoded":1245,"mime_type":"text/css","magic":"ASCII text","md5":"ae8d88530af6d2973e9cbeed647e8f59","sha1":"ac94a6d1709a26297fa121ea2185af2256102153","sha256":"4917657e2e4bdadec8336eb15bcf79409e4b216a3ecfaed1653192a153fd62b6","sha512":"ec1f17b8c9ef8fe0ee03056e1c744f69a15af5e6363bb6046d0ba1fe2f6650d1eddcf59e88e3288ae8ed686c548c42a206bb334a96a17b20e3abd56b8aa64a40","ssdeep":"","tlshash":"6f111223e612110b135b8e17be197955b8484c57c0234534bda8ace2de8e3de5b7137d","first_seen":"2026-02-15T17:14:43.968265Z","last_seen":"2026-09-03T19:17:24.929404Z","times_seen":5,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"heartlinewellness.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heartlinewellness.com/","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"ip":{"addr":"23.235.223.233","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-03T19:16:52.586Z","timestamp":1788463012586,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.heartlinewellness.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 13:12:06 GMT","end":"Mon, 19 Oct 2026 13:12:05 GMT"},"fingerprint":{"sha1":"5C:22:EA:9A:4F:E4:06:20:1A:7D:2C:C2:D7:77:0B:1D:F6:C1:45:DB","sha256":"16:F8:41:37:EE:81:78:BC:D3:EF:D2:B2:47:FB:79:C4:25:B7:25:17:5B:83:D5:AF:5B:7A:5F:CF:D0:8A:4B:24"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: heartlinewellness.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-pingback: https://heartlinewellness.com/xmlrpc.php\r\nlink: \u003chttps://heartlinewellness.com/index.php?rest_route=/\u003e; rel=\"https://api.w.org/\", \u003chttps://heartlinewellness.com/\u003e; rel=shortlink\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 03 Sep 2026 19:16:53 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress:4.9.26","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":13754,"size_decoded":14073,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1746)","md5":"0f03f1bb07d0c9f4f524bac02f496ed3","sha1":"7106edbe7f68cb12e5246524af83c37bcd0db607","sha256":"b5a6f758ab295d2a07ae09d56b08946452e2634757e3d93cb46820f84b247fc1","sha512":"da1e53151d6204ca172ab679d3b6efb56e52b6f73ba9b9f45d2928f6df7469038f9b80f337891a7ef3f5906a884a16acac4834f96d9a9ff4bfbaa13c60189a81","ssdeep":"192:WHddmtHs01kdvSNfuhoQc3vTIrebBmn0imcvmAxNoM+MA8r/l0:82MkduhoQc37YLmYNnJAM0","tlshash":"1652d8b7ca19990a113a4d01f096350cd637551f82064ba2fbfe4b7b3381ef7992ab5c","first_seen":"2026-09-03T18:45:30.945211Z","last_seen":"2026-09-03T19:17:24.930082Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1235,"timings":{"blocked":-1,"dns":206,"connect":159,"send":0,"wait":548,"receive":0,"ssl":321},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"heartlinewellness.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heartlinewellness.com/wp-content/themes/chateau-2.0/style.css","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"ip":{"addr":"23.235.223.233","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heartlinewellness.com/","date":"2026-09-03T19:16:54.045Z","timestamp":1788463014045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.heartlinewellness.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 13:12:06 GMT","end":"Mon, 19 Oct 2026 13:12:05 GMT"},"fingerprint":{"sha1":"5C:22:EA:9A:4F:E4:06:20:1A:7D:2C:C2:D7:77:0B:1D:F6:C1:45:DB","sha256":"16:F8:41:37:EE:81:78:BC:D3:EF:D2:B2:47:FB:79:C4:25:B7:25:17:5B:83:D5:AF:5B:7A:5F:CF:D0:8A:4B:24"}}},"request":{"raw":"GET /wp-content/themes/chateau-2.0/style.css HTTP/1.1\r\nHost: heartlinewellness.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heartlinewellness.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 21 Mar 2012 22:32:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23936\r\ncontent-type: text/css\r\ndate: Thu, 03 Sep 2026 19:16:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":23936,"size_decoded":24139,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"a8c1efe1e75da22300cc461682415374","sha1":"73788f8dc96e17d8bbbbc6ee11d4b79beeed84a7","sha256":"2a98b53cd0a91ed5140be4dbf3f7580d57f655e2d221cc82b0c57f12df9ccfe9","sha512":"4cc2fd842a50c442e5ccf1f4e2f108e7222b5f76fa8911e297fd1fa81d2d1a2aa0c48bf22ef79dcd92d395a6c894a1538de75005a34a1f89719cfa2376d8bdd5","ssdeep":"384:Fj/UeqAA4io+z1nvJWo5Vdig1jn/0KSelplNAJa89Y7PNNsnxP8pHwA:F7UetA49+5nBWoTdig9n/7SelplNAJVs","tlshash":"c7b22025bf5f210ad21bc41bb931ae9fde2ed175c01226f479d46914c8ce6a6032dbce","first_seen":"2026-06-23T11:36:25.491514Z","last_seen":"2026-09-03T19:17:24.930716Z","times_seen":3,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"heartlinewellness.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heartlinewellness.com/wp-includes/js/wp-emoji-release.min.js?ver=4.9.26","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"ip":{"addr":"23.235.223.233","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heartlinewellness.com/","date":"2026-09-03T19:16:54.317Z","timestamp":1788463014317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.heartlinewellness.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 13:12:06 GMT","end":"Mon, 19 Oct 2026 13:12:05 GMT"},"fingerprint":{"sha1":"5C:22:EA:9A:4F:E4:06:20:1A:7D:2C:C2:D7:77:0B:1D:F6:C1:45:DB","sha256":"16:F8:41:37:EE:81:78:BC:D3:EF:D2:B2:47:FB:79:C4:25:B7:25:17:5B:83:D5:AF:5B:7A:5F:CF:D0:8A:4B:24"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.26 HTTP/1.1\r\nHost: heartlinewellness.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heartlinewellness.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 15 Apr 2021 21:18:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11943\r\ncontent-type: text/javascript\r\ndate: Thu, 03 Sep 2026 19:16:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11943,"size_decoded":12153,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9063)","md5":"fe0575b66568074463f12485d90f6d4c","sha1":"aeedd9ab3b7874e63f647042963cb1301a38b391","sha256":"647a6b36f3fd1f21bae171270111096b4613c23a47e6621628a51bae9c82b0b7","sha512":"0d209cbc9550cfcf49ca7ca5a1243e1578c0a42f9fb28c1fa8d353cea26f24eed282547f47fe858126e1ba9a4aa4d8ddbd2cbdef9db5a45f24cfbfd6383bff9e","ssdeep":"192:WuKiKqdccoXJW+TJr3J//bEvAbWXXR6AooHyrOUVsbEJEoesM0m3dJXWP/2//:0qlkJW+TJr3J//bEI+XgA5UCOeffJmW3","tlshash":"8032229f732b5f9b743e36db8e96cf4d95d949932580e038cafef68129e005983b4850","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-09-03T23:07:07.50592Z","times_seen":7203,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"heartlinewellness.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heartlinewellness.com/wp-content/themes/chateau-2.0/images/iphone.png","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"ip":{"addr":"23.235.223.233","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heartlinewellness.com/","date":"2026-09-03T19:16:54.599Z","timestamp":1788463014599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.heartlinewellness.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 13:12:06 GMT","end":"Mon, 19 Oct 2026 13:12:05 GMT"},"fingerprint":{"sha1":"5C:22:EA:9A:4F:E4:06:20:1A:7D:2C:C2:D7:77:0B:1D:F6:C1:45:DB","sha256":"16:F8:41:37:EE:81:78:BC:D3:EF:D2:B2:47:FB:79:C4:25:B7:25:17:5B:83:D5:AF:5B:7A:5F:CF:D0:8A:4B:24"}}},"request":{"raw":"GET /wp-content/themes/chateau-2.0/images/iphone.png HTTP/1.1\r\nHost: heartlinewellness.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heartlinewellness.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 21 Mar 2012 22:13:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3278\r\ncontent-type: image/png\r\ndate: Thu, 03 Sep 2026 19:16:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3278,"size_decoded":3481,"mime_type":"image/png","magic":"PNG image data, 57 x 57, 8-bit/color RGBA, non-interlaced","md5":"1f1b59ac47b338e67496ac2922eb00d4","sha1":"fc87a43565261fcc9bbe7183a032fbf3674168d1","sha256":"6efdf43731dc30dd0f0a29738340710acd5273dbc8f43c588aa1d8d74f7b1730","sha512":"7eea4db4bd1ad00728a584e31a174a5552d84f728e4c73372969b5e1e5ae2d4e5366b4375dfade3ca272fab589c3eff71e38ad325e3c5e949e5786ba515d79d2","ssdeep":"","tlshash":"57616c5cda80b8d9dc114cbf1859426f74e4290edae21f57880365afaabb21c14163e7","first_seen":"2026-02-15T17:14:43.943536Z","last_seen":"2026-09-03T19:17:24.932008Z","times_seen":5,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"heartlinewellness.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heartlinewellness.com/wp-content/themes/chateau-2.0/images/favicon.ico","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"ip":{"addr":"23.235.223.233","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heartlinewellness.com/","date":"2026-09-03T19:16:54.600Z","timestamp":1788463014600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.heartlinewellness.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 13:12:06 GMT","end":"Mon, 19 Oct 2026 13:12:05 GMT"},"fingerprint":{"sha1":"5C:22:EA:9A:4F:E4:06:20:1A:7D:2C:C2:D7:77:0B:1D:F6:C1:45:DB","sha256":"16:F8:41:37:EE:81:78:BC:D3:EF:D2:B2:47:FB:79:C4:25:B7:25:17:5B:83:D5:AF:5B:7A:5F:CF:D0:8A:4B:24"}}},"request":{"raw":"GET /wp-content/themes/chateau-2.0/images/favicon.ico HTTP/1.1\r\nHost: heartlinewellness.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heartlinewellness.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 21 Mar 2012 22:13:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1406\r\ncontent-type: image/x-icon\r\ndate: Thu, 03 Sep 2026 19:16:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1406,"size_decoded":1612,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16","md5":"6955259f91897abd8c92906d174e352a","sha1":"117a0ddf8f0b9b953bc0e339553174ee05facbb9","sha256":"e19431ea0aa7a5ab406cb00a14b44e4bf5be816e620fd2850741f41a29e8772b","sha512":"03cfb8298a39b5cc1f289376486cb244043d9511672853ab2920fd093ad2a6ce79c44208e53b74d88fe0a116bb716d8b7ea0d2e66a8289aa0d042fea7f794163","ssdeep":"","tlshash":"7c21e9067f849527fd4822b03ac719679318e2eed0f3179b5e06a740f502add0c30732","first_seen":"2026-02-15T17:14:43.976869Z","last_seen":"2026-09-03T19:17:24.935531Z","times_seen":4,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"heartlinewellness.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heartlinewellness.com/wp-includes/js/comment-reply.min.js?ver=4.9.26","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"ip":{"addr":"23.235.223.233","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heartlinewellness.com/","date":"2026-09-03T19:16:54.254Z","timestamp":1788463014254,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.heartlinewellness.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 13:12:06 GMT","end":"Mon, 19 Oct 2026 13:12:05 GMT"},"fingerprint":{"sha1":"5C:22:EA:9A:4F:E4:06:20:1A:7D:2C:C2:D7:77:0B:1D:F6:C1:45:DB","sha256":"16:F8:41:37:EE:81:78:BC:D3:EF:D2:B2:47:FB:79:C4:25:B7:25:17:5B:83:D5:AF:5B:7A:5F:CF:D0:8A:4B:24"}}},"request":{"raw":"GET /wp-includes/js/comment-reply.min.js?ver=4.9.26 HTTP/1.1\r\nHost: heartlinewellness.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heartlinewellness.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 15 Apr 2021 21:18:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1076\r\ncontent-type: text/javascript\r\ndate: Thu, 03 Sep 2026 19:16:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1076,"size_decoded":1285,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1076), with no line terminators","md5":"9ef21a469fc37e845d6303fcfea70897","sha1":"a86ec94ec7bee9227bcdf8d6374cabe82ae43e49","sha256":"6b2e2d56e7b0e80d919bc65dd94f8cd95e57ad9298fc4fecc005301ea8339c9f","sha512":"3cb53bb9f6d50c5c01b499619c15947c7b529b52d847afd40b891908cb08d3c1b33cbe0e229b617accda88258b335b240d09e4194cf270050b817ffedec23dc0","ssdeep":"","tlshash":"21111fb431c96c726382d12c17be872a74b1131c7d0942a5c02a64b57264ed75116fed","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-09-04T11:27:56.915042Z","times_seen":3230,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"heartlinewellness.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heartlinewellness.com/wp-includes/js/wp-embed.min.js?ver=4.9.26","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"ip":{"addr":"23.235.223.233","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heartlinewellness.com/","date":"2026-09-03T19:16:54.256Z","timestamp":1788463014256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.heartlinewellness.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 13:12:06 GMT","end":"Mon, 19 Oct 2026 13:12:05 GMT"},"fingerprint":{"sha1":"5C:22:EA:9A:4F:E4:06:20:1A:7D:2C:C2:D7:77:0B:1D:F6:C1:45:DB","sha256":"16:F8:41:37:EE:81:78:BC:D3:EF:D2:B2:47:FB:79:C4:25:B7:25:17:5B:83:D5:AF:5B:7A:5F:CF:D0:8A:4B:24"}}},"request":{"raw":"GET /wp-includes/js/wp-embed.min.js?ver=4.9.26 HTTP/1.1\r\nHost: heartlinewellness.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heartlinewellness.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 17 May 2023 03:23:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1443\r\ncontent-type: text/javascript\r\ndate: Thu, 03 Sep 2026 19:16:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1443,"size_decoded":1652,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1443), with no line terminators","md5":"43928880ff5ebadcd513755b011732cd","sha1":"d0fdb17db490123ed700c2caa5d2d764794cb6d5","sha256":"37c5f58f12814dd0ecc28f15b7765c6bcd31a9479d330b4ef896e140bf89dc38","sha512":"ba9ec90a842c0aad802294c3fe144c0ed737e51586ed19dc15dcf518dd0c9790e6ba5a1a8bc9e8a09d48cac3941df65c4d1d77b3b79d76a6cfac9b306c2da710","ssdeep":"","tlshash":"4d21526a3239d43e54e715d3bc8435cad2b21be9a85200d14a798848f5a8f93886afe1","first_seen":"2023-05-16T22:20:04Z","last_seen":"2026-09-04T05:14:33.067141Z","times_seen":15936,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"heartlinewellness.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heartlinewellness.com/wp-content/uploads/2011/11/cropped-wellnessbanner_11_01_2011.jpg","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"ip":{"addr":"23.235.223.233","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heartlinewellness.com/","date":"2026-09-03T19:16:54.260Z","timestamp":1788463014260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.heartlinewellness.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 13:12:06 GMT","end":"Mon, 19 Oct 2026 13:12:05 GMT"},"fingerprint":{"sha1":"5C:22:EA:9A:4F:E4:06:20:1A:7D:2C:C2:D7:77:0B:1D:F6:C1:45:DB","sha256":"16:F8:41:37:EE:81:78:BC:D3:EF:D2:B2:47:FB:79:C4:25:B7:25:17:5B:83:D5:AF:5B:7A:5F:CF:D0:8A:4B:24"}}},"request":{"raw":"GET /wp-content/uploads/2011/11/cropped-wellnessbanner_11_01_2011.jpg HTTP/1.1\r\nHost: heartlinewellness.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heartlinewellness.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 01 Nov 2011 18:38:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 66857\r\ncontent-type: image/jpeg\r\ndate: Thu, 03 Sep 2026 19:16:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":66857,"size_decoded":67062,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 960x260, components 3","md5":"f1fdc0491d1d27fb2fb69dd64a3df0c1","sha1":"ba4b52b66da2ea94712816c389ca2ee5a4d5b193","sha256":"cfb37c3727e74a53ddc0e80d3574e9440099095f2d41222aba11249b495f0786","sha512":"f56c3c0f45527fd62b44af53a9a0ab3d8614f5373c3d7032298a544f7c9afe2354e1efa61bb1462183f0fa390c77cbc0ab096ab1236eb27ab142a5b572ce4850","ssdeep":"1536:JCfWDH5d0qdDZVW2bZK90BRBnUrH+hLshk9nz7AaG:FDZdf2xy9Uj+5shk9nz/G","tlshash":"6163f213ea65a1537d0c506a3db86cbcf6f581357c00c05fb6a7ad3b87996a08b924fc","first_seen":"2026-06-23T11:36:25.467868Z","last_seen":"2026-09-03T19:17:24.938438Z","times_seen":3,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"heartlinewellness.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heartlinewellness.com/wp-content/uploads/2020/10/NMSafeCertified_Logo_RGB-1-300x171.jpg","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"ip":{"addr":"23.235.223.233","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://heartlinewellness.com/","date":"2026-09-03T19:16:54.262Z","timestamp":1788463014262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.heartlinewellness.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 13:12:06 GMT","end":"Mon, 19 Oct 2026 13:12:05 GMT"},"fingerprint":{"sha1":"5C:22:EA:9A:4F:E4:06:20:1A:7D:2C:C2:D7:77:0B:1D:F6:C1:45:DB","sha256":"16:F8:41:37:EE:81:78:BC:D3:EF:D2:B2:47:FB:79:C4:25:B7:25:17:5B:83:D5:AF:5B:7A:5F:CF:D0:8A:4B:24"}}},"request":{"raw":"GET /wp-content/uploads/2020/10/NMSafeCertified_Logo_RGB-1-300x171.jpg HTTP/1.1\r\nHost: heartlinewellness.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heartlinewellness.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 22 Oct 2020 22:35:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10435\r\ncontent-type: image/jpeg\r\ndate: Thu, 03 Sep 2026 19:16:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":10435,"size_decoded":10640,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x171, components 3","md5":"f0b92981cab4587df27cb07e642ab1cf","sha1":"787ba973841aec4b70884cd15c4d13a439877cd5","sha256":"bf177fe639b989e7945e40cad66c8b40efc118addfab52a0ae4c560581dd3e34","sha512":"0f1641bab57dd52ec4f6f693dd4aa0d1318aed96935ea3988d5dd26faa99775dfa56eb9451f6ce7950efaf932c34eebd1beae546fd148d32c0d8e999b7cbfc0b","ssdeep":"192:uP9vIAGa83tMfe3ReBoJZsc4wMWk4Xp48UvixX/JLVowDb8WH6pCU:K9w/D3WSanw9/tX/J5ow8Wg1","tlshash":"67229e579ad2c2d4ee3e0ebcac979a5c569dfd26b5c27b0b8072e80370728d84c4e548","first_seen":"2026-06-23T11:36:25.47357Z","last_seen":"2026-09-03T19:17:24.939018Z","times_seen":3,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"heartlinewellness.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heartlinewellness.com/wp-content/uploads/2011/07/stonepath-225x300.jpg","fqdn":"heartlinewellness.com","domain":"heartlinewellness.com","tld":"com"},"ip":{"addr":"23.235.223.233","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://heartlinewellness.com/","date":"2026-09-03T19:16:54.264Z","timestamp":1788463014264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.heartlinewellness.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 13:12:06 GMT","end":"Mon, 19 Oct 2026 13:12:05 GMT"},"fingerprint":{"sha1":"5C:22:EA:9A:4F:E4:06:20:1A:7D:2C:C2:D7:77:0B:1D:F6:C1:45:DB","sha256":"16:F8:41:37:EE:81:78:BC:D3:EF:D2:B2:47:FB:79:C4:25:B7:25:17:5B:83:D5:AF:5B:7A:5F:CF:D0:8A:4B:24"}}},"request":{"raw":"GET /wp-content/uploads/2011/07/stonepath-225x300.jpg HTTP/1.1\r\nHost: heartlinewellness.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heartlinewellness.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 19 Sep 2011 21:48:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30445\r\ncontent-type: image/jpeg\r\ndate: Thu, 03 Sep 2026 19:16:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":30445,"size_decoded":30650,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 225x300, components 3","md5":"d128e24d1023e784a372cec66aa13587","sha1":"74b2e1384cefab1487dc0739467f87cabb15f75b","sha256":"6ce9afdd67ea23a040acf735b82e06c849b22322bfbd7b69f7e6cc6979f64c52","sha512":"c67896edff844c3e424a07d3b36821aa7adb5fd03c1d3b375b14cbcc383833fa8608c48299801fd57a19e3c91feacab243f08ba780905b3967d038ac3c492114","ssdeep":"768:5hCgbdgn99m6XaMrIQIO27y38zn7Bkv5x5N:5hBdM99m0aMrXA7I8z7yV","tlshash":"e8d2f1178225bae77bb3852511a0bc6d02cc39e5ede051f312d90533f1acacabb4419e","first_seen":"2026-06-23T11:36:25.469039Z","last_seen":"2026-09-03T19:17:24.93968Z","times_seen":3,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"heartlinewellness.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"heartlinewellness.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}