{"report_id":"f7e472f0-08d2-4766-a31e-f31ce7086086","version":6,"status":"done","tags":[],"date":"2026-01-30T08:57:20Z","url":{"schema":"https","addr":"www.www1.co.com/","fqdn":"www.www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"172.67.184.23","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www1.co.com/","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"title":"FB88 Atwint - Nhà Cái Giải Trí Đỉnh Cao, Thắng Lớn Mỗi Ngày!","dom":{"size":172760,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15783)","md5":"78a32ccfa57d3d89b7c953994f47087d","sha1":"84e40a3dd0314b9499c4627b033cd528f0668993","sha256":"b30812dab067b36f412be59a050ba710dc0a731e544631273b15c346e4190067","sha512":"878a1d6319dfad275c69e6ba5a29de71a28861dceee5b3a4cf9ede2a2338e52b0cb1196a4933a040285c54ed4502fa8e531ca7d87d6857cb604902c239131ab6","ssdeep":"3072:Uit4S7H4E8cqmWRvNpPPHLbdEs+m6N1fCBfHfTAfBAfrT2:RmS7YE8cqmWRvNpPPHLbdEs+mefSfO","tlshash":"b0f3d962b28521375a2785c89159776da6aef249d6434ec0b6fc42bccfd9ef2343270c","dom_hash":"domhash3a60a91a6ae2bbd62aa8645c0e1015b1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.www1.co.com/","fqdn":"www.www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"172.67.184.23","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-06T08:57:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":10}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.www1.co.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":35,"request_count":7,"received_data":343232,"sent_data":4943,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"nhapma.com","ip":{"addr":"104.21.24.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-25","domain_rank":0,"first_seen":"2026-01-18T09:50:24.628002Z","last_seen":"2026-01-18T09:50:24.628002Z","alert_count":0,"request_count":2,"received_data":12575,"sent_data":879,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-25T22:14:35.458366Z","alert_count":0,"request_count":1,"received_data":24499,"sent_data":561,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sqlive.io","ip":{"addr":"172.67.207.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-22","domain_rank":0,"first_seen":"2025-10-09T20:03:41.575838Z","last_seen":"2026-01-20T05:16:46.407511Z","alert_count":0,"request_count":1,"received_data":11343,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"betweeneastandwest.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-09","domain_rank":4857048,"first_seen":"2026-01-20T05:16:45.974502Z","last_seen":"2026-01-20T05:16:45.974502Z","alert_count":0,"request_count":1,"received_data":11336,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-01-25T22:40:03.969478Z","alert_count":0,"request_count":6,"received_data":477857,"sent_data":4046,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www1.co.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-20T05:16:45.971438Z","last_seen":"2026-01-20T05:16:45.971438Z","alert_count":265,"request_count":53,"received_data":1612286,"sent_data":42303,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Web Font Loader","description":"WebFont Loader is a versatile JavaScript library that provides enhanced control and flexibility in managing web fonts.","website":"https://github.com/typekit/webfontloader","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":1,"received_data":3277,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.www1.co.com/","fqdn":"www.www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8a8c1608f0a2326db83e4ae66efa7045","sha1":"1fbfe8c1947c33cda21c26bf530daa94c766ba46","sha256":"d5ec47492d0b64b1a14e862acb2171fe51dc86455b7a55de2afb9bb0aee4e09d","sha512":"88cec5e85c8eb7200197d29def042120d282ac78f574f5cc67d0bcc0cf428fd2deeb42f5e85b0160ca46fb3ea3a53e39245290e8de825f6c03880980c856a0c9","ssdeep":"3:N/BKL1XmTRd:eL14d","tlshash":"245504d1544430740c51cc40d150371dd105540054374403707d45d51f34040005c550","size":1337359,"data":"","first_seen":"2026-01-30T08:57:31.205692Z","last_seen":"2026-01-30T08:57:31.205692Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d58e83e1a46e0262a0bd906c3f6b496b","sha1":"ed27e735ab299a4efba8ef5c2b0ee4c274ee7312","sha256":"4ed860c74d930940807d8da52a129c81276adac290d9e3b1d1f09ce5c255bc2b","sha512":"f2a8011d3e58b86a1d039dfd5876a77be111dc6761ca92df4451a68241404471ac92b195d417472c08bd1f1454badf196a2c9acbb3667e9116ff4c5f6d469f41","ssdeep":"3072:nVdMMckNiLu4FSoOgKBLrpIwXT+qgEoHe5BZVuu67I92yQQQcbGD1fJcOY:VgkNiq4FSoOgKBLiwXa9HMuu67tcWfG","tlshash":"9c040a8c7acd356e63363db4007b35db56ba6c583410484ee2d1b9e4bce4b183a979ec","size":188966,"data":"","first_seen":"2026-01-30T08:57:31.206551Z","last_seen":"2026-01-30T08:57:31.206551Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8f1b07c07a116a50013065a7f676ed2d","sha1":"18375dd59f7100744ba95a4b0e4316d41f6def61","sha256":"e798d49741fe25c3c6bc97799c5b117b8b38ce563ef304993f8471d97070aa69","sha512":"1d4fe33a1ce9c2c779b4c291cfdbc6d118f95147117637e3ae4d8f5c04261e3106fda898447dc9fc63297b65424bdf7430b476262559dd10cd7580d5260f7c94","ssdeep":"3:N/BKL1XmTRJ:eL14J","tlshash":"df5504d1544430740c51dd01d150171dd105440054374403f05d17d517300400014540","size":1337359,"data":"","first_seen":"2026-01-30T08:57:31.208246Z","last_seen":"2026-01-30T08:57:31.208246Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.www1.co.com/","fqdn":"www.www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"18244f894d0e214b26e0684d3f7fe9d0","sha1":"c31c30917176347a7cca842f9958823d539707f0","sha256":"bd6704ffd4689bd99dbdb6a44676347a40f533df1f9a9fef39c941015ef55ba5","sha512":"9f6dc957d48daf457f2fa0b40612f352f3aaf1d1a55b86ea96a5d066eef6fa66a333a3b0dc47d1a5f7fe849d0b73b85e6bd7fcb5b38d479db27eaf06b9636c8e","ssdeep":"3:N/BKL1XmTWX:eL1v","tlshash":"5f5504d15c4430740c51cc40d550371dd005440030374407707d05d417300c40015540","size":1337359,"data":"","first_seen":"2026-01-30T08:57:31.209217Z","last_seen":"2026-01-30T08:57:31.209217Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/litespeed/js/9eaa67db7ae97f778af04d4f68c28abe.js?ver=9732f","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2747b812d7cb99aa87e7a7aaf83c24a9","sha1":"67bd4986c62ad7301bd2d881887825d5c4115f11","sha256":"fc54d34d140e785ec5673b98b0e1573a5bc541fcf7203116f3b0e9db6c8b2055","sha512":"013cf69ace69e73c88c456ef566fe19144a8ee5346ebd1f30c4a13bb0508578067262d62754f12ed5b2d8a7745a63aaa75e5a784829c8d133c8eef0a2bf4e839","ssdeep":"","tlshash":"8a219727e3343072a4259d7e2bfbbb01a0e21203d442c5f186245c9ec9785a32afa5ed","size":1127,"data":"","first_seen":"2025-10-03T23:56:19.489986Z","last_seen":"2026-04-04T07:03:14.004337Z","times_seen":270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/litespeed/js/2a9d4faa2cc9bf554644e82c339d9493.js?ver=618a7","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2553c8b8160065ca55b92b9478f3f399","sha1":"116d391fd6c6dc674f5f3a571146b005580ddf7f","sha256":"cf85eb4ba80822af46334e10183d9de1502f518b50019f07c86b55794c1504fb","sha512":"e6de3d964151a50eac5a6c7ef7677626d2e0144da9e5e2ba2843d288081ed915223c09cd1caecd0eb4b3470f1d0bad9900a5feb3221534393da7fe61dae40aaa","ssdeep":"","tlshash":"7131308e7b5260440382c260e13e88ad773b687b700c0e897b30fcd93ee5e2c56519ad","size":1500,"data":"","first_seen":"2023-03-11T09:39:20Z","last_seen":"2026-04-04T07:03:14.002303Z","times_seen":2462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/litespeed/js/429c201a60779d872a375914b02afc70.js?ver=e7bec","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5b6af2a294ba85ae750e175245a9c66","sha1":"d4ae983d0aa33e4c6dbc4d15dcc04e6ceea97f9b","sha256":"9762b8e9de923d542c466ec97d30c34ed36ae912b9ab014523b2b294992eff2a","sha512":"15c9f6ec70e4df7762e00431c9bf7705f6990d5de66101630c9381a855024eb4d565c241666512adb531ed6d9a2ebcf5320f89f6ce17b7b859b6935822dae1b6","ssdeep":"","tlshash":"c0b09b3d7c74657e056751555077990591337d41d6014c14635d32505c3d274046750d","size":121,"data":"","first_seen":"2025-06-23T02:22:53.051134Z","last_seen":"2026-04-04T07:03:14.000441Z","times_seen":289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.www1.co.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9c5fc230d966b503","fqdn":"www.www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0ac4e891e47249c95c53ce49c85d9f2","sha1":"4afcb077605bf09681de6bf4e7d8d7ec2be731a6","sha256":"fd314e0fc48801a599fa20314870f7805b82e2ac62fa33b47330c019d4869cf8","sha512":"7a6bcfabef39276227850ab2a6f1899a8c822de7a8bb2b1d7e5c384e98bdba158b321e20187b5c9f7760ce2624bf9b7221c9ecfddc2410aab299a5deacec5c21","ssdeep":"1536:UWFnfFZ6IklTx/wdXnlEt0g08wW5TiQ0QQsJk1RpY:UWFd4DY9nif04+dRpY","tlshash":"11b3e69d38da358d233269a4092b75dba2bf6c5434148d0ef293d9d57cd0b0876a3ef8","size":117928,"data":"","first_seen":"2026-01-30T08:57:31.171981Z","last_seen":"2026-01-30T08:57:31.171981Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/d251aa49a8a3/api.js?onload=cAdz2\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a7db0e0bae22d940e720d06abf548f7","sha1":"e68beaeb9b7b3aa74a922a3df2d7294811b62e72","sha256":"1d8e9927430ea86701daa3074746758677a012f2ee4196ce60438b4a526ac10f","sha512":"d7106b476dc2ca5f6f5fcf79fe9e69d72d27b12decbac13cf20bbec28fd7c5e72a920802eea9b15e41803252471548290533da353eec5e66ce9211854bb72083","ssdeep":"768:/Cofu2DMaHL9VAQepxn2tSv+1odY+0rOF8msKULg49Tr7+CuAUyG13PE0okbsO10:Q2gaHL9VAQepFbZdYlrNRg4t","tlshash":"37332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","size":50453,"data":"","first_seen":"2026-01-15T11:24:19.542226Z","last_seen":"2026-02-12T13:18:09.210194Z","times_seen":38367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8d572c82b8eacc56b5a2dca0015da2b5","sha1":"8f77c1ec5765774a760faee857ba1463e785f9bf","sha256":"258d6b8940606fe0b82f5499648913ba07d3adf05053d428a3dfe43194784c48","sha512":"8b297c5c96416f13387a13d2dcac00b6ad1672a4315cc706e496ad9ea482a6df5bf3fd8a395b8a333e0c9bb87f23f83341505ae90f1770a08ce0fa61c65a02f5","ssdeep":"3:N/BKL1XmTW3n:eL1/n","tlshash":"e55504d5544431740c11cc00d550371dd005444014374403705d05d417300440015740","size":1337359,"data":"","first_seen":"2026-01-30T08:57:31.210223Z","last_seen":"2026-01-30T08:57:31.210223Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"33ff6022e88df59f8dfc9eb546435e9c","sha1":"7f2ad96c0a1276fbc858c652a6e2d0b3c9d4d3e4","sha256":"a1c845cab782ea7dec04543ec72e0b354cb8e9aae23acc02ee02b1832e3acd9a","sha512":"99820974c649620d8dfd487054edee4863ca41025de5a87fcd6fddfafbecb53668799fdde6f7b809112fec178b18f28a9ff8e190d298aff5a29c6795ad639c25","ssdeep":"","tlshash":"0c600000c0303003000f3000f00000033cc000f0cccc3003030c00f000c000c0cc000c","size":14,"data":"","first_seen":"2024-12-12T23:50:40.556614Z","last_seen":"2026-04-04T06:42:56.610845Z","times_seen":247962,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.www1.co.com/?__cf_chl_tk=XXFv2ZQN_3kaqudY.urr4LRYAqgU9N4N_WySclaLp2o-1769763412-1.0.1.1-CGsDebjnrOg6NWSfC5orzvP02xsaDxxsJA0uQbkU4b8","fqdn":"www.www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"5233246754082d42aac97a730fe11371","sha1":"6dc2981f2723f01fbaf1c2b43f26aad998e7769b","sha256":"07039196f356554367a3e6a79132bf503e3e1414c57b6252a8b95637ef34acfa","sha512":"3476280b4f57b35644f642a0cb69bf3b0d20b8805ed49e11fcb7f298c65fbbf3e031adc0c95513f51d69ba6b253e597861f1dccb7502a1aafda6c5b2b1ef8f83","ssdeep":"3:N/BKL1XmTTvc:eL16E","tlshash":"9f5504f3544431741c11cc00d150371fd40554003037c40370df05d417300c40014540","size":1337359,"data":"","first_seen":"2026-01-30T08:57:31.211895Z","last_seen":"2026-01-30T08:57:31.211895Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/plugins/litespeed-cache/assets/js/webfontloader.min.js","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"45943f1d780bd7d9db946bdc5ed14a5a","sha1":"41a42d3c32fe16108eb653ae903ae1fb86b7e5a8","sha256":"6f58202a14e2dcb4c672d6e9f0881ddc2b4e88225a97aadd940400a7377ee02d","sha512":"673c809a69dc340bd57d95d2fbf6a43354c141a7de33c4983309d8b4ba5182316a5c4b9872053f9d4badaab4924031a34f71f146d0fb00ef627c4f7aa8f65b62","ssdeep":"192:Y3YEHIcPziAZGmm62zVOr+rdmLdOSjTIghu3oHMBoateK3JELi/QFjOfDzry:YbocLiAZGmr2zUyhmPTIghu0MK/K32E8","tlshash":"0942a7597251b53d42a310b317af010666367b2e2c0184ad7a5de9e4ac70efa226ff7c","size":12098,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-04T05:29:33.884096Z","times_seen":5627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T06:45:53.422963Z","times_seen":684722,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/litespeed/js/4953b385e7f3d2ec7372e216a77a1bc9.js?ver=2195c","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbc93e722ea25342b7af79058155f827","sha1":"d256e82bb7f1b956684e6f0c87f998fecf90652e","sha256":"b692237ed6b670204fe4eb601ddc78fec3afef8cb34648c0ccea18ba28b1133a","sha512":"6a8971223f3831358031363b8bce0092520212714a3d9b425be109fbef7e51837d31383217b62131e5bd037e7af4d86c3155100ef569527b501c2ae3b8e7ef62","ssdeep":"384:71yd4Sk6FCT6IZ9bAstA3fVipSfUeGey4o+:70iSk2RIZ9MsmNqVU","tlshash":"3d62b644b2416772d3df60adc89b050ea9bbba186d05289c763bc9c98d74f0c70bfa75","size":14887,"data":"","first_seen":"2023-03-11T09:44:15Z","last_seen":"2026-04-04T07:03:13.987098Z","times_seen":1529,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f9ca5c770ef6a9de106f30e5a2ab50b","sha1":"15d7cd1585c2eeda01c9be5d2ac66cc68bc03973","sha256":"3d42c047ceddd260b1996c7f5473cf624d675d52ca462ffa13d1a671782ccc83","sha512":"5394ad71c6343b8e34e46d8f62119f60fa5f55f2d8deb0ebd7f81a421a9b909c7375d8e179546b1aafef1f6c6b8193aacc25ca6a82d4e36781e1bc120025e99a","ssdeep":"","tlshash":"0dc012e3304d810a8954b035431773c2fd725777418e280815e9a26ddded85d3731f42","size":193,"data":"","first_seen":"2025-08-26T05:42:28.837055Z","last_seen":"2026-03-28T09:17:50.048823Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.www1.co.com/?__cf_chl_tk=XXFv2ZQN_3kaqudY.urr4LRYAqgU9N4N_WySclaLp2o-1769763412-1.0.1.1-CGsDebjnrOg6NWSfC5orzvP02xsaDxxsJA0uQbkU4b8","fqdn":"www.www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"400a22bf5c33e2ec601a6da48f256d95","sha1":"777b5d750448c1f6288e62507da20a7b2368df2c","sha256":"4226ffcb8aabae7d38fa860b9a2053a4b61c255610e24437ca65b0f547871608","sha512":"884e434eca9b06786b3945725723442e99ed8c1c7b15a01a4ffda6de0ab86d1c852f29f8f251137305275d58236a3d24bf8f21242b8fa8b7689955f1a2206b81","ssdeep":"3:N/BKL1XmTTrn:eL16r","tlshash":"d85504f1554430740c11dc00d150171dd00554001037540370dd05d417304cc001c540","size":1337359,"data":"","first_seen":"2026-01-30T08:57:31.214263Z","last_seen":"2026-01-30T08:57:31.214263Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/litespeed/js/5625e4a0b8c0c6985d82c22c0597959d.js?ver=db863","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0f4a4261e4795d86591e152199d83fb","sha1":"ef2a5f9de6b5e7008fa3cae5acfd242ab00c2b20","sha256":"ce8b6333810332467a1c5d3d27667b72872a77a364aa236b603896426431345a","sha512":"d3f13b17018fa8ea516909d57eb9b2da40d03bcf8dd62f85472938e8502974a219b6cf89e9d698bf011359b9b33cab6794f61a8ec26403311af32b4e1b0a4095","ssdeep":"1536:wYrJqC5ZQ8kNSaNp6W9EtmoYsNqHMkSBed3tRO:7howWGX6sedm","tlshash":"af33e718725070fd01ff61a7f13fa72432376525b0064054b53e98fa2d6ad5e26a3fba","size":52859,"data":"","first_seen":"2024-08-19T17:38:18.533237Z","last_seen":"2026-04-04T03:25:05.533244Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"336b4b067dcb50351d5e2d7c92cf1631","sha1":"9709109f27eaad0c5a1e50facc142f8f197a11b6","sha256":"ef2f7f28db32250196ae2c8242611a7f7159c2a539dabd40b82071b1c07561c6","sha512":"43c83e5907dbc25a8620884fadba33a679e0668095a659e79e711c8b6d6331d778849aab0f19bef0131cfd5537e462f2ca238dc9134732ec6867ddd945ff5676","ssdeep":"","tlshash":"d3b012343c25b42d192b300c31df53643c3a4140fa016940d07e78441433f550b01f8c","size":102,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-04-04T06:39:31.030476Z","times_seen":34191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"914bab548f33f7ec10a3c5d86dbc9c24","sha1":"8f78ead9357a5456cbaeedb2aa80aa2c28cc85fb","sha256":"f28771fd3b2b50d556ca26043bdb00d54517ef3fec2056b221bb2082124db85d","sha512":"04e622aa5d227ba3d4c3d0ca9772cc04b6acf18a85216df7d7fae92cf876c95dca570794da5c87ab933238437ea94f601b61e368f8b540433835d6aeacd295e1","ssdeep":"3:N/BKL1XmTQ1n:eL1Xn","tlshash":"c15504d3744430740c11dc40d1d01f3dd005440010374407705d05d41733040001cd40","size":1337359,"data":"","first_seen":"2026-01-30T08:57:31.215847Z","last_seen":"2026-01-30T08:57:31.215847Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5c3d7408c4e3d21d10d0637a79877b30","sha1":"ddee529ca63bf86fea5365413fb6ab584ed733bd","sha256":"2f817d16d057a545c9996e5b8d9feb5d429c86da5cba89e4c1bae7d6728017eb","sha512":"8f442f06a74c7f826b06b282df58c8b790cc1e3f82898c415e42675bcfb0c43011a709cccb661a5ed214138dbe309d657150f8722ba194b5ef40d67d850e7a2e","ssdeep":"","tlshash":"92b0124426e22010c317f035884b8904f008034220980404a85993710f1002ac6795e8","size":87,"data":"","first_seen":"2025-06-17T09:55:37.825646Z","last_seen":"2026-04-03T16:29:00.606744Z","times_seen":4324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9bcd3bab990ff5b67acd7a8e4956aa42","sha1":"b938e37f2d28ee9afbc3b8c4eee566491631b4b9","sha256":"a4a160b460caba3461b0be91ba6cf587622dcdbb1e596d6add4cffda07a626b1","sha512":"3276fd11db4f681274d3861ecee6ee71f7500607c10efbd300d7e6a66f870cc3b562b08987490dc63d68184afbcdf405eb851dfce983a67bae7c353e583764ec","ssdeep":"","tlshash":"3031e22db2f2003419b7b8761baf63843a29e047a952c5043f0c87809ff1a4698977c8","size":1451,"data":"","first_seen":"2026-01-20T05:16:54.535566Z","last_seen":"2026-02-01T02:44:00.256523Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8f90e3bf018999d982990a69e01bf58","sha1":"dbe1c2289be0e32b5562ec106d7941d5ab78a250","sha256":"f64790bad7dbfb71281aad1091d80b5102935253b63a417a586ac65b482f67b6","sha512":"18301df84ce631c3349c15d6487248a688a5a2c79b2e1ee6cf857ac897f4f858bf0750ee03520bc10195f5f0d915bd03ffc7bd6a31d4dd75b6093ae0317aa0a9","ssdeep":"","tlshash":"2b90021270305498151b066994e89559f89a0515d4862005e2e0401d8207451650b14a","size":57,"data":"","first_seen":"2025-07-20T13:17:16.958068Z","last_seen":"2026-04-03T22:22:24.835237Z","times_seen":137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T06:46:11.711517Z","times_seen":291862,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.www1.co.com/?__cf_chl_rt_tk=XXFv2ZQN_3kaqudY.urr4LRYAqgU9N4N_WySclaLp2o-1769763412-1.0.1.1-CGsDebjnrOg6NWSfC5orzvP02xsaDxxsJA0uQbkU4b8","fqdn":"www.www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f47389d2f1abd47dbebeef3e2d3ae8a7","sha1":"dde5aa75f9a647e73d3e2d3fdda68898f850f72d","sha256":"30893b81b3c71cdbd5cf34b54fb52f8eef50b27d8a3f2498a28d2b89bd987fda","sha512":"3524a8ed2b83fe9d62a0708424707959d6cc8e89a918407da7c46540b5982fea9230792acffc47517cf5d009231375b00d5ec2ff5689bfb74ea6a3c926653318","ssdeep":"","tlshash":"56b0028869e5a404e21975a5495fd144f12cc802148a0515658885515f114294167868","size":94,"data":"","first_seen":"2024-12-12T23:50:40.522517Z","last_seen":"2026-04-04T06:42:56.591692Z","times_seen":245172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.www1.co.com/","fqdn":"www.www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bfb92e2ff8a402b17cb1aa731e69adc4","sha1":"bcddd554bb3a7bd86de83664478af5221fb3dee6","sha256":"78f1416b54682974e181d9adc470931cfdf0d1a8c0b3e1b2e8f48e3bbfafec69","sha512":"aea85b670579b84faa72ab6134a1ccf000162a25b87f40512f0200b15515006c70920cfd574996659efdcf05a4b8016dcf9a20847031283c42d86bb5971a84a1","ssdeep":"3:N/BKL1XmTQIT:eL1KT","tlshash":"4e5504d1d44430f40c53cc00d1501f1dd005440014374547705d05d41731040001c540","size":1337359,"data":"","first_seen":"2026-01-30T08:57:31.219312Z","last_seen":"2026-01-30T08:57:31.219312Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhapma.com/direct-vite-3.js?id=T8Aw7VcUww","fqdn":"nhapma.com","domain":"nhapma.com","tld":"com"},"ip":{"addr":"104.21.24.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e74f7e63fe90869f4392c84433f42ecf","sha1":"43212c53f9b1af19cfa23cb6684f4cc7c6ce83e2","sha256":"4715b562b4009972af55c9845d2696af5adc02df6d7bfc8d7d537844b7620612","sha512":"2ee2ae3c1cec4b956514e86575639a240606a13601473f0304345f453a46d7e103491b7c57af43d2c839f7caf347fbe2887bb951f3f7760ea661daa9649e655a","ssdeep":"96:+MXlrnT3dQgAMDn/F3Xuisr4096lAUM9nV8Mmvwr01oYBLaXsrfih1AsMBlAhb:+2lGiNFsePMFV8MLAoYB+Xsjf2","tlshash":"7022b7c2e75d6734904ad03df6a99b843976228e5680c5ccd6f545b6223cc8c709bbfb","size":10199,"data":"","first_seen":"2026-01-30T08:57:31.196566Z","last_seen":"2026-02-01T02:44:00.182986Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"650547378d322acf94064036ef7b8059","sha1":"7e775c2baa93ba293542391e853000015d832861","sha256":"1e75051144e66befd2c0c2ffe5eddc1a14a6c9c67fe665603c829fded5ad3338","sha512":"a091988a081a01e00655eb361b5c98b149478c9f13cc8b0eec40388c238f57f180a76c441b2b6b475fa146fa027a820c50e5c2dc5247fbd982da7d061311b4e4","ssdeep":"","tlshash":"f40184acbf94b15a076030f50faa35e88e94ec8c1001bd018111f0c4bd26f5ab06bf7e","size":819,"data":"","first_seen":"2026-01-30T08:27:20.977199Z","last_seen":"2026-01-30T09:29:24.879081Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.www1.co.com/","fqdn":"www.www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e97c90ba8a67e15abc7d78963c2f9102","sha1":"ace9472047df198907d0ce5f1c477cc911ceba42","sha256":"0cb8ad8e5f51c292ecbb9cd866131fc56f9e84de9ce1e04c867dd2e6f9942a17","sha512":"3d942dc8c12f95fbd65c6dd4abf12b4e9d44e432afb3489807c0fa384d40721cb2a79baef396c59e43eb80c55301c828b80d3abc2f192e0cf9ed19a9ff068978","ssdeep":"3:N/BKL1XmTRD:eL14D","tlshash":"f55504d15444307c0c11cc01d350171dd105440154374c03705d05f517300400014540","size":1337359,"data":"","first_seen":"2026-01-30T08:57:31.221005Z","last_seen":"2026-01-30T08:57:31.221005Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a76eb87c0ae0bc20a160872b2dda1f1d","sha1":"a8420790c5a445e741b24417d8fcb23f233ce425","sha256":"0b961a6b905927b5a582a2fafa3d999853b5de5488898b11a705b0b9a730afc0","sha512":"b3e1b219bffbebb3a8f445240471a09e45df74ae6295339801237460fc1ead5be2887d451d3c324221a26ef465991be5fc19a90c933d9df41ccd6bb45388629b","ssdeep":"3:N/BKL1XmTR1:eL141","tlshash":"a85504d1555430740c51cc10d150171dd10544005c374403705d05d537700c00014540","size":1337359,"data":"","first_seen":"2026-01-30T08:57:31.221971Z","last_seen":"2026-01-30T08:57:31.221971Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.www1.co.com/?__cf_chl_tk=XXFv2ZQN_3kaqudY.urr4LRYAqgU9N4N_WySclaLp2o-1769763412-1.0.1.1-CGsDebjnrOg6NWSfC5orzvP02xsaDxxsJA0uQbkU4b8","fqdn":"www.www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"cd840ccb8363d9e8b2ffe42e4c7ae6fe","sha1":"3265eb178b4b4c78e5a57948f5b1a69d65a7d600","sha256":"b27d6132e00efb31d8aa4c000220690062080224c9a6fe0b298c89ab8727b282","sha512":"b5f825d26010a0d043c5a6b0ed01e1b67d73fec09b90ca247dc35ea32fb90306250f58a6df38667a8afd9aad3ad0f453a32602bb640f5b65e26c850b9837f113","ssdeep":"3:N/BKL1XmTQH:eL19","tlshash":"d65504d15544307c0c11cc00d1503f1dd005441010374407705d45d437700c0001c5c0","size":1337359,"data":"","first_seen":"2026-01-30T08:57:31.222929Z","last_seen":"2026-01-30T08:57:31.222929Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"56f31faebaa154b4b305514fea71b46d","sha1":"379ccdd7814b27cf3bff511e2ef7bac836b76e7d","sha256":"7fc80565936f5889584c67b1886be3065d3fb301ef367ef0e112f5be6f07910b","sha512":"593a9afe1d926150c2de2028200b5248a1a0884bf780c276794e71da2f35963128fd873daf58ecb6641f9b0386fbc46c207160f34edb8b7c4d6608ce2f7007c9","ssdeep":"","tlshash":"9d211175732eb16c81c6c0cb8b24bff1d71a363624807600e6ee887a11d3dac32be112","size":1218,"data":"","first_seen":"2026-01-20T05:16:54.544471Z","last_seen":"2026-02-01T02:44:00.260981Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.www1.co.com/","fqdn":"www.www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"557b8aef5dff28381aed4cbc52882d8a","sha1":"91ba2ca8a12f92176ed8be3da9321f87f8180901","sha256":"e1f95b57604ba501c3083c20d57a6317f6804fe0dc6e0a4d9be058b81d32a74b","sha512":"7f19d1a4bd64cc77804cf8447c9b2980fdee5c283137f77d931e154a91409fb75f0bd597700ceff17a644fa0944c3afdfafbc658b0f06414a957d458dbae9e73","ssdeep":"96:RGPIEQuijaFrZdU1rKFuHNRima/i2uEcrRNwbk+T32Yzueh8VCmZ:FBxWErKM34RuD9NC37ydZ","tlshash":"8db16debdb9180736befab8dc4277777e360b12b0f1d40408a92aa16c257d47dc592d0","size":5306,"data":"","first_seen":"2026-01-30T08:57:31.22493Z","last_seen":"2026-01-30T08:57:31.22493Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ca897fb253cc8807c5aafc947eb02fb6","sha1":"25137d68712ada7d3ad424c80bc0d688a696f7bb","sha256":"57f9c536daa79c4d770534dbafbe2e7b2b2aa48b9eb2617b4e670b8a78a4a4ce","sha512":"187200763128b83b777932b28834f8a21adf5824c5b9f8635249168aaefcc2451885b26da07411ccd56a52146f9b8cc2524647ebf2df4c1474f80d219d893f64","ssdeep":"","tlshash":"d96000030c00cc300033000c0003003f30f00c3003cc300c033003f003c030c0000030","size":16,"data":"","first_seen":"2024-12-12T23:50:40.144885Z","last_seen":"2026-04-04T06:42:56.563336Z","times_seen":245628,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/litespeed/js/c8603c5f2b12843b83a145163c26f90b.js?ver=85712","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48542f784cfff02bc6dfcbd869519421","sha1":"f61e7190d31059db1e3140bfe815646462dd0d2d","sha256":"09a5a63084018aad19d3660e823ca758a19ebb1f543d68946609ebfb7d9df880","sha512":"1dd0fd6b938d15ba9e17a9b21d942dba38e7454f21983902ac540eb9c7ab83cd9eaab76149f3310c5a103081d6c02f8fe19f595eec564b1b0b89c0f8398d9123","ssdeep":"1536:0KJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQrP:BJebsNy1ikuGeBnR/TDQ9chHdN+uw","tlshash":"cbe3e789a221b67646e3169b93e4c211b3b50544b80ac4f470fd4c9f597e89c13feefa","size":154297,"data":"","first_seen":"2025-08-18T13:40:56.491907Z","last_seen":"2026-04-04T07:03:14.01907Z","times_seen":275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.www1.co.com/","fqdn":"www.www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"607b4f70ea3724f43f55033d85bf9300","sha1":"423691cb7c6aacd69787713af710e251fb0566a0","sha256":"44a98f61ceb56ed85c0fbbce992de01ab1ce8abc84b5507a767eea7ae8c89104","sha512":"26316811a4a98e272ecd9170f84313a202c52c82b8f212f668bee5e11d994fe1d1331798245e0b08a10aa7af56a3ba7820e5a8c4b8f8c27ec67964ce163fbc48","ssdeep":"3:N/BKL1XmTXQn:eL1+Q","tlshash":"4e5504d1754430744c11cc14f350173dd00544d010374403705d0dd437340400014d40","size":1337359,"data":"","first_seen":"2026-01-30T08:57:31.226377Z","last_seen":"2026-01-30T08:57:31.226377Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb78fac132e7cff1e4556b0ee5be04cf","sha1":"8c0633f511df47c21639be83c719ae0e1ea26555","sha256":"163c4d52fb653e1c2463e1a0e397faa297729ad6269b5205b915f3ed4b8b8d8b","sha512":"fd27890ccbdadd2ea409f4370f8154ea84d25cbf1d5a3e3ed4f492e601aa15516acda89b989ed980172e224f6841deeaad839d855ae6cb190ae13d0dae097316","ssdeep":"192:+ewsiGjcSvWjeUw8Xdwy55/hFGCx7PZN4dEtf:+0kjVnNbj/akpf","tlshash":"620242497602b53f393b7071d0af220b313970a7984b0861ea78fad97d789b91623d7d","size":8319,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-04T05:29:33.93712Z","times_seen":9179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.www1.co.com/","fqdn":"www.www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ff03fc8f0c3179fb4dcf4389f88a1c16","sha1":"05ff911d7ddf2d7c14b4316a87fd08f42c618f9f","sha256":"025229ec6bb50e915572750c5045d22c5fe16851fd077f1411f41b19aa1dfece","sha512":"4acb3551ec49556a2a64f4a47e480df29f611f67d0ef4b2474e90f7b86caed3dedb0b56eba12e577f1401d4d701c9a4f0898a06eee8f6d7dbe3b4b5283a854e8","ssdeep":"","tlshash":"4f60000000c000000000030cc00300003cc0003300fc0300c30c003000cf3cc0000000","size":14,"data":"","first_seen":"2024-12-12T23:50:40.182598Z","last_seen":"2026-04-04T06:42:56.616444Z","times_seen":246748,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T06:42:56.548201Z","times_seen":665787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.www1.co.com/?__cf_chl_tk=XXFv2ZQN_3kaqudY.urr4LRYAqgU9N4N_WySclaLp2o-1769763412-1.0.1.1-CGsDebjnrOg6NWSfC5orzvP02xsaDxxsJA0uQbkU4b8","fqdn":"www.www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"8e207d4cdeb3f534ec5f7c7013451112","sha1":"db8fb29eb2fcc6b710500690086ed1ab1f5dd6ed","sha256":"6fc92699e043fc62b14f4ce556b0ce2f0b00f7659b23d6e95a3ded039ccc789e","sha512":"486c0cb18db3c95809de27ef8961558a11029f8df1242c4e49c3c167238b17e6b682e85e76921a54770ccd251bddfc6a39dd97480dfd019dcfd9a304ff110e2f","ssdeep":"3:N/BKL1XmTSb:eL1/","tlshash":"a45504d15cc434740c15cc40d150171dd005440010374403705d15d41730040001c540","size":1337359,"data":"","first_seen":"2026-01-30T08:57:31.228582Z","last_seen":"2026-01-30T08:57:31.228582Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/litespeed/js/7df216ed932b3adc8bc6a686c071524a.js?ver=6fa4b","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2be45d7e3d39df2143a549e0c038fdc","sha1":"8f38ceed2911fda2b639355d96fce0e8d4ccd929","sha256":"86514c920787c25b232f7b805040267680382f14a47bbd071b7c6c70936c19cd","sha512":"fd85e3141c0cbf541b7615edc48197c7f5508f0528ab6c444a3a05db3eba40ad813c4c1b1da2b9d4e64f2671fc961938d6eb7f297eb7d2d8822dcd8aca685411","ssdeep":"","tlshash":"0fc0125c311c55521cb7027bc49294045b132a05e7478a468e0aa95c3f5829df3f361a","size":179,"data":"","first_seen":"2025-08-26T05:42:28.824263Z","last_seen":"2026-02-19T10:59:34.429384Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","size":39,"data":"","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-04-04T06:45:59.679756Z","times_seen":745885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"www.www1.co.com/favicon.ico","fqdn":"www.www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.www1.co.com/","date":"2026-01-30T08:56:52.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ndate: Fri, 30 Jan 2026 08:56:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=X%2FsXOalhT0r8Jk1FPkOZIR%2BA3z3LnB2Gfhmc0z00jYxOx1S%2BtLF2Q57BrlysRwuIkSdOMgw44m95BbU0Jt6YlxzJLCHVNEvD%2BwlITE%2FrLJRiaktM%2B%2BJmGgYG2YRjx17L1NE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9c5fc232c8e54e4c-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"9c5fc232c8e54e4c\", cfL4;desc=\"?proto=QUIC\u0026rtt=2364\u0026min_rtt=698\u0026rtt_var=2312\u0026sent=63\u0026recv=17\u0026lost=0\u0026retrans=0\u0026sent_bytes=57883\u0026recv_bytes=2275\u0026delivery_rate=27281507\u0026cwnd=31200\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=289\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6701,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (6701), with no line terminators","md5":"879e12144a3f45b72d844cff08ddd6cf","sha1":"95ea62ea2abd1202d5f61a1b6eea04e039b43ea6","sha256":"05907ededbe39a7db1451afb8dcbc9b9da5cfc524cebdbc03d29adc57b144959","sha512":"e8ac257145a217d33fa7d2e82b26a5d96c7f6e6f1b265b1eaa9c4f1a10b6cabeb5071f4cf21310a377cfcf4af8e7584669747a9be7f19f624a19f8ecef4b04ff","ssdeep":"96:PNybXZtIEb0EFW87IGPpH4DjvycBesEhRL7L3a/z2wJ47xOK8FQEFMSN/IuwFSsg:PNadBipesEh1762wq7xOKBqTLVyvw","tlshash":"0ed17ea7c486301bf7f7177a08bb7b44e112a556eb13c085f8d19ecc89def42c625654","first_seen":"2026-01-30T08:57:31.156718Z","last_seen":"2026-01-30T08:57:31.156718Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.www1.co.com/","date":"2026-01-30T08:56:53.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-Ail23grVbedoPxAP' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c5fc234da9456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212600,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"4e82c679f5f9aeaaf47526ee359d25d9","sha1":"0c2af14241faf80619cdfa70f142a30b4c08c89f","sha256":"de1040a480c4f5c90ec05a0110335cc95dd7f037ef9f495b14f428280565ed88","sha512":"48b297592814a5588702879cdfd6223bed1f30f54b48e44ce9572eb108df6462d4d1d8ca4a0b08efc38ab146e892a662b431b9e00dec44a4ad26d99b0787e455","ssdeep":"3072:kZTVdMMckNiLu4FSoOgKBLrpIwXT+qgEoHe5BZVuu67I92yQQQcbGD1fJcO4:k/gkNiq4FSoOgKBLiwXa9HMuu67tcWfW","tlshash":"3b242a897acd3a6e63333eb4007735db62ba6c583410544ee2d1b5e4bca471d3a53aec","first_seen":"2026-01-30T08:57:31.157918Z","last_seen":"2026-01-30T08:57:31.157918Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1376313033:1769761255:VEuzMdjQanEeEcQ_6LRo1lNJyXPj7GapoBCJzZdJZN4/9c5fc234da9456ba/JMEJyJi7I6915FM.j0ARox5384GdM.YI7ECjGyUEa1s-1769763413-1.2.1.1-EKniz04Y7T0WFqnUZfKG1gBfkHLjcy0hZ9dw6cXXzlPdztRnUrcD8aKv05Smnpy.","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","date":"2026-01-30T08:56:53.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1376313033:1769761255:VEuzMdjQanEeEcQ_6LRo1lNJyXPj7GapoBCJzZdJZN4/9c5fc234da9456ba/JMEJyJi7I6915FM.j0ARox5384GdM.YI7ECjGyUEa1s-1769763413-1.2.1.1-EKniz04Y7T0WFqnUZfKG1gBfkHLjcy0hZ9dw6cXXzlPdztRnUrcD8aKv05Smnpy. HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto\r\ncf-chl: JMEJyJi7I6915FM.j0ARox5384GdM.YI7ECjGyUEa1s-1769763413-1.2.1.1-EKniz04Y7T0WFqnUZfKG1gBfkHLjcy0hZ9dw6cXXzlPdztRnUrcD8aKv05Smnpy.\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3735\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3735,"data":"WAQg2DwKHO6JXE0jCHf2AhQdm+x0H8L4oukGdR3dy-4aAz$XMEAXjBF-Zr4W0pbGX3tAK4D$FwXJl+1QFOaBOEY$vuU0nO6eJRm9jELzKT2pG-902Q3+$5HUhH$BniZdcHkV5ht483dH-ir$YdyqoEBTBKQonVwJ8rrJXWDqUrTLYyrGAYRvXpSaZJGLDz$7reJdDtQ-ASYa7ZDFhDMocIblfZlTaNAiDoeEFhTnNAkOnyOm7iWokwdN7fLGFS12oFnFurVntil7ratgFzuor4JgtwzcJ8V935IXXLKyVw+l9F089IhL$SRrJ1yG2lLx9IdqaMQanGNC9sG8J4wTCRFjma+Tp2AmyqYW8HDQiKap7BfqwlSMLn2MrF7npqdgIBWhfO$$X5myTguoJ5tigqzFqtNAk2NTv8J6bhi6gOgZut99dhkjbF3noyOG$w516jTEjtSFIyGkQXcLJX+H8ZeMc058I23tE+STwfSnw7G2ZfT1E$9l$56R7$w$iRnLtRyiaB3JyGvV2f287qG9lDZMqZ-ewzNanxznJ8TV3k+tsve99oO7C6B7lrOh45fbLq$WAXiDmtcidV8mmo5oznwl$Wc2SiiGxoHY5zS5yMAc0tTYlHOi01Wb+rrXv03M3MqKzmgKxM+ogVK5z2n-W6n4Va9zo9-fLZfZ8L38tVCboAWmDjrq3qsUsgU5As47V5cmsyQNtoFbZD47uFor-Yre92Bn6wG1O4hKHYbZL979HUSzlFeaosmfSvoJbbGkS86$YVU1b99bd8qURFlUr+f49iYa8ZnYZHXTiMjGBjmdI6-szItkMDfBiZWOBGbnmVH7JvhU6D5CCy2G+7lImgBBA$u531Y07YrAqJi3Ydlgb4p656aUyT2iKvBGjG0G6knrwUDTiXhTCb$RUIDnuqcJI62FvqG5hBww6ee4wAYtn5Q7VY5kdjFbkB$UGqbZr5g+WqcU$ooZeQznxdTwazXH74cOKtbxcSrIKXUWp12awWcfjF5yk7tW$vYnq26ozKBVzvwghZdqKGXZ4b2ohh3WpZ586b5vJceoOkKOgrzshVIE2B17Vdavxj$F6Vo9YUMh0Sm2Lsq4mZc-QQEfnS2alOl3yVaHF+oXrE4AaiFaGFneejalJp5-CWvgZ8q8$NL6D-gc9Ucv9wT0MQ1kBI9eNiBFDECBzveURWMoUyuWEfs1WGq+cSg751B4Cbtb$I8+Ycv-y78W6c3DV4DTOB9VIz7W$pTnrL0qhjuUaL9KCeGLdeEW1fh9v0Wutq6RufQmlEYiL7bk+GWT$C8gzQtlhN0HVwi5EU4n$zU+bq7XZv+v3bfo7$jwkjYMHTVahdFZA1cRL$mK-mnSsoXn+ojJfKnepwUnRnIplDXV5Ykft5juUlRJn$pRHvd-akS-HJFXWg4-FWdu6T5j3DExu19DF4-ZhBT-9Q$9vzzepyg9XfXAQaQs17x-1I0CVrCHd6SWaLo7Ue7AxRTEzNAWCXrCroOG--J2eAR7lwW3UVqI9LrnJ8M-odcvNL+8-G3ouqWg3m78o4Tak9vE5bwKiL4+IIUDWM6chQA5LOtS9GVv3vA73iGahMhZxyrAi3a+Uef236xh1+Hr0w-UBU0USexXw+kMdMnun8Ip6R7xEjrF-yweRr9Q+OBm9NN1ams03lkGqxXy58fdyqkfBA2zTZnBJLpw37jRawuEe+-LYu+94w1DM4NsQimBVRSeE31jX84V4XRWoowCr6RQvWaGqCVU9m81peNKZhi-tNJAgYss-oMGSR4G3ca9y3DROrOAXGcTUzZhzu5R41T1HUBvk1qD3pB$v-ztNXYzrJR7GYC7giTIIOW6nYw8+rOZmvQpo2j5jizj$$yqe$7xQDHp3hYvEnVeXF3x+RH4LBNER03AhxjhQHZE2KQFREgRkpeWcJzGBicTQEctGWrLiSCQqc70$ZuJUZexLaMB2z1zRFVh-9jeuv3xnI9S$VHrJONyn9UQFkuMLmMmM+6+mHUZyUHDdVdI8egMqB37syozFjLYXD7Oegdy1JwepRh8h$s6Lc+H8R7FcUV-CiWahFB7xE-J4VGc9hxX83S3nwWRjd+1A044lUm9iU37s+vvIDAX9FCt2BS+vlzHdK6JftUkjS-pmkjTb$HNbZ$bnafKwdscpVFWO-rG8l4XhqTW4YBUMCGFKIoJTMUcWTeIdoZQS2acRbYIH6BqLvKcIA2Ld+gl+G+Eja9zN2$aBWKB$V7hjJShdpAztqEvfMFewjwg$LlJHll4W5zeMCxslWRH+-5UhdhqRva4SIXlA0Z87I7qbHd5elNcSWDfCGclxzpeZM4CFQvQEforAdQFcX81Mak3wFt$MHlFWs60t87Jj0zmXKkAea+UlCB10hMhVwua+Ys$mv4XAhK2v4Nyc7q5W8+gv258Rnk842ikwbGvif1Hk1swEwZv6ZyTnfFOVBtRYYfnx46w6hsganrwURIH3FgHm0O8d4qLsb98v2BfyveXjRfbM+8aqVA12qZYg576$gKR44+wOHab3nyB-OaNM5g3bf43JSxtoIVN8nV-do1aULxxlz5Sg7DxHNnxVzbl6Am2xwYnOjAnGdGXbEzYissVonJO5i0bxDZoJiM0t9RekegXNf$6IY71dL0IRY11d87qJNvUUA+2Yhq-3$281vp1V$TmB6tbWZsmNHCdR1kxtsduiIlkcpYDDEvgsDETTkNWaelgvCT5Lk7EVnjk2hbDwoMtTQs8wB5oLlsbkb0MKbkzf8hYI3G0gh7+3nQV7I-EiBz7Wjg6536C$eZpW9zV5YO8wE3cIdpXudlbY3LR$RFst7YKWrKwNTWGwGvemSyCGvzMO9ldlbDIlESXKbD$wmZ1v4x0nKWiXKpjyaVLyuDTbRUnATAdAidyOh300+QccT8XwzBqvsa7EUKKFN-i0IsXxs99Qnwx-BTpnUSck-xfK-kjjXDXHcADS6l1jMXeCWqEQoVsnUlW$mVMY6sqzDcFjM$SSKio8zt212OiRKCWtZcafK3TS0wf-qDE9QJFiOnNn0hftObz2umx$vZL1DYqK7cBiDCcaTukkLS5-n0RWAvfHlxOC9cS5-ko6Lm-2dSzX2iVdg-aWmovI7uN3lt413XMlt55-w-RccM2+Xqf8XZzve5JaZJkQhH-re-N96kmStjlhF$fyb39YzOXxwH1H2sJuUwIwwLm+YxuuvYM95j$DMO8xsMl6i-vJ$ERHv9HgkZI01qRNs12I3vMR7C69BHAcue0rxjg4XTbfv+nej$sS$bbgdH8j$966VwVkNv13buTiEva9+zxRdyV-tvq3mRActlXpEw47FpwWjb3UeBKEws3fWeZlyL17BCpXOjmbtoh6ARC4F4pacyUub4T$JLpz1$nMWISGdpttjyzX61CO-qtCcisdam+Lbq589En28q-qVrTtpVr76CCRhMp1r6fIMY8MWYKHV+Mr26zmACwk97ZAb7Kk$byBwLJ0Rqp1OIngAG+oGd-9l17ozW8stCpa1JmRcFNR1Fvyi4JL3Q5nbtp9xf140bA1+FHQX8vST5G+hR7BVsuK5H5mSt+ktfBNuWOi$krEOH8-yV3srwmjh4FCzA6afMJ-tNSFjMznbHOyaebveAXOY7MMXNySMD2ZyhvZQcH2y+kgexrmxS5JC-FB9bgvWkDNp7VDN5r3l8G0yUIMRRhImhSjHufyqWM9zaMEcdN$sYTcVJQq6LFcvRSX1orMkOAkZh"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:53 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: br\r\ncf-chl-gen: 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$njq5jWj373h2ai6NzOLP0g==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c5fc237ee0156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208408,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ea1fdbf055743d625711ca869b5d8b65","sha1":"cc5f12ae723fb13ad1a4ae378ca9d6bb3801d63b","sha256":"d3e1a34fa4ca791acc9bccfdb9ea285292619f3279a4d4264a214e5b4db3f4ef","sha512":"ccc7eafd5783b939704384e9ac3e616d187fabba04eabfdc070d39ede221a2b92eb164562495e8ac195f9a77218e9b29accd1dd604141cec132239fe4bc6b3a9","ssdeep":"6144:wegVC3ETVo1qRGRBiecswbvHlVr2eKVOYzw:wegU3EJmqGiecswL2eKdw","tlshash":"b51422f7aeb67ecf47640cbf87d0e94a4c11ce854862e3c17dd2aadad18e8092d70954","first_seen":"2026-01-30T08:57:31.159353Z","last_seen":"2026-01-30T08:57:31.159353Z","times_seen":1,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/litespeed/css/0a24e29db1b019c0ef418ae9fd4d3eba.css?ver=351ed","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:58.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/litespeed/css/0a24e29db1b019c0ef418ae9fd4d3eba.css?ver=351ed HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:58 GMT\r\ncontent-type: text/css\r\ncontent-length: 114\r\ncf-ray: 9c5fc253a8564e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:56:58 GMT\r\netag: \"14c-697c7197-c5935;br\"\r\nlast-modified: Fri, 30 Jan 2026 08:53:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1OhRD0bSD5fSwNd8YpiB05jGYG29i%2F%2B9HtlMgpetVRHmIlc4rMwYCpuHlUnBYz9D1Q%2BR1eIy0%2BX0SrqsatfwEI9JJT5NYJtZEQfID064g0LCUWSMkee7VpiQc37I2w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2479\u0026min_rtt=698\u0026rtt_var=1955\u0026sent=146\u0026recv=57\u0026lost=0\u0026retrans=0\u0026sent_bytes=125307\u0026recv_bytes=27289\u0026delivery_rate=27281507\u0026cwnd=31200\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=6151\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":332,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (332), with no line terminators","md5":"84ed14d6a9bf06aec94ce66a61f8dbdf","sha1":"44f94ce4872574f789be6bd501a19fb822b627d2","sha256":"c8b5bf193b3dc0ba1e760ea20c93b334da3eabdc9a369a562b381afaffcf48b3","sha512":"6b7e9aae3a757da372d2d4364dc9b105acfe0bb72162151dc9e07659350ea6b3e04b0d4b7484ddb20c0dc321bd8d774318f27f9b18335e5903e8a4d367ccc14b","ssdeep":"","tlshash":"f5e0b6df1185c248c68b40704f9fd5a370e2050a95c6f96044ab5bdeebf707812ac987","first_seen":"2025-04-11T06:51:47.855945Z","last_seen":"2026-04-04T07:03:13.993103Z","times_seen":442,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/litespeed/css/a9447304da926578b65bd9042675a30a.css?ver=4efb0","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:58.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/litespeed/css/a9447304da926578b65bd9042675a30a.css?ver=4efb0 HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:58 GMT\r\ncontent-type: text/css\r\ncontent-length: 0\r\ncf-ray: 9c5fc253c89e4e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:56:58 GMT\r\netag: \"0-697c7197-c593b;;;\"\r\nlast-modified: Fri, 30 Jan 2026 08:53:43 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=h3cvlR6Bw35sCbmwSEx7a2VVaKWep5dj11jjiO%2Bo1yFYTEgarlFKK6qiqycxCAdYTKXXZRThOTaYOVksnEBpuJI9afCBYo1pcInIRkph0L6%2Frzxo5RE42Ge483%2BRAg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2479\u0026min_rtt=698\u0026rtt_var=1955\u0026sent=147\u0026recv=57\u0026lost=0\u0026retrans=0\u0026sent_bytes=126307\u0026recv_bytes=27289\u0026delivery_rate=27281507\u0026cwnd=31200\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=6166\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/fonts/roboto/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWub2bVmUiAo.woff2","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:59.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/fonts/roboto/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWub2bVmUiAo.woff2 HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 20928\r\ncf-ray: 9c5fc2597a614e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:56:59 GMT\r\netag: \"51c0-69252da5-19082;;;\"\r\nlast-modified: Tue, 25 Nov 2025 04:16:37 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jzJNYoqeVO6g8grixvIxCN5rAwCPCem7FqeL0mukIZYx2VkrI%2FcjlkbYRyE%2FJ7vryL84TKBcPa%2FhnBzVWFLdBnxPUc%2BtlCDy2M124SKEWo1JKL%2FyK%2F%2Bhcn3u0YEmZA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1669\u0026min_rtt=698\u0026rtt_var=794\u0026sent=501\u0026recv=94\u0026lost=0\u0026retrans=0\u0026sent_bytes=521370\u0026recv_bytes=32345\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=7280\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20928, version 1.0","md5":"02e18aa1a344f3345345384d3b3decaa","sha1":"0881aa60698735802ea73ff97e621634ad3a9c2f","sha256":"e5b29c36b2e7a2f4db58307359fa574004be43d39790e4b7a3cf80a7b16e8bb6","sha512":"9dfb470138f5092ba2c081d69e4ef35e37ba0bf5038fce1d446bb817a69f08b49452d7086e9b2ab15d9161c1e97f95bc1173deeafbff3715f916a5f503d4c5b9","ssdeep":"384:pMU9fYV3RrpALpZhlVrAFl7Lg4XSXK2hIjy5fqsYtjj0l/sg/quKGNtyOD:SiAV3RtALzhlVrAXgKSOW5fqs/lFqur5","tlshash":"8492d043e8776da5dcf388b7d393b5e9a03086b0c748c2025ed098d085cb5b7e9a160f","first_seen":"2025-01-09T23:41:46.265854Z","last_seen":"2026-04-04T04:07:22.624161Z","times_seen":5655,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/banner_image/banners/20-1751358198430-slide.webp","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:08.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /banner_image/banners/20-1751358198430-slide.webp HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7288\r\ncf-ray: 9c5fc2918a394e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:57:08 GMT\r\netag: \"1c78-68639af7-17eb62;;;\"\r\nlast-modified: Tue, 01 Jul 2025 08:23:19 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BbjUlVFmABq8JA5nra65A8%2BPPuUBIHxg0ddyS84eUILg76AUxULzMOlsixJvKQcFZkpdyCV5ya%2Bw08lI0cJlXf6a4slSl70aL2MboDqevCKqSSIe0021zLuYNo7XhQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1386\u0026min_rtt=698\u0026rtt_var=428\u0026sent=987\u0026recv=158\u0026lost=0\u0026retrans=0\u0026sent_bytes=1051454\u0026recv_bytes=47451\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=16056\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7288,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6834778260b22856dfcffd8e734e54b4","sha1":"c3812aadd906ebaffc7cd436542c7a1943393fb5","sha256":"4af75a53fa4d52a35bedd78cbc4ca4983cf947f2b4aa1489492e7d7d2f81e1f2","sha512":"6daa10417bdc3f5f18e51f81e43ae05c1019b0f5b66fd124d5dce768b62f8beafa7ed55fa6430ecfdfe117ebd982050452edd4c0100f1a6101f5a0c997e390f1","ssdeep":"192:J1PTJjPKytWePng+g7kF1ovjk1rwmaED5c:J1NKYWevg97kmEwmaQ5c","tlshash":"15e1b0091991c3ab0de08c6a9659edcc5b7f78ccb452f2850f52fbb2527135520fb6e8","first_seen":"2025-09-21T15:24:59.010964Z","last_seen":"2026-04-01T12:37:45.21637Z","times_seen":19,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":617,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/uploads/2025/03/dark-green-gradient-background.webp","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:59.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/dark-green-gradient-background.webp HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10762\r\ncf-ray: 9c5fc25b582e4e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:56:59 GMT\r\netag: \"2a0a-68a573a1-835b2;;;\"\r\nlast-modified: Wed, 20 Aug 2025 07:05:05 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Fw1RZVtWZGdXDONuV1vRD3eA6vT0c1dOPi9A4tU0C5GmijBz6URSZtdcfD6b%2BjE%2Fs7cQOdOmbLcBsgIYGTBBH5gDPLF2D%2FGn8VM2RaGCWMM%2FJ4yVKOaSIO7pqge39A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1553\u0026min_rtt=698\u0026rtt_var=639\u0026sent=533\u0026recv=96\u0026lost=0\u0026retrans=0\u0026sent_bytes=558927\u0026recv_bytes=32441\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=7405\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10762,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 626x417, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a16a0c5eb6e0b103706b837acb759b34","sha1":"b381b2e3b4f6192a57e2468f40a9a299f3854dea","sha256":"4d9efb51e8b034c23f7a28a473d5d0dbb902869033031d9ee853c6dd29908ba1","sha512":"661841b1e25120f9713850713f3575040e4eb74be2c9a9e49a713fb113336ba5b5b81848d687acfb678f3fa1ae2351719b4fbad2a078636a62c3dcbb290813b8","ssdeep":"192:gTMFL6HYncd7xfGOkoF01FFOr38dIimgKKdf9KRPoadaMsyJs4O/A:E9yEO0FeE4Yw+P289P","tlshash":"d222c0093fdd8fc0c80ed29d69b55cf61aa1d6f0ab850fa153229b9c2d8d062cc68d59","first_seen":"2026-01-20T05:16:54.448745Z","last_seen":"2026-02-01T02:44:00.190152Z","times_seen":3,"resource_available":false,"data":null}},"time_used":631,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":630,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/banner_image/banners/20-1756998986790-bottom-zo88-480","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:58.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /banner_image/banners/20-1756998986790-bottom-zo88-480 HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:59 GMT\r\ncontent-length: 56961\r\ncf-ray: 9c5fc2546a7c4e4c-OSL\r\netag: \"de81-68b9ad4b-17a219;;;\"\r\nlast-modified: Thu, 04 Sep 2025 15:16:27 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ELB%2Bmr%2BUaRF9Uia6bHbhLG8cIxJMnTrGc5qnfFjWRJCvfyGQKSPhAUG5yg4Xu8vgmTvJArU1OmAA2oq7i2du0yM3zrKmU0rpIAUMLQmS7PMV1%2F%2FOxD9%2FmzonnGQT0w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1450\u0026min_rtt=698\u0026rtt_var=692\u0026sent=231\u0026recv=71\u0026lost=0\u0026retrans=0\u0026sent_bytes=215520\u0026recv_bytes=27931\u0026delivery_rate=27281507\u0026cwnd=62400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=6452\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56961,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 480 x 50","md5":"92162028ec8a5cdceb6f51319b295237","sha1":"a1a44fe86494841ea0bc6b73bc8fe93842aacb2b","sha256":"951a4dc541420e10f08512aad9a31630f94090b04590c34f3d102a6d12f95715","sha512":"40a510408cb1d79653f26117fbe43a318710de5eece0d7860b204afcfe4522107e4917ff4cf08cdd9b4bc7326346ed780ccef1f044fdc7aa4e0a126ac0de2cc8","ssdeep":"1536:dswpmcZLm3/GLkhfsJxsp+vwDCG2rTXhrsxWoyLaaxJyE+VXs/:d1Y8LAG1t9WWoyfyXQ","tlshash":"c543e153f85bb333a62ef67af8523998a2f365285cb49fe6f84dc7021090165508de4e","first_seen":"2025-08-23T15:05:25.760634Z","last_seen":"2026-02-01T02:44:00.209502Z","times_seen":56,"resource_available":false,"data":null}},"time_used":978,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":784,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.www1.co.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1693935599:1769761255:T2-BedmRXNWVhggkbSbuzyBOAiPsrsIOk7umNbiIcHE/9c5fc230d966b503/jccH0uPbtv8xOAkYJURJT3.QQ4EDINESkQzOzQRIOHo-1769763412-1.2.1.1-KkSXDotkHEPzAuK300e1kvZ3NQdFd2_iucG17t7nlVIy4cZGf9n6l0_r090D_dRp","fqdn":"www.www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.www1.co.com/","date":"2026-01-30T08:56:53.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1693935599:1769761255:T2-BedmRXNWVhggkbSbuzyBOAiPsrsIOk7umNbiIcHE/9c5fc230d966b503/jccH0uPbtv8xOAkYJURJT3.QQ4EDINESkQzOzQRIOHo-1769763412-1.2.1.1-KkSXDotkHEPzAuK300e1kvZ3NQdFd2_iucG17t7nlVIy4cZGf9n6l0_r090D_dRp HTTP/1.1\r\nHost: www.www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.www1.co.com/\r\ncf-chl: jccH0uPbtv8xOAkYJURJT3.QQ4EDINESkQzOzQRIOHo-1769763412-1.2.1.1-KkSXDotkHEPzAuK300e1kvZ3NQdFd2_iucG17t7nlVIy4cZGf9n6l0_r090D_dRp\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2199\r\nOrigin: https://www.www1.co.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2199,"data":"ZKS7uWDrz9RaibuyQzq4tLiFLqvTHrLwOtKeAQDyo25DbwNtO4QEEWNfJ94aZyICSRG2IVaLBab1CzUrNn3AHvY0yW2Vp-D9SGPXmpu0caHfFaLhEJHRvU65IPbxIkuUY7m4oVCix32jG87iJmgKKvils5gNXdek9h-j8+KvywbNR2mvZrWpSqk--TRy2dJgX0GUbyvr+rRs1F4hcFEIHFuGEeaweB7E0rKAfjG0VsYSg+Ljo3Uw324o2Zv3EeoSlpJDzIFjT1FLOCg7h$k69dE+dyJwwXrFtsJD$8ELYpQG4TomVrB7+SNvieH71+rEV+LyWaT9Xo2EZW3tc+BH2tcz6CH$bjQ2uXw1zKCFYhNHj1ityGZW92EkSCjZivCp6hfGnqVwTpdj27GdGIdOku6u2NCFl2ubazYKXoFinhSRl35nmYXvn1ImkH7U0+2xD+lOzOWnUUzx1IJHNFYHsPm2FxTE1kC9HJOqpvxD83qZU4XBuhFaEt2ZLW33S1OL3OwyQH$aL4HPT-kctSYviTaANZLD3tb19HXKK++c+eb05-32jRTzviiYw8sFKagEkpJhbgFFuXJ6LOvL24iq-hZcvXW2ZsOr4Qe95YRlHp6r4jWNHZN$XXbCs9KpN+07IxaQWOe5CwCx3cFdxR$XYpavqz29-Q7heKp-i0W+c3Pms-Kxcg$$k+QyoJvVs84pSGX+RYm69oh1LxEAPV067+jvJWa9pPnWf+exkqqXRWqemy+4K5VSgsDER4YsJwVlZzOQvQwU26qZZKCAnXHsjgt4trSj8nQ15+LeFUAX-gN8rUi2IqDsxVxQaOyh-5p3gz$Z$CK0cEm3xgyNkeDkP+BhEIgR-Ync9ZcdAIpoR+qbLiGpk5YFqljLRmCsZTBLSoay8O9ABCGkZlco+lAv0jskkU9BrBSxSKS4ViUWV1vErV87paRYCOuKg1W0EvvvUWKuUJosNGPoZDWFr8qiAqIKKCca0cK7lYe-OnDOEziYNKc4BRg0eU5EIlGObYaR8RAaXji+27i1dYgu2r92XIsZcuNKcaqw9Q2IJ3-OsiZpzllX95eduEuO7BQly99gHhRUvONfYw+aDmlBE02OUH9r$vHZBDxBoIf9GRGsZR7nn1y$zk744q9ewqbNkqKx$xOW33$f1OTlZK-TyKWf6XxibVP5gA4pGNwFPy2b6-YKDqHZ-Z8QDEw9gtjyGG0syaXVUrDqGDx1F6nD4d2jC$yh7irVEl7LRBVOrAFchS6a2CKdaNTorAeug9tJPGjp87JrFwbJip0jugdPR95Z8Ho1DaKXlBdxW7lT3U48ZYFFyAVsl72$gS++4boHE+U+8mClPm96hUuwTdJVvl7dQLp-406Fn+d3X5SW6rksYV40hlxdKbSf2WCwmI8gv1QY53kc128jxThRUAEk1gZjE4zKufcuRZ+yvfIaNweGjxPBWR4$CURFS8vfoGYZcXxT2YKEcwEGpsvugT3lpThfAsTvNt4GxIWXgRFeo0YCNySfrT54Gz4g-KB2-LxvUKW0iy6iklR2vitegaKp8VnuTdG+Yy9NBTh32QA4SCP9hqFdZeHVi4EpU+0k51nPq-Gj4EyiFm0gB6qbi1ayQKtQxg5eILS6LL7j9KpnQtJiF1VVX3-no5Wkemfm62XAQYE2YIySs3YqfsO5BNKi8KKgqDBKEUxFTXk42jFKm5Cl+eJwTxD6-o9Ap2BG+Om$KPLQYDvvhGBZBkePvSURAOtrjhO7qXry$u9xIYq8us-o9-5j8m6bR6vfPWsD4zsY7SUC$lbeuYsVJY2wjX4vDkJ$SX5jx3Usi19JhLvueRyOkoS0Ifkg3Q9m13o$1ffBzhfWuwRkO-wJOBPTy3O7Vgq0zOtBtixK9OJLExr4jHoqnQXNx5RxubUvqKK4C0aisLNQUz-H$ULfX6TP82zIgTcAEPeW3U9suU3$X2iNpsjvGcSZm9+KU$3jjQpEmaSIjXjjPCH12fhhTfrrOltRjA+OBmR6ACAaUPYQL77Px9Ul3KDh0fjFPP1R2DsNipDwH67DbbpLfPyozEeFJtdN6S$T8p9IEK0rkajeAqJZ-xg9q2UYR-cYgajRWRuoCWIFhwIAvqAA4uglXPfmuYI+7KBYP3R23t-Hmk61st53fFC5-HBYscl18CIyUQVFxjj2f$Y1EIngpL4-lnjqSgCBZkX1OLK"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:53 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: br\r\ncf-chl-gen: cAje4W3JOWE9Yia4zwuF0ZEJJ7q2fPBhblkpQwjRKzE=$rEGdUnIpD4rsGjVkcKEz/Q==\r\ntiming-allow-origin: https://www.www1.co.com\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vsgIbvjaD8d%2BSHbMyLbPsJorR%2BUM8jUtxyqbI%2FDNr0t7V8jGBWyWcT9AFFBUDpvcw6xsDiiMURg8Lcsa4o4C7LXVloyF1nKKbF%2BHYDfdAoy2KRBgtZ9sxRoEOHL3luFtFM8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9c5fc2343d344e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2195\u0026min_rtt=698\u0026rtt_var=2071\u0026sent=70\u0026recv=21\u0026lost=0\u0026retrans=0\u0026sent_bytes=63843\u0026recv_bytes=5202\u0026delivery_rate=27281507\u0026cwnd=31200\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=525\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16888,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (16888), with no line terminators","md5":"351b4fab4074193811ee9fffc9bd06c0","sha1":"816a373fc064bff643132893961904c9e0d4edf8","sha256":"5398132dc541f387e245fb6ba3f92d78c9bb3c00abcde377f0113c008da70dff","sha512":"4a7167fbcbbff66c4b8ce8c6aaffc5322808ba725b66f24c6486a1050a9fd8e61ed2d671beafb0c6bfe55ae44a287661e8d2ecb84294a7b0791483c6716b5844","ssdeep":"384:LZv7WSIFeZ/mGQ8d4uR6+XEthxWNvTwTDAsAwuqH0lt8uxL:LZzWTZGNV0WN7InAwuS0IoL","tlshash":"c972d0fb3f691dd44880cf8df6293c1a52a48bd9d8890245c59f3b586f9f44cb9920ae","first_seen":"2026-01-30T08:57:31.164184Z","last_seen":"2026-01-30T08:57:31.164184Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","date":"2026-01-30T08:56:53.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\ncf-ray: 9c5fc2356b3156ba-OSL\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced","md5":"70c202196187ab3c11b4e094c20c6de1","sha1":"9c52b959e74aee9d79cbc9f35d1f9f65a3b8c863","sha256":"6255b9231d09ebe6aa1ac19ba46bdd81f3df58989c9ef2e11d6cd6e2e7b21643","sha512":"7e6168e40cce79239fc00a05381e1e95ca3534905d3fc1467973927f317b7f12b6f3e76960d5202c40046618b51e0895082e22338b1b9971038fa0ba158117e4","ssdeep":"","tlshash":"4ea022f3b2203c3eeb2a2333022e8030f83020b803828e0c000eec332a20208c0ca2c2","first_seen":"2025-05-13T14:11:45.873663Z","last_seen":"2026-04-03T11:40:49.866694Z","times_seen":265776,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/banner_image/banners/20-1751358026754-slide.webp","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:01.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /banner_image/banners/20-1751358026754-slide.webp HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6306\r\ncf-ray: 9c5fc265ff604e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:57:01 GMT\r\netag: \"18a2-68639a4b-17eb63;;;\"\r\nlast-modified: Tue, 01 Jul 2025 08:20:27 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=EZntvBAgmNzLgnlItBibkOe63T3y8gXXDRSmKIUvjsIdGUPpWpv%2FYmT6EumCjTeH6c90Wv4yiiElBxxOFD3DX70rZ9WPKRLPLDdJgiT1aM6KhPrgdAk%2BYT9lU4cdpg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1209\u0026min_rtt=698\u0026rtt_var=238\u0026sent=964\u0026recv=151\u0026lost=0\u0026retrans=0\u0026sent_bytes=1029956\u0026recv_bytes=45608\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=9078\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6306,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ac9a7784e650f410538a327528d907d9","sha1":"4cf072f1f36dec23d6e0104cdc920e25e030ae1d","sha256":"a9b1a8db745e84b7e412b268281b93936fd0bc89f3f8dc7785783302d648d6f0","sha512":"a0a4d9b40e5565690839e8729449dd0ba147343937ab86cde4aeb4c2f5180ba10ea88dc55616b4e2194bb177231a3a72d66297247efb2a7fbcf9cb299d5c97b8","ssdeep":"96:kUeLwiqN6J+gjZMQbiYHccnvSgVLZGtoQXWkuT6PUTnzie4vHYbHD9/BeXW7Ut8W:JlS+KMQ2Y84vbVGoQXuGeRvlBem7clDh","tlshash":"a8d18e86c08c367bd0a568d12917e8433396d8898c4b97d1ae4b3e871c9dc2911ff6dc","first_seen":"2025-09-21T15:24:59.102126Z","last_seen":"2026-04-01T12:37:45.21794Z","times_seen":27,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T08:56:57.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nx-dns-prefetch-control: on\r\nlink: \u003chttps://www1.co.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://www1.co.com/wp-json/wp/v2/pages/1883\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://www1.co.com/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\nx-litespeed-cache: hit\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: DYNAMIC\r\npriority: u=1,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1FOxy0zRg5UFr9Ysqw8K17hKSQIdvGBCQk%2BvdIsIBgBQDMtKJQeLTqoFV6lBD%2FZhBEuZvYjH%2BLZPl8JMTIfvYTE3DxgohT6QiBI%2BrVVtER9jbMFaLihTl3UEs1%2B%2Bfw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9c5fc24e0fc44e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2089\u0026min_rtt=698\u0026rtt_var=1340\u0026sent=90\u0026recv=33\u0026lost=0\u0026retrans=0\u0026sent_bytes=83334\u0026recv_bytes=16204\u0026delivery_rate=27281507\u0026cwnd=31200\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=5457\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Web Font Loader","description":"WebFont Loader is a versatile JavaScript library that provides enhanced control and flexibility in managing web fonts.","website":"https://github.com/typekit/webfontloader","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":172083,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15791)","md5":"0443960260661ae6e15523feedc291ef","sha1":"8c896af774fbb1dddfd3481d4e6f538d9b989dda","sha256":"f086a3ebca6ea288ae2e2f58d29e10d2a81e5fa7c2fe23e3f6172317c7be82a9","sha512":"802863569fce27ba1c52ee23a41fd8f26b03e634f928648712a739e81de0a61663e9dcf05f61e8daea69afa7e512ca2b9b4a29947881b1b978f4d26bda0600ef","ssdeep":"3072:Lc8YHi14o5fBAsDM7txGbxp0YswCK0FbfeuaUfHfhpf6ALsTh:4tHi6o5fBAsDM7txGbxp0YswChfVLM","tlshash":"cef3d762728511375a2781c8915973ada6aef249d6138ec0b6fc52bccfd9ef2353270c","first_seen":"2026-01-30T08:57:31.166308Z","last_seen":"2026-01-30T08:57:31.166308Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1074,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":815,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/plugins/litespeed-cache/assets/js/webfontloader.min.js","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:58.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/plugins/litespeed-cache/assets/js/webfontloader.min.js HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:58 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4645\r\ncf-ray: 9c5fc253a8474e4c-OSL\r\netag: \"2f42-68a573f7-82466;br\"\r\nlast-modified: Wed, 20 Aug 2025 07:06:31 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Hh1M1tW18E42%2FqkmHymq3ldXWYk1OPurlBnDPm48ZFTsmtCGgx%2Fq%2FGXxWJi86KksAzdf4TkWB7yFMSVOQhlG1Mdo%2FXHFhvZDMYKz2ykPsr1nlpRdesZETNrSyHyqQA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2288\u0026min_rtt=698\u0026rtt_var=1848\u0026sent=150\u0026recv=58\u0026lost=0\u0026retrans=0\u0026sent_bytes=128972\u0026recv_bytes=27334\u0026delivery_rate=27281507\u0026cwnd=31200\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=6168\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12098,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12075), with no line terminators","md5":"45943f1d780bd7d9db946bdc5ed14a5a","sha1":"41a42d3c32fe16108eb653ae903ae1fb86b7e5a8","sha256":"6f58202a14e2dcb4c672d6e9f0881ddc2b4e88225a97aadd940400a7377ee02d","sha512":"673c809a69dc340bd57d95d2fbf6a43354c141a7de33c4983309d8b4ba5182316a5c4b9872053f9d4badaab4924031a34f71f146d0fb00ef627c4f7aa8f65b62","ssdeep":"192:Y3YEHIcPziAZGmm62zVOr+rdmLdOSjTIghu3oHMBoateK3JELi/QFjOfDzry:YbocLiAZGmr2zUyhmPTIghu0MK/K32E8","tlshash":"0942a7597251b53d42a310b317af010666367b2e2c0184ad7a5de9e4ac70efa226ff7c","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-04T05:29:33.884096Z","times_seen":5627,"resource_available":true,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/litespeed/css/7f325c87dd391d04abc144a4059be74c.css?ver=cc7e6","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:58.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/litespeed/css/7f325c87dd391d04abc144a4059be74c.css?ver=cc7e6 HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:58 GMT\r\ncontent-type: text/css\r\ncontent-length: 891\r\ncf-ray: 9c5fc253c8974e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:56:58 GMT\r\netag: \"bf6-697c7197-c593a;br\"\r\nlast-modified: Fri, 30 Jan 2026 08:53:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=delOTiPgW8jmGxlzR47dSZm7iPR4l0Bm8YYMC0xEODAEEaB85UkzxTdMAjMdtE0cxEjZoCPNrFkXhfOwBZgEkSnNFR81gP3avmQbp6Mt8NQGLvlfvvxjTV2KxkhkDA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2010\u0026min_rtt=698\u0026rtt_var=1529\u0026sent=155\u0026recv=60\u0026lost=0\u0026retrans=0\u0026sent_bytes=134612\u0026recv_bytes=27423\u0026delivery_rate=27281507\u0026cwnd=31200\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=6179\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3062,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3062), with no line terminators","md5":"0ebd609774d04a510cdb1283de8f8db1","sha1":"332b20cbdc57015804674cc45c05c872281cf822","sha256":"821e7e7b174a41e8cc1a18a1acf6e9cc05850d0e807e695f4f56e2642e11441e","sha512":"78eb357b3559a2c25fa19b127c2805fd858e1b4ff94a8bc8086aafb7574164380247c93083e854edf1d8a112c16695273b337b3ff08c33731237507dc7f23640","ssdeep":"","tlshash":"ab512152726b18203522869af4c452fd79285c9192b2c5fab52ac86ddde237387f170c","first_seen":"2026-01-20T05:16:54.434215Z","last_seen":"2026-02-01T02:44:00.18881Z","times_seen":3,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":620,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/banner_image/banners/20-1767249888437-bottom-vic88-cpd-480x50","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:58.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /banner_image/banners/20-1767249888437-bottom-vic88-cpd-480x50 HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:59 GMT\r\ncontent-length: 152560\r\ncf-ray: 9c5fc2547a894e4c-OSL\r\netag: \"253f0-695617e1-17a227;;;\"\r\nlast-modified: Thu, 01 Jan 2026 06:44:49 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IGM2QrYYi%2BW%2BFdW1a1xWPczoOK6RsZlxAJihv4R8%2BPrNw%2BzpaFUbjfLhTkTb5h9aJy5GwDwL1ZOhuW2kR0QZpshRsxThQF5MT3iT9SUzJeBvAIZqNqYQldaC6IDOqA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1366\u0026min_rtt=698\u0026rtt_var=540\u0026sent=254\u0026recv=73\u0026lost=0\u0026retrans=0\u0026sent_bytes=241577\u0026recv_bytes=28027\u0026delivery_rate=27281507\u0026cwnd=62400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=6461\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152560,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 480 x 50","md5":"b959917e80a2cb6657a18edc8c1e0b94","sha1":"545bbcab6dd9000169ff2db32a85724687879467","sha256":"cfd70774ffe480bcaf32fa318c2041bddb3bccd333e884001dbf1864f0240922","sha512":"8228ad0ce13ee54d32fd61b5ccd31cad457a77f56f5b12b007c411bb628b3c8fea892517019de3aa803f730197b01e504de00d4637089e8efa11bc39f9015ece","ssdeep":"3072:R31OxC03waXwaXwb+TYJowtCiRiYCiRiUM25pyuQPYbJyBzbJyBfdo403Q9fa3QR:R3+VAagagbqYrRPRisyur2Sdo7Q9fcQR","tlshash":"6ae3024cf6caed90dd28aabda2f15f15861e69eb078a476408d2ee1710d731fc5c02ec","first_seen":"2025-12-31T12:04:26.693538Z","last_seen":"2026-04-04T05:37:39.099675Z","times_seen":133,"resource_available":false,"data":null}},"time_used":1192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":791,"receive":401,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/uploads/2025/09/cropped-logofb88-new-192x192.webp","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:00.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/cropped-logofb88-new-192x192.webp HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10668\r\ncf-ray: 9c5fc25fbc234e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:57:00 GMT\r\netag: \"29ac-68da42bf-83597;;;\"\r\nlast-modified: Mon, 29 Sep 2025 08:26:39 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RTnJnt0assm6XvUEDhU0JCtjs31Q1OqYIVPxCT4TZr1yfFv0q%2FBMm%2BHXOqBjowaSHI1ynj6iskgwLND2JQgFXBxeahCurD42fm6XcSc6EqYl2wnHFGamu%2Blk%2FfsS5w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1963\u0026min_rtt=698\u0026rtt_var=1304\u0026sent=582\u0026recv=119\u0026lost=0\u0026retrans=0\u0026sent_bytes=593582\u0026recv_bytes=43616\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=8074\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10668,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0643ec4960a2d3f0bf97a4c3f54a6b18","sha1":"180d7cb73f1d454eae71de252820f0619c16a37e","sha256":"dedf1afc91df2484a0ee09b601bb84023f9c7c9a47da9036dd23ffadc97adbb4","sha512":"a6dede98cd0de0e110268f4ad836e81f3720d05375a5f709df0172a09032c0b747b1ac36223662dbfe108f14b3cf4832384dd11971c1bdbcc27230fd92360dee","ssdeep":"192:GFoDTwwIbq0bCohnffPY4HS4yz1N/0ma2JPm8+6lUL5ZWGEfvRsIIuCtbAa:WoDTvIbFbBhnfXY4HRyRiWJ+6lm5Z5f9","tlshash":"d522c0e7de249a21d0cc1e75d7d93a00f1b0312b68c728961da0511ac27b74d737ab6f","first_seen":"2026-01-20T05:16:54.469189Z","last_seen":"2026-02-01T02:44:00.200469Z","times_seen":3,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/banner_image/banners/20-1751358045941-slide.webp","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:00.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /banner_image/banners/20-1751358045941-slide.webp HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6778\r\ncf-ray: 9c5fc2601d114e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:57:00 GMT\r\netag: \"1a7a-68639a5e-17a1d8;;;\"\r\nlast-modified: Tue, 01 Jul 2025 08:20:46 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XjxrROqu9p1QJ15A%2B7ZNkpzJZZuZFhPo126Aa7OLUJjI1CaIuVdWMKiCpZ7cEB3LE3JQrNfuhJmxAtR1FXkWitsw%2Fxa%2FprjI8t1xf8CPvAlmEtWsTFU9aoAeIe5gWQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1509\u0026min_rtt=698\u0026rtt_var=390\u0026sent=651\u0026recv=128\u0026lost=0\u0026retrans=0\u0026sent_bytes=670842\u0026recv_bytes=44027\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=8167\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6778,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"58beacb36d48ef07fc430976d354afe8","sha1":"6def2e27cdfaeacc130d07e18ce97d99dbb1ec72","sha256":"f5fe0d4fd09953ec19de10ed95ccfeb59999871f9b1bb7e3e4a744d138043327","sha512":"0bb3614d2cf42efe836b619f6be257a8eb09119ec952a9de0833619c91cbcaefa60ab386b40662d5734ff9d138b1979874bb5d9f26d792b8195e38ca6bb89342","ssdeep":"96:HOohyukWHIQDesQsnnSpAupkgQOuHdKRwIVFfbm0/xi0DLSL3bZ63EdCaWKnRAO:Hk/eFLngAuptQOukR9lCWUGSTt7CvO","tlshash":"c1e18c66174ce1662efa712a0661c77fe42f0806f349e609146ce4ad1c2d27aa72b46e","first_seen":"2025-09-21T15:24:59.112925Z","last_seen":"2026-04-01T12:37:45.215495Z","times_seen":27,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":632,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/banner_image/banners/20-1762133142025-slide-max79%20(1)","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:05.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /banner_image/banners/20-1762133142025-slide-max79%20(1) HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:05 GMT\r\ncontent-length: 5918\r\ncf-ray: 9c5fc282fcfe4e4c-OSL\r\netag: \"171e-69080497-17a229;;;\"\r\nlast-modified: Mon, 03 Nov 2025 01:25:43 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sXqS2maV37YU68TwaCsuiB4KnKWc%2B8h18m12G4iQn7XIsP3ujJ0u4NBXvdKUPDW0K1PwsZaH2kJJ0AsE0g6G%2F1E3%2B6og2OgZHgUhahN8Ou8xIMvqDBtTDCN0JGfZrA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1442\u0026min_rtt=698\u0026rtt_var=595\u0026sent=979\u0026recv=155\u0026lost=0\u0026retrans=0\u0026sent_bytes=1044497\u0026recv_bytes=46806\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=13321\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5918,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"92f5c4b6edecfad9e26a90473874bdb4","sha1":"1f184bb068ae2b945eda6f2d581c756e071fb409","sha256":"794d43d572662034675183be694bd4e1e0abf413db0cba73c880b6cfa1bbb1af","sha512":"0bb4c841e88ca8e7660ed615f0f1a8e55c07f8aeea99bf2d97f4ee63c6795fd79b0ab2678571029f1116ab02b529db69030b3b7c24fff54362287e5bd70ce3fe","ssdeep":"96:rXua8H2zE11bvopmH2mG03niaq+8gLAdr9Tck1ip9QttEiwveypc2Guo:rXdM2wXuW2MX2pggF1AMChvpfGuo","tlshash":"c8c1afc1d6c1decfc734adcd2a3c384a45522165e334be869101201cf6d7a983149bf3","first_seen":"2025-11-22T07:34:08.54518Z","last_seen":"2026-04-01T12:37:45.213217Z","times_seen":14,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.www1.co.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9c5fc230d966b503","fqdn":"www.www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.www1.co.com/","date":"2026-01-30T08:56:52.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9c5fc230d966b503 HTTP/1.1\r\nHost: www.www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.www1.co.com/?__cf_chl_rt_tk=XXFv2ZQN_3kaqudY.urr4LRYAqgU9N4N_WySclaLp2o-1769763412-1.0.1.1-CGsDebjnrOg6NWSfC5orzvP02xsaDxxsJA0uQbkU4b8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:52 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=h1TJk8xkYmZ%2BJrDbXlVv1R2tfNzt7sCT2Kwl3jY5nUh4qT6l0mQe9heGdKAzVCWWD%2FWWsw6cORdQ28CBtmfLT3I3p%2BRNqDMXnmA9Jxp5GUlIpXep16kLoYJRXevrJEzKl2s%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9c5fc2323f804e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4660\u0026min_rtt=1379\u0026rtt_var=2861\u0026sent=13\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=4146\u0026recv_bytes=1310\u0026delivery_rate=590359\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=213\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117928,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f0ac4e891e47249c95c53ce49c85d9f2","sha1":"4afcb077605bf09681de6bf4e7d8d7ec2be731a6","sha256":"fd314e0fc48801a599fa20314870f7805b82e2ac62fa33b47330c019d4869cf8","sha512":"7a6bcfabef39276227850ab2a6f1899a8c822de7a8bb2b1d7e5c384e98bdba158b321e20187b5c9f7760ce2624bf9b7221c9ecfddc2410aab299a5deacec5c21","ssdeep":"1536:UWFnfFZ6IklTx/wdXnlEt0g08wW5TiQ0QQsJk1RpY:UWFd4DY9nif04+dRpY","tlshash":"11b3e69d38da358d233269a4092b75dba2bf6c5434148d0ef293d9d57cd0b0876a3ef8","first_seen":"2026-01-30T08:57:31.171981Z","last_seen":"2026-01-30T08:57:31.171981Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/litespeed/css/839105379666143fd77356c3dab8a533.css?ver=76a4a","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:58.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/litespeed/css/839105379666143fd77356c3dab8a533.css?ver=76a4a HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:58 GMT\r\ncontent-type: text/css\r\ncontent-length: 878\r\ncf-ray: 9c5fc253b8824e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:56:58 GMT\r\netag: \"cd6-697c7197-c5937;br\"\r\nlast-modified: Fri, 30 Jan 2026 08:53:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mL161u%2FEf9PA6kLHjpQtA0fTp8AUQQRyY9e3iTtFXZ6N0jVYjJVQsmxJE7u1vqebyfaQIiTYuqPj31Vp3fVepimarFO5zMaOgjQpXRg4sJd2jwba4OIbZ0izy8HCew%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2479\u0026min_rtt=698\u0026rtt_var=1955\u0026sent=148\u0026recv=57\u0026lost=0\u0026retrans=0\u0026sent_bytes=127183\u0026recv_bytes=27289\u0026delivery_rate=27281507\u0026cwnd=31200\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=6167\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3286,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3286), with no line terminators","md5":"d6ef6d6f5dfba2278393eac496ba59c5","sha1":"25e4f1897ddf3e90eb72eaf57001547d07151452","sha256":"1493b00567b3bdd58633053a7a80a0d6446ff79f3364003ae90f2f50f52b5d22","sha512":"d7ef401bbde7bc33aa8e0f14ab9909ef2e05491bf9bb0e5d4d58ab11efd886958eb7fa0ae4f8c74c35a50198a4ab7943ef6da054f78ba70d2394ead896f0bdf9","ssdeep":"","tlshash":"1b611322bd60397c80175145fad2886cf1bf9e00e357c97ea62afb25de570e2022d69c","first_seen":"2025-10-03T23:56:19.463172Z","last_seen":"2026-04-04T03:25:05.531361Z","times_seen":111,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/litespeed/css/7f86b6f6d5c3ad9461c9cf82074c8abe.css?ver=bc02b","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:58.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/litespeed/css/7f86b6f6d5c3ad9461c9cf82074c8abe.css?ver=bc02b HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:58 GMT\r\ncontent-type: text/css\r\ncontent-length: 4504\r\ncf-ray: 9c5fc253b8844e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:56:58 GMT\r\netag: \"4716-697c7197-c5938;br\"\r\nlast-modified: Fri, 30 Jan 2026 08:53:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=moTphLjY5nD9YU%2B5yYU2NTMJQIrZw5EA3Jejxo%2FdL5fJaCOdUn95sTq%2B4te7W8RSAe1UtHGa44BqwSRo3va1a2C0sGzFe45sTh9R%2F2UHNVybYMu12ljHTJQePNYpeg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1888\u0026min_rtt=698\u0026rtt_var=1086\u0026sent=160\u0026recv=62\u0026lost=0\u0026retrans=0\u0026sent_bytes=138829\u0026recv_bytes=27513\u0026delivery_rate=27281507\u0026cwnd=31200\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=6197\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18198,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18198), with no line terminators","md5":"0ede2519243d6e80a6db89871863e485","sha1":"296ced7e165472607861c747f203bc85a99c91ce","sha256":"53bb5d7eed286fc4a5bd79e7694091b2e41e71eb888988adbc79488ad50de093","sha512":"061b3d41dfe4590baa3eeca2a9cf292f2136e087ff9afebf40aede6ffbf11f0afda849b98124e33c7dbfec126b362daffbb48876e4a9680486853c5a573e6159","ssdeep":"192:0mUJbiKne5JTLdKSme+jedo7AnQ7p/l2GZbcE5RfufKDvAYfg9faeesedOJxLpPa:1Ube5JndKW+SKUni24TnWfj4WNi","tlshash":"3e8256a45310182753274f374bb1cbb9e97444d24f9389ae91c0ee58d7facb9132f2a9","first_seen":"2025-08-27T15:52:00.21016Z","last_seen":"2026-04-04T03:25:05.53189Z","times_seen":110,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":642,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/litespeed/js/4953b385e7f3d2ec7372e216a77a1bc9.js?ver=2195c","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:58.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/litespeed/js/4953b385e7f3d2ec7372e216a77a1bc9.js?ver=2195c HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:58 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4388\r\ncf-ray: 9c5fc2547a904e4c-OSL\r\netag: \"3a27-697c7197-c5942;br\"\r\nlast-modified: Fri, 30 Jan 2026 08:53:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FRWVxDnp1oCCgNMqVgsM%2ByaeeFOGShon%2Fg8bqiQVon0%2Bw5Hb1s50CapL5UeAU%2B3xEUezqxzf9Z3va6wm77jLYvKIGII42HdVbnBP32HEYKSDl%2FOG6U4yAj9hO3sUMw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1811\u0026min_rtt=698\u0026rtt_var=967\u0026sent=165\u0026recv=63\u0026lost=0\u0026retrans=0\u0026sent_bytes=144329\u0026recv_bytes=27559\u0026delivery_rate=27281507\u0026cwnd=31200\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=6267\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14887,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13464)","md5":"fbc93e722ea25342b7af79058155f827","sha1":"d256e82bb7f1b956684e6f0c87f998fecf90652e","sha256":"b692237ed6b670204fe4eb601ddc78fec3afef8cb34648c0ccea18ba28b1133a","sha512":"6a8971223f3831358031363b8bce0092520212714a3d9b425be109fbef7e51837d31383217b62131e5bd037e7af4d86c3155100ef569527b501c2ae3b8e7ef62","ssdeep":"384:71yd4Sk6FCT6IZ9bAstA3fVipSfUeGey4o+:70iSk2RIZ9MsmNqVU","tlshash":"3d62b644b2416772d3df60adc89b050ea9bbba186d05289c763bc9c98d74f0c70bfa75","first_seen":"2023-03-11T09:44:15Z","last_seen":"2026-04-04T07:03:13.987098Z","times_seen":1529,"resource_available":true,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":598,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/banner_image/banners/20-1751357235733-slide.webp","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:00.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /banner_image/banners/20-1751357235733-slide.webp HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6610\r\ncf-ray: 9c5fc2600cea4e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:57:00 GMT\r\netag: \"19d2-68639734-17a1d3;;;\"\r\nlast-modified: Tue, 01 Jul 2025 08:07:16 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2Bz%2Bp0vV2H%2BlNTZM6mlitecRh6ZCJEkLYBwFJ%2Fo2go%2F7%2BT9mW%2B0nQhlQ5P0s77M0jCNxzxIDS4yip4zhjMrrvCFsXOF%2Fl4TIHRpX2oglcD2jBMwII%2FmwcToIqoGBSaQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1774\u0026min_rtt=698\u0026rtt_var=1067\u0026sent=594\u0026recv=121\u0026lost=0\u0026retrans=0\u0026sent_bytes=607333\u0026recv_bytes=43705\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=8099\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6610,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1172261bb48d98fb2277ae6ae7cff806","sha1":"c32d1fa2ea7fda58955e301bcf2e64456d1d34fd","sha256":"c5b31b99baaa08e657b2e6941bc3b90bdbda7171d2ef56677dfd18ea29aa48be","sha512":"b471c2423054128e436ff45c83938b4135570de79ee3221ba772e8c2b554fd69268576dc4c3e4871faf057bd8f7ccd1edbe3a900327df73b253219753e987548","ssdeep":"96:rXROLbCv52+TaPC/uuHaJTTq0Ht1CMQPPcGf+CBOBK0yLQewu+Lxe09yD3:LGba57Oen10Hn/QPPcGbh/CuOZ9yr","tlshash":"82d18d85242a49f7f09617ab346890c599f1ad02971d0aaa73fc1a4e1ac6b6f066b068","first_seen":"2025-09-21T15:24:59.06608Z","last_seen":"2026-04-03T22:22:24.723154Z","times_seen":57,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/uploads/2025/03/logo-game-fb88-1.webp","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:00.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/logo-game-fb88-1.webp HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 60230\r\ncf-ray: 9c5fc2602d244e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:57:00 GMT\r\netag: \"eb46-68a573a1-835cb;;;\"\r\nlast-modified: Wed, 20 Aug 2025 07:05:05 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=S%2Bsw%2BdKVyNIIBOdNYXrNF44X1UlCEWdnLm2Ws%2BYUsSktZbCs3CtbBBihJrFbdRSm4T0QKhXKyGPzprFLVdgEQtFsTtOWAP0qpq1cUgsmmUupiJ6LPVzOh9l0U82p1g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1457\u0026min_rtt=698\u0026rtt_var=334\u0026sent=744\u0026recv=133\u0026lost=0\u0026retrans=0\u0026sent_bytes=778948\u0026recv_bytes=44268\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=8356\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60230,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2d102203c09ee7fe2776f5ff12110ad3","sha1":"e086eddb7160c64b38ce4762c31961a7758f8259","sha256":"61ea3146a8bd948edd4e929a8d299083a20489a3d0c648a91cb9182fc7e5628b","sha512":"d3171ceaca34808775b3d7f9fb1f62628f1a2de1cfe8a051ab1920a656a00e948c03d6cf60962b5149bf440dd8d96c2ab44cb15f4eb09b1f91871aac40fac78f","ssdeep":"1536:qZ43WXAr1f0QteDLLBwoWViZ49uZgORy5:qbwrF3tefLRWCsXEy5","tlshash":"6e43f17e1f949584d17bc7bcc9f23b73516af2972184ca28b77b0ee14d2cac80e550a1","first_seen":"2026-01-20T05:16:54.484044Z","last_seen":"2026-02-01T02:44:00.175249Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1011,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":817,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/banner_image/banners/20-1751358349670-slide.webp","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:10.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /banner_image/banners/20-1751358349670-slide.webp HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5856\r\ncf-ray: 9c5fc2a0088a4e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:57:10 GMT\r\netag: \"16e0-68639b8e-17a1e4;;;\"\r\nlast-modified: Tue, 01 Jul 2025 08:25:50 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=B6D3qY1qrihO%2BaM4KpNbsxELe0HlTUeqMAdVFTy%2BItoZYNwwK2hQINbZjp9DuIEyJxPFWiokx8mbh9FrLyI671Fa0uqEc41%2F%2BZZY1EGzoOQk%2BrSIsx22XthwQPXKCg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1360\u0026min_rtt=698\u0026rtt_var=372\u0026sent=996\u0026recv=160\u0026lost=0\u0026retrans=0\u0026sent_bytes=1059867\u0026recv_bytes=48045\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=17967\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5856,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2a3276dd5ded45d83f466122de13ce67","sha1":"1cb634d3738ff315ff9ae44a22f5bc8eaceb60a1","sha256":"fa8eb2bac937e5422733c37d7c9e419c794b40bcccfbefd7fed7f394a1e5ef57","sha512":"a03bbb37b0481bfd5b9c185141b2e9d99b5ea93735165a10b7d1df95a9590345fdff61165f4061323c7a4bc503dbf203bba0a924cb7ea99f75b6ab2a5f593bf0","ssdeep":"96:G5ZECBe1Z2pCp7tLE3Hyuf4ArOAmC1BfdDUV0DxxAccIkGqWlbhk6Py:KXBEWCp7tySuf40DfdDwsxic1kG926Py","tlshash":"9dc19e2dd769c42eee449caf89f0c9ed7781c6f0151a12c73884c1e6c272650b5eeaa7","first_seen":"2025-09-23T16:13:42.368355Z","last_seen":"2026-04-01T12:37:45.17876Z","times_seen":20,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":208,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/themes/flatsome/assets/js/chunk.tooltips.js?ver=3.19.2","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:00.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/chunk.tooltips.js?ver=3.19.2 HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 9683\r\ncf-ray: 9c5fc25ffc9c4e4c-OSL\r\netag: \"9bb2-68a573f2-81427;br\"\r\nlast-modified: Wed, 20 Aug 2025 07:06:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8GZA8Rh4qLvH65FfAP5Z43LhFvrPp8U6ihwP00oFr36vZvVNahx2pvqaXvR8n4nyTd4Vm8VZfpqoeUfaNiivscqQWdRgCe%2BLOHXRoFkcqrdfeMBYxw1kQDrlealDwQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1642\u0026min_rtt=698\u0026rtt_var=829\u0026sent=621\u0026recv=123\u0026lost=0\u0026retrans=0\u0026sent_bytes=637087\u0026recv_bytes=43795\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=8132\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39858,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (39858), with no line terminators","md5":"2bc8c2f309e2c52d9343317c39ca4aa1","sha1":"9232954747196a636b89a57136118574b6a347b3","sha256":"84aaaaf89f79baa42abb3dd2e8eff2e2ef563af3f1b7235248751d5e21eb000b","sha512":"44a1de10d40a4c2da478462586e8e3938168c4481ec81965744493057d4f8515b62fcfd3805c248df78d509e65f07295e31875d15b987fd2dc196230db91acf1","ssdeep":"768:Npk+gInpvUKN7K3TCPHq3U5Hs9Nn1eU6YwlKUqAacA5Ag3KEuP3UtEduE7Hhg566:Mwk3TCPe5wsdAry","tlshash":"1003769af351291246eb62fd6336370f1132812d91c380b4b17c9be91dae507b7b7a6c","first_seen":"2024-06-29T16:20:38Z","last_seen":"2026-04-04T06:58:13.598811Z","times_seen":1769,"resource_available":true,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/banner_image/banners/20-1759920286915-slide-haywin%20(5)","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:12.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /banner_image/banners/20-1759920286915-slide-haywin%20(5) HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:12 GMT\r\ncontent-length: 9250\r\ncf-ray: 9c5fc2ae890e4e4c-OSL\r\netag: \"2422-68e6409f-17a22a;;;\"\r\nlast-modified: Wed, 08 Oct 2025 10:44:47 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rB1mx%2Btw9ZdBDj2DiblMIx0NsmzhCzzl6%2F%2BnYquXv648vuGp%2FNWjtghffGqA5XB%2BWINNoZzQGQj6GbYaoxmtptOxzfi2hlfunZ9kxMsPTx0th65w%2FplDklbF9F5lEQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1353\u0026min_rtt=698\u0026rtt_var=294\u0026sent=1003\u0026recv=162\u0026lost=0\u0026retrans=0\u0026sent_bytes=1066794\u0026recv_bytes=48646\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=20298\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9250,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2df9dd62efba783fccfe629380a70220","sha1":"d03b1c773b68a8ba30c3a7bf33734510e3400a5a","sha256":"cca2b3a6f29fea4eea6efc4f5a8e35209557d56aac4c0161015b80320a0d9ec1","sha512":"5a3cd702dcdd7bee653a5066a3932ba90a15ab1f134d4484a11b691641aaef55411d8fc15bb1566545022e79dad62984cc24d4bc0e95fb0dd6a8fe681c536a38","ssdeep":"192:IdvGu46wFqoCT+17t67ZFF9FAZyVjKcKYMry0bm0uX2bz1g+vJNb6Y9V:ITECKbytUZyVj33M7P1g+JVX/","tlshash":"2112be079949206fed31e14e62783bd8339b20d96b1cdde6aa0f51202ce68b88554d3e","first_seen":"2025-10-24T03:21:12.373699Z","last_seen":"2026-04-03T19:18:30.93751Z","times_seen":9,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":217,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/d251aa49a8a3/api.js?onload=cAdz2\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.www1.co.com/","date":"2026-01-30T08:56:52.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/b/d251aa49a8a3/api.js?onload=cAdz2\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.www1.co.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:52 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Wed, 14 Jan 2026 16:37:41 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://www.www1.co.com\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=6pdYHfV_JU_ta0mOI2Sm7tXsCIc9oKTrUp9zFLc2Oqw-1769763412970-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9c5fc2330dd70b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50453,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50452)","md5":"8a7db0e0bae22d940e720d06abf548f7","sha1":"e68beaeb9b7b3aa74a922a3df2d7294811b62e72","sha256":"1d8e9927430ea86701daa3074746758677a012f2ee4196ce60438b4a526ac10f","sha512":"d7106b476dc2ca5f6f5fcf79fe9e69d72d27b12decbac13cf20bbec28fd7c5e72a920802eea9b15e41803252471548290533da353eec5e66ce9211854bb72083","ssdeep":"768:/Cofu2DMaHL9VAQepxn2tSv+1odY+0rOF8msKULg49Tr7+CuAUyG13PE0okbsO10:Q2gaHL9VAQepFbZdYlrNRg4t","tlshash":"37332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","first_seen":"2026-01-15T11:24:19.542226Z","last_seen":"2026-02-12T13:18:09.210194Z","times_seen":38367,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":12,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhapma.com/media/svg/brand-logos/angular-icon.svg","fqdn":"nhapma.com","domain":"nhapma.com","tld":"com"},"ip":{"addr":"104.21.24.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:59.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhapma.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 03:43:38 GMT","end":"Wed, 25 Mar 2026 04:39:48 GMT"},"fingerprint":{"sha1":"D8:CB:67:10:66:C0:20:6B:FA:65:04:DF:F7:EA:95:36:2F:86:A0:6B","sha256":"5E:EF:E7:1C:54:E4:57:86:F3:A2:8C:D1:20:B8:4D:DF:34:43:4F:27:20:DC:6C:28:AA:AB:0E:12:B8:C7:9E:D2"}}},"request":{"raw":"GET /media/svg/brand-logos/angular-icon.svg HTTP/1.1\r\nHost: nhapma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 08:56:59 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 749\r\nlast-modified: Thu, 29 Jan 2026 08:55:40 GMT\r\npriority: u=4,i=?0\r\netag: \"697b208c-2ed\"\r\nexpires: Sat, 28 Feb 2026 17:30:13 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccept-ranges: bytes\r\nage: 55605\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pst4sVGS7yv3a1KxySY6EAOSGwm2Bqi95o%2FADssWrRoFzif42yPDncGwqXXV0LdKkxSksn23nyXIC0fGlS2WnjRZjKtrBdpAO2Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\ncf-ray: 9c5fc259695235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":749,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"abfc3b93baa0cb512723b5517b79e695","sha1":"816b9feb802a7dd4b1b86e1907ad78ae0903f660","sha256":"1734a79995db278b68ac17e5dbf4026e32a37f13a0ffbe1d8c4d585f169f6e7f","sha512":"caa1a7713604e2b0607dcceb3d0fa27221f3e08fa5c9e8b837270bc0462ae879278c6545367b35f86330f7f8fdaf42e4d9c60d52209b7f09a4095eccf6743e92","ssdeep":"","tlshash":"660165d8d21d780c4904c3d883a8603d2e61f0ef740b016bd88d1600600dfefbf509c1","first_seen":"2025-01-27T00:52:22.183461Z","last_seen":"2026-04-03T19:18:30.919074Z","times_seen":16,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.www1.co.com/","fqdn":"www.www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T08:56:52.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Fri, 30 Jan 2026 08:56:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7vsXRrO7a4KmCmOaiwKffGZjcYP7MGz9k6A5hsO9RA7LDfc2DXyUPf6%2BcWgJdaITxVQKsJA02pF3CMsr7172N6X4ObpzPmMFQjAZH1xymsetRcgKQtSWOX3lZfn0SmoHUtA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9c5fc230d966b503-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"9c5fc230d966b503\", cfL4;desc=\"?proto=TCP\u0026rtt=504\u0026min_rtt=470\u0026rtt_var=129\u0026sent=6\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3197\u0026recv_bytes=1126\u0026delivery_rate=7180165\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=2a8ce651db266ff8\u0026ts=34\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7308,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (7308), with no line terminators","md5":"dccfeef7c6d21557d219db97d741bd88","sha1":"b7968085032f196a92d2feb985de36ccbe67e1bd","sha256":"e6cefac5171ae9ca272e6bf047b59ce86c18e123cbe73e99ad60570fef795001","sha512":"36405283b57f08a732d32fe62f1ec32c332635f07a78b68fdc4bbd2939300c2fa7f6b2280ce3de72ae4b76003f91aacf4d0db24adcce912023a3051d3e6fcb9e","ssdeep":"96:PNybXZtIEb0EFW87IGPIEQuijaFrZdU1rKFuHNRima/i2uEcrRNwbk+T32Yzueh5:PNadBaBxWErKM34RuD9NC37ydw","tlshash":"e5e15dfb9651403773bf9bee84377369d210f1165b098044d9a2aa19c3cad47dc562d0","first_seen":"2026-01-30T08:57:31.180041Z","last_seen":"2026-01-30T08:57:31.180041Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":89,"dns":75,"connect":1,"send":0,"wait":19,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.www1.co.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1693935599:1769761255:T2-BedmRXNWVhggkbSbuzyBOAiPsrsIOk7umNbiIcHE/9c5fc230d966b503/jccH0uPbtv8xOAkYJURJT3.QQ4EDINESkQzOzQRIOHo-1769763412-1.2.1.1-KkSXDotkHEPzAuK300e1kvZ3NQdFd2_iucG17t7nlVIy4cZGf9n6l0_r090D_dRp","fqdn":"www.www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.www1.co.com/","date":"2026-01-30T08:56:55.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1693935599:1769761255:T2-BedmRXNWVhggkbSbuzyBOAiPsrsIOk7umNbiIcHE/9c5fc230d966b503/jccH0uPbtv8xOAkYJURJT3.QQ4EDINESkQzOzQRIOHo-1769763412-1.2.1.1-KkSXDotkHEPzAuK300e1kvZ3NQdFd2_iucG17t7nlVIy4cZGf9n6l0_r090D_dRp HTTP/1.1\r\nHost: www.www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.www1.co.com/\r\ncf-chl: jccH0uPbtv8xOAkYJURJT3.QQ4EDINESkQzOzQRIOHo-1769763412-1.2.1.1-KkSXDotkHEPzAuK300e1kvZ3NQdFd2_iucG17t7nlVIy4cZGf9n6l0_r090D_dRp\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4471\r\nOrigin: https://www.www1.co.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4471,"data":"ZKS7uWDrz9RaibuyQzq4tLiFLqvTHrLwOtKeAQDyo25DbwNtO4QEEWNfJ94aZyICSRG2IVaLBab1CzUrNn3AHvY0yW2Vp-D9SGPXmpu0caHfFaLhEJHRvU65IPbxIkuUY7m4oVCix32jG87iJmgKKvils5gNXdek9h-j8+KvywbZFf0Jndx56i+4WQmj6b6dVK+1lE8waaaq1YD6Bb2gYONCFzVk+3cXPXJNpmhh2UXmb4HBE5+BuiwaNCwBYo8PyDtqd$KYVjIfLllor2pH6bqRCJbF6m2SgagUI-58ah8V2XOm-mfpucAUgWS55KeqFxgzh8AeHdCDrPsFu4ootVIDTJsFmSpZnZAB-CEbx$sQOBOsYxmJ21T5e0JpJJdqKWpTkUzkGPE1h$Tq9ZwYz7f35v8sC1WjLNRrxK56B$SZiT26Ceed52Ow14Z3Ta527xj7d5gx+c--LAZdZZ9vL5NoRYClHcNE3-miH9$TllopEV1kID3kgDB4UizkguCaURK-t4v6IQd54dmSYVcOWIbuYJOEhAkga0Gg1K3a8Ao0yA1xQlEuS5aCvZxSg8ZvnI0bSpQKOWObF3wPxLDvY+npoE4T9BLJ+Kw7ddIqSsBJ$Vfb+gdRq$Y$KoNnvL+RDhNcbcEE1VK9ykcL9h3C8rFd9enc$XJGwCWPvLQ7H6a3Ec0YpPONANxxAC1SZIYA2i2VcKbtZHV-8SnkasizOUaqJUkiR4J-zP-JkPH2sIWaPSVKWsZlw8cQsG1DP0QREN8hlkZltAPEGRNJGtiYeDefxD2HXdSbtbO29Ov452wBjuYNEFotz9T6plCmElCD90zFShSELm1pX1uom-ON3$X-V1oViX088G3aJI-Wu9$IjtsN1f1VDhz-j-fGH5Jcb7UUX8zJu+c1aKC-oyyG9k9Z97aIUseKesLbBWzyfZcXPjXSuiH-mJu1hi1s87DWq5VdtTIggIoBGmJL0cWtEsIvSHSuJlZmgrFDqNDcEnOeH3kQ0R+QArZp1IjTEmc4VVdR8FavXHdx0NIzCLN-Eb7xZ-yeICYgDFBOoDCGEXVFHnaQA6$8ImfhnP7ef7-2d9ku3cb7aa2SgZFLBjTQ7YAacs6ArVvLJHXPv8PhHeSLxX+toeStZyV$LYLzBonNjl--lDZO3l5-1vqxDEFTx-OhUqwrbWoYYRxOESBZwjeAe$IKWFcNXbmmAdtJjFXG$Kf8JTfgKdI55Togcb6gr+yTxO8p8AY5hONQLogK1u$GdNkTB$8H4QoRG3kJH3RFJ5548aa8U9sN88lmzylNNVUiK-IU9LTf0dUDwJUN+$4TxSG4+K6bxdgqttkByGALFApcAG4EWjhgE$xCjIf5Pl4k1jXgE+8h$Z0sV6ukvkt7lsdUyCDl37SES19TCfywI7qXHp5za2EyEw5qg1dInS0Q$fzV6V41hVenyog53b1UsTn7wUttT00ZtGnB67W1fmLhIuuok-YBemfncRi8DDf63LwH9O2wstTG-+k4lnRx8sLRnXJzPpeyL24Q8vD2mz96vdJO9heWgC+Gx69eGJTLF2p8d$hweRsc0vJFS0v3WU33$ZDd6nl4jU-TCmSyouTyUBlt-5Kln3w+BZSgeLDfwN-xsfLb3iTjG$CaXsze7+g-3L8SQXPNdcPRb7YneoZWIf-fDs+ZCoG$LIdDNnoTcU+OOVR3WH5-342Q4m-0QFLYozhZGIPOrD1c+xuvXokpG7N+i+pY5QsH7b-V69S8IU1$yYoEbUl1jDYR3Uw4NYRsUma8m6HpFX2geT0KdIB-kyXpkeJX9eYb6RQyR4YmzJxToT9iA050+-zZ7TDAYe3BZ05kHVfZL$3e$Fw6JZ18Jgrw2iCU1X--PeUf0Ztq+V44ok6shI3P-ryRuiRZl4ZSl8WGd3spk2uupLPYIh$cf-CAkWI+WY1InSunYq1OY6ShyjuRvvsW6ov7hUf90JvlFCBD3AFIQga2vwTeAImGYnPcCVyWitiopySVoUZQbiHix$7rWfWPiGUhTCPTueyBIU+bzugb56lsg2vKCz5xjrjALlDhaOcxXpv0gddwakbysXygRTEhmPmI4HIxinUOhJb8xyqWUctg5+$x04mEPaP5H66GlrIkcuuWs8I8O5KOfPn8Zn5TZb8zsJRhLetXhONmopG5duO8YNTgcyRFsNgwV-0WSTEO5kZe03SshpsfX$yAej9sm0jZWEtQpz2ETfQXWLwRL$QbVk56Bko+R6E-OwkuR5mulX1zx-0eSCE1sshO8e7ciURr6p7plFLS+Y9$R19Y3BGD54yb5S02fpZjsAig1vg-DYkQmiAgB0jtUsEI5WtutgsrdQuqZx8D5AVJL3eCbrLhyWW$EaH7sHxVoPU3qVlYYlUY3qEY7ofPG3yNX-qcbzlPZCzG6v0LLCuXHQyP0FfSIRh-0qDCiKaaNl7YPiieQ7uRsa6KPtqxbcmwQd9BuE2IPfJfmN9LkVdKBCU6NKTXe-ssJEdFYbKlyE3ietLBvpZGPz+iWLyVqwnl+LW+rjlTSgKQdQ$JIZ3DDWW5l6ubAPmyLyn4-cf0R$K3t8bOs8w9gEIwDroujeuxZeWAJ-LjHoKg5U9dFbz7zXjOz6tc9ckdxR-acJ73u25fcU03X3fqxNnxbxdZSHnUqbR43vb5bns56mr+-YTK15BR9-BWr2ObqW34kbhuOCQRZ5VeLglgpv-gCXzIq2S9q84FkVLUA5OwFsYbbuQAsQ1Fy1lfVl2nHNY$sH4Ih4A0FI08LwbcU8xwiys-UoBcLthzOPC$I6VWEZ8$7zIqFlkGHIkLJsuhSVD$g$I4P1qoTJe3LVfsJz7k68gkPQWHTeVvFxHSlawSw8X62S1r5-E2mXdKvIOr3hHkvRovkcuoNcQ5mTKP8gOe0hZG3CT6mRYa9UZyx7L3BCj353keguwFzxt6gu5jHkE0-qSsIbCYCDe-eZj$wGn72uFGlDKNk3C6cHFUAuQIkBS+dtKFcF8VTzXPSUe$eUYwPeeCe46uw9hT-6Hnz$7+p4aJQ++wNqC+zI$BJSwCJtxfDhcEAuj+imB95rO2i$GKRE1pdq9JgLampi-c5rt0lUvB1xve2GgOeWUTwivNg0j-nxfdLTRobzxjsPU6g38F1FdJg-nAqJEDntTTseemYOmGy59LXWyYDGRWsJV8ApALYkCKssI96WOn2D1rXxSzJwqfKsCJ5XoF$5F7rAL7OjXsHdQuCsKeiTb4qJZ$ZpArWkfLpxbo48yel5+vjU5jtsEJAgloZGUDDjl3ndjLvGswAE264963S5YtQK4wxumJseiVyrfEFVbadob6hyaCt-0Vtg9SVYduV1fZYhxaysjPXyQZIEfZBC4ZpGmxdlvjKfYQogIDeEaq9RfhhwufglgOGf3n7qjv4Cmpo80ImbyAKDSZwO5065TDB+bkkuWc2pPYNqTEhtvOS2NxfE8GtImNIuGOV02WQ3dsiNlhZl5tD1kXXtmpFgbuQLsixqmlSk86JzoViHBlK4be0Ix01NmuctVkiwVUo59D$15pCskQHscnZ7aBUNqAEYsR6tRNZ6-u5fuRJZamK2iR5vIyHOE3ZpaP67QgjjdJdEA4Rwb-YuzjCia-7WCUxjTqLDTB7B9VIiwQJPNEOHG$HcsVeEd8ZjSOGRum5zJJ+Bqk3GxzUhJn9ryOHnzxnn7+Q0PJC7JG9LTgBEckt3-AlXvTdY5DF9Cv4RIhYwhOylBydkmwroLS1e5qmW8KiD4ogmH4vwo9tbvuFoLS+Vsk5ieI0f1E8We+kFRrsB3AdivQx2EiTbaYnqQaVBr17Gvou0I9vUEqoq2adAc+oTshYzzn6YhLu6x1G4NHIwns1OU3GVNQWC-B6c5QV0kTVrpk+hLOh-3+$fwmCYvdyhO1FOknQAJjGO4$O11jH6o9TIRzG0zduIWQhV0CJIuCz8tIQXgUtUfCjQ+xK9VKflweh9YO1Q5wy96r6NQIiJkVy2SPLwGuy1gsw$S$YYP0TISm2ehT+-lGR1WYLexsa3qbz-koahAeeEma6$jqB4px45UQbegDcDPJrV-SC0vCYrUw7Nog+HDUhQPN8DrhWTUbNFJZhXolSemkyS3lU4t67ncOKUDHcyjueyz3lQ8G7EmBooxlABcIulyJD2FPsRgcezbJgiTJUSnXnTgv1LK6WDn6mGBdWL48$wOkdHc9gw-gW9nWtV6GNn7ZkT7ve5Bx31Ji78CEtqOTaXcirXVlybVU1c1hL0zeoQ-IRtcZFsOyQrX4A8yQ2qp6FFW0C24OUBIOZF6nk$A4+$pUHuoxJi0sUKWHlxJJooygIBznL-W4mXLecFNEJz+wV8vCa79$u7VzuR8TBafAN+SyABz7HL8kSJByAn5l58DPyBtqmPQCokSBK6+7Cpb7HF+aHmxoLwf9$P6UZ-wYQhbpsY1Y+en1y22c$vh2oSY3c-o8vOiORDJqi2GY32-"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\ncf-chl-out: Ex0H2fPjlKvteLg9SU3F3c9Y1EqZelt9YpEwbHN90dtRwHqK3ewnf7jGjoTVHftblJCpkAqRnU5KuQxy2nQ7EXZA3o9NNYSLef0SRsDXjIeji4ei8UQum6LwT6ZBPLFtNBYF27DUayhimgeyJgj6zLggY8dy2bFnbljIzsRMZp4=$Ygjb3IF1ZYV/FWRwdkks0A==\r\ncf-chl-out-s: ok2IcL0Jsq9MjF7QdtzrzlY81uN1RRFk3I6qPcToeqKweogYuWTJFKe6kcjlPQG34R1ikQNLRwKybV49vr33AqGG0hpcusG1oYPhwoSdNeQer/qNUyxJRPzb+mBrcguGwU4EiBVE7g7v/yQfCTuL0ZrNQx/1o4QEpMR94StfaaI7Vi7ajAznOWzStD1ASinfDkgBGwm53q6OtR9WelkNNuZeO3p9uIunJdSESxuTjWQ8undRjk4kXiEt7aNK/bTlDm2UTEbnmAs3jAQWb1mVdqMhMCwKz+DSNXKmJTOluwyGDKz/uaalDPVr2IEHVJT9dMxre8FcoVVyJVdDchtwcIklqBOsvt+hlVyyV9/D2bT7Y8pjWui+J8vPhrJ/HdZP$6zvWKRnC6VOorA5cTQMx0A==\r\nset-cookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=www1.co.com; Expires=Sat, 30 Jan 2027 08:56:55 GMT\r\ntiming-allow-origin: https://www.www1.co.com\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rR2VgoRrf4bQV5A6IiCt5HyFMIa6F8BY3mC12tHLjc%2FnfR%2Fr9b3tZU1LCoavM3RV9P8m76nnBAJnuktp8jfgtdSiLeH9WD7brVxjybaCAGeH7rB3a09xxntJTFC%2FmczjPdc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9c5fc242e8c34e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2142\u0026min_rtt=698\u0026rtt_var=1661\u0026sent=83\u0026recv=26\u0026lost=0\u0026retrans=0\u0026sent_bytes=77611\u0026recv_bytes=10442\u0026delivery_rate=27281507\u0026cwnd=31200\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=2911\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4080,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (4080), with no line terminators","md5":"35992b29201fa3f86b10accf562cd380","sha1":"53abbbfbf05dfb65b8374c5328228b153942093f","sha256":"a4507fd5a2a40089bcfe288d98d8e8432a3f16c131dc6e0f0152ca7a320612f3","sha512":"280461c00806fcc6644d7fee524765fef4dc2def264f94cc0ba07698180dc6a243b304e3a2d5ca75c844dcbdcba75ec7a53ffad32528f9e1ca6a06ad8c33d4cb","ssdeep":"","tlshash":"ca815d3dbf4b20b29e7da055e4242fb8be53db493007998ca96f411ac43cd41845e95b","first_seen":"2026-01-30T08:57:31.181238Z","last_seen":"2026-01-30T08:57:31.181238Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/banner_image/banners/20-1751358066386-slide.webp","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:00.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /banner_image/banners/20-1751358066386-slide.webp HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6574\r\ncf-ray: 9c5fc2601d0b4e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:57:00 GMT\r\netag: \"19ae-68639a73-17a1ea;;;\"\r\nlast-modified: Tue, 01 Jul 2025 08:21:07 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pO9qIy35RblEHJmXCflb5CNU9hKJ4YWIEL%2FHxasqN62s1RVoGNlhjDmCXHz5K6BHfeKJWXF4ZC3HjOHOB6FgoZ5SyQKY7BB5raoxZH1CvikYRkgkRweMpeleUzn6oQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1518\u0026min_rtt=698\u0026rtt_var=496\u0026sent=644\u0026recv=127\u0026lost=0\u0026retrans=0\u0026sent_bytes=663198\u0026recv_bytes=43979\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=8159\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6574,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a0c60bc78d4f6adce075513e0d83fe49","sha1":"99a203e4cb0595050bfc433ebc9960ff7fe9f4b9","sha256":"b7d49812c48a3e65346308fb186668b827c95772cb9bafdc0a1395c1b3bb41d3","sha512":"2e5fd1a8ca18ff0ed56cd5da005a547d81af8992615b09a4233f1d32f0dffb323092860a3d762ea1858e396bf98bb35ad90a396bb5296175457ce95d248d2986","ssdeep":"192:J+MRtCD6+Y3qVhn0YpDBJnp/Y3xT47yONlzv:JpzL8Lnxpd9Zki7yOz","tlshash":"10d17d6fbd5b1c55afa41a2dba817f25109dc30690e0629eeda83154c772ac6f00d434","first_seen":"2025-09-21T15:24:59.081972Z","last_seen":"2026-04-01T12:37:45.184836Z","times_seen":26,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":626,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/uploads/2025/03/logo-game-fb88-2.webp","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:00.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/logo-game-fb88-2.webp HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 75114\r\ncf-ray: 9c5fc2602d274e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:57:00 GMT\r\netag: \"1256a-68a573a1-835bb;;;\"\r\nlast-modified: Wed, 20 Aug 2025 07:05:05 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sEJof1jfudsPIXEo1lloRqCVCfAqj7EjclfLzq%2FwSRBivmq98GGT0Gq7kWv8jREKrSuXoY1Pjt3c2PU0Exjf974ocpxnae5NSdulLjMMrUF6EfrNuWpviIOuosdPdA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1393\u0026min_rtt=698\u0026rtt_var=276\u0026sent=715\u0026recv=132\u0026lost=0\u0026retrans=0\u0026sent_bytes=744469\u0026recv_bytes=44219\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=8349\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75114,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aca7c530e0e1940918051ddf988d5f59","sha1":"419ad02a38c597506789007a549bb5856e117ad0","sha256":"1745248913b08356603ee8ceac7378e75b9adca30cb920432c6f805f6a91c16f","sha512":"a4919bab4578da085d8295c8ad253c18c6d01db895fd2383a90b0218118c33fe9c323eedcaad6af474c031a01e86d335d6b346d2829752e9be1e04f58f93ac49","ssdeep":"1536:dahw49EdlnVyzmIWGTMIBs006bKufGDgEyqKCJ3aaeAhOvu23:demv0rMA06bdfg7KCJaaeAhON","tlshash":"217302804c8913b2a97c9f6e2eb54e1bc665a1edeed660c4e17ec430b110defc4654be","first_seen":"2026-01-20T05:16:54.50787Z","last_seen":"2026-02-01T02:44:00.165928Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1004,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":810,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfAZ9hiA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:59.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfAZ9hiA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www1.co.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23664\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 28 Jan 2026 17:26:58 GMT\r\nexpires: Thu, 28 Jan 2027 17:26:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 142201\r\nlast-modified: Tue, 09 Sep 2025 18:36:19 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23664, version 1.0","md5":"da03732a27e16543f09d6a6a62b0cdd4","sha1":"68f645c6b6ff12e25c54b13d4ed119e631dcbb26","sha256":"8909904ab6c872eb994093482a88a28eca2cd95912d7b6fecd72103b0dc07edc","sha512":"8f8a1b22d7fedc8a5c0b75a237932fa00b71d25b1c13d1ec6f9c31fbeceba5d7e1a728a06fc3c2abd803337617394f91d2cc08e9798417b73e3587da3b9d882e","ssdeep":"384:LDIByvvcpxzNfjZ7amidC7gcUH6rpfmzO59sT+m+WFg5ivhjpaBNSS6X:LMBYabZ7aXvaVfSCWSogoSSSi","tlshash":"fdb2e0e97b5be3e2e077c67d41bbdf94e64c2860435e4b830e24be14e2d24fe6484416","first_seen":"2025-05-30T09:01:41.826892Z","last_seen":"2026-04-04T06:42:43.767058Z","times_seen":7994,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":83,"dns":3,"connect":20,"send":0,"wait":22,"receive":21,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/litespeed/css/11115ff4318f04c73b1927365c93a510.css?ver=3cbbf","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:58.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/litespeed/css/11115ff4318f04c73b1927365c93a510.css?ver=3cbbf HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:58 GMT\r\ncontent-type: text/css\r\ncontent-length: 153\r\ncf-ray: 9c5fc253a8484e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:56:58 GMT\r\netag: \"130-697c7197-c5930;br\"\r\nlast-modified: Fri, 30 Jan 2026 08:53:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rT3nVXM4IPVgLzShTIR9VAqAnSwk3YcuLqaWlvi7fLJhOLi8EyKVlnBO04L7bcN7iqPhofBi2HaNqkncNtZK0owfCCUZf%2F3ZIAKsbUM%2BU5kM2g%2F5hpwmlHWaJoQOeg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1888\u0026min_rtt=698\u0026rtt_var=1086\u0026sent=159\u0026recv=62\u0026lost=0\u0026retrans=0\u0026sent_bytes=137789\u0026recv_bytes=27513\u0026delivery_rate=27281507\u0026cwnd=31200\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=6191\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":304,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (304), with no line terminators","md5":"5606444e07aedea771160bde4c8cfd5d","sha1":"35487155e1381cf6373e921b6f27f752e36833ca","sha256":"1e363f8e058e2890cabd90eade7186eaf63a8b4701a66c0b60819499f7cb129d","sha512":"0286da58bb65d35eeec68e36f672b0ab663691c0f6cfffb81fc13fa68ec9765ff95a8088d57de266f89285f25b201f444bf409fdc3269ddf3f8ca7a914cc3a46","ssdeep":"","tlshash":"4be0728ffc9228d931034376d2d8fb3a2c7109d00984aff9a82023900f80da383b0014","first_seen":"2024-08-20T14:30:28.980511Z","last_seen":"2026-04-02T15:30:58.727673Z","times_seen":42,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":646,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/litespeed/css/58dca2ec740af93b36dfbebc8b0d1caf.css?ver=21956","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:58.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/litespeed/css/58dca2ec740af93b36dfbebc8b0d1caf.css?ver=21956 HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:58 GMT\r\ncontent-type: text/css\r\ncontent-length: 463\r\ncf-ray: 9c5fc253b8904e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:56:58 GMT\r\netag: \"77a-697c7197-c5939;br\"\r\nlast-modified: Fri, 30 Jan 2026 08:53:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1UNfy9SVN9gfsR6RwzhSdXvexOTLEMJOLrJ7UQhSlZJ10WQrTTOkpw4129oUVGLImPraLBvc4y%2FY%2FgWy2sfm093WIPitM3w6djSHnuiYorCIkFojeLQye3s1CqV3Jg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1972\u0026min_rtt=698\u0026rtt_var=1223\u0026sent=157\u0026recv=61\u0026lost=0\u0026retrans=0\u0026sent_bytes=136414\u0026recv_bytes=27468\u0026delivery_rate=27281507\u0026cwnd=31200\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=6189\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1914,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1914), with no line terminators","md5":"71fdbe2beaf0dd976d7d6c0059d261aa","sha1":"f8ad0a59f7714bcf5e1c1aa5503be5691233e7cb","sha256":"76b1095bbfa6702a6a7b725f00c0c8a012b9a1edf22ac95c9b470f924f1efe28","sha512":"c8b5a2623055147f53b2835a042ba8eec93e9b8413fc1c1bd083b274b49449f5dbbd42d44bbfc838c387bec6e7ee40c055abecc8ec3bd2ab7ac6388c6f8ec531","ssdeep":"","tlshash":"a3418a73cb01113ea3664f9d66d2da6df7e5ca01d2071da9e2d15499c1e60f3202dbc8","first_seen":"2025-11-17T09:24:11.527581Z","last_seen":"2026-04-04T03:25:05.532356Z","times_seen":82,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":632,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:58.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:58 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 29597\r\ncf-ray: 9c5fc253c8a54e4c-OSL\r\netag: \"15601-68e8a518-8023b;br\"\r\nlast-modified: Fri, 10 Oct 2025 06:18:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RGu0SFWSIhS4%2FbMq8v64mjVROfhCTsPTV%2FkFye%2BSIzZrmNgjWR%2BZNFk0hdAcksnsCGYrktYuTwATXqzv3PAVpEZHNrA1S5hImbaDrpwUkVfSgxYy78rkFr6ZjmILeQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1723\u0026min_rtt=698\u0026rtt_var=873\u0026sent=203\u0026recv=67\u0026lost=0\u0026retrans=0\u0026sent_bytes=184240\u0026recv_bytes=27741\u0026delivery_rate=27281507\u0026cwnd=31200\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=6346\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T06:45:53.422963Z","times_seen":684722,"resource_available":true,"data":null}},"time_used":787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":786,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:58.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:58 GMT\r\ncontent-type: application/javascript\r\nexpires: Fri, 30 Jan 2026 09:44:58 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ojkBsInkyomi4vw5QAmuz7C7KqM4axJdiCtiPJxm9hC%2BmymUKfjGZ1AJUvXTneRgSGmjaKvzm2dAsw9lIRROlURSE8NJQB6gow7D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c5fc2546a704e4c-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T06:46:11.711517Z","times_seen":291862,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/litespeed/js/429c201a60779d872a375914b02afc70.js?ver=e7bec","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:58.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/litespeed/js/429c201a60779d872a375914b02afc70.js?ver=e7bec HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:58 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\netag: W/\"79-697c7197-c596f;;;\"\r\nlast-modified: Fri, 30 Jan 2026 08:53:43 GMT\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BLl1QWuHvNdSzewh139t7j8OGe2epF01oorVU6IfaUqgUcRcM4E75ea9NHYM4X17sVtmHOLYpy6aoQwTADIssCODgxotSZyQasAQe9ODQDS013sUu9IrlOdsmDv%2FpA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9c5fc2547aac4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1723\u0026min_rtt=698\u0026rtt_var=873\u0026sent=177\u0026recv=67\u0026lost=0\u0026retrans=0\u0026sent_bytes=153699\u0026recv_bytes=27741\u0026delivery_rate=27281507\u0026cwnd=31200\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=6328\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"c5b6af2a294ba85ae750e175245a9c66","sha1":"d4ae983d0aa33e4c6dbc4d15dcc04e6ceea97f9b","sha256":"9762b8e9de923d542c466ec97d30c34ed36ae912b9ab014523b2b294992eff2a","sha512":"15c9f6ec70e4df7762e00431c9bf7705f6990d5de66101630c9381a855024eb4d565c241666512adb531ed6d9a2ebcf5320f89f6ce17b7b859b6935822dae1b6","ssdeep":"","tlshash":"c0b09b3d7c74657e056751555077990591337d41d6014c14635d32505c3d274046750d","first_seen":"2025-06-23T02:22:53.051134Z","last_seen":"2026-04-04T07:03:14.000441Z","times_seen":289,"resource_available":true,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":651,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/banner_image/banners/20-1751356968482-slide.webp","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:00.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /banner_image/banners/20-1751356968482-slide.webp HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5956\r\ncf-ray: 9c5fc2601cfc4e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:57:00 GMT\r\netag: \"1744-68639629-17a1d6;;;\"\r\nlast-modified: Tue, 01 Jul 2025 08:02:49 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=h5F5tz25B%2FPJYZMH5w2yrZz8EzsB530S%2BmL%2FqpztWL983HGjkvBt%2FNO0bpQTiXilqnPYiMO0v%2B6fRvKLGvJprE%2FvsbmAPyX5zQNM6c9Vfr6HNsB0f82tvl9R%2FlwxzQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1583\u0026min_rtt=698\u0026rtt_var=488\u0026sent=637\u0026recv=126\u0026lost=0\u0026retrans=0\u0026sent_bytes=656165\u0026recv_bytes=43933\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=8152\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5956,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7fad3eeeb673fff48dd23894ca105e1a","sha1":"28fbd7fab1b616e42cbede837f3bf1db3be29ac5","sha256":"a6566183686f37d10f96fc7f1ccb13879361471d801609b46c119f012cd58d3c","sha512":"9ef21b9da10554a55ee4dc8cc81af5205e953ecbefccf76b813e35bf1339914f9f4755e1df6aa9d6fe234b7d1c4456db71365b1653ffcaae2fb8c23355039b09","ssdeep":"96:MVLWQglOmrpfXzwSd904+rNrqqBUM5htT39DtUDQBeHPhnl/ZOG2Yl0zhsPkvxkY:yjgsKpfXkK904+tqqBtJt6EUHPZp4dYu","tlshash":"c9c17eff64a24683ccdd275d207a068cd9562f42e629e264fca90fee0556a28b1740d6","first_seen":"2025-09-21T15:24:59.00688Z","last_seen":"2026-04-03T22:22:24.789036Z","times_seen":57,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2?v=3.19.2","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:59.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2?v=3.19.2 HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7560\r\ncf-ray: 9c5fc2597a7e4e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:56:59 GMT\r\netag: \"1d88-68a573f2-8144a;;;\"\r\nlast-modified: Wed, 20 Aug 2025 07:06:26 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7miKVyZmtGO2d86x4w%2BMY0hALvOJG8l7zJqSg9%2FS3DIqa4WG5fQ2FIm6CeCh8iw0bJXkT6YCY1snhzWSk4IA2vhMctJWb5qO%2BAkZEhtpDjug2HUf%2FChSFWXWxJAQ%2Bg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1361\u0026min_rtt=698\u0026rtt_var=502\u0026sent=427\u0026recv=88\u0026lost=0\u0026retrans=0\u0026sent_bytes=435700\u0026recv_bytes=31551\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=6697\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7560,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7560, version 1.0","md5":"7db70d75ed20d444c694d6aad85ce18b","sha1":"01d64f5ed7777e34c148c83595b877d0f6272d4b","sha256":"3c5b7d55b56f4bdee9e362078497694a9605b716868eb907b7e9c39bc5b5b9cc","sha512":"ad05e1701fe81d050b8db6574c28d9ce9c12242fb4cf4d6d4c5746829574ac2b38029cccb255d21c4b0c2d60d73854894c5043245c3ccd733017b60d1ff361a4","ssdeep":"192:mdZdmp7xgnbaRx9fo1JQrUo2Vfah48R+Q/BE99D5q7PKJ4:+ZYpsbaRxphAYhbRD/BE99Ep","tlshash":"faf1afddfd527b7bd2d1d126394007c838cad44919901cc2aaaf2f2933a3c569db27ad","first_seen":"2024-06-20T14:33:16Z","last_seen":"2026-04-04T06:39:30.966967Z","times_seen":15530,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/litespeed/js/7df216ed932b3adc8bc6a686c071524a.js?ver=6fa4b","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:58.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/litespeed/js/7df216ed932b3adc8bc6a686c071524a.js?ver=6fa4b HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:58 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\netag: W/\"b3-697c7197-c5972;;;\"\r\nlast-modified: Fri, 30 Jan 2026 08:53:43 GMT\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TIHnUDEBcgCDz6twzSXQThSLHYPCvR3fwBPDpnUHtZfCYi%2FypD8fyDqsjCfItYdLCtnaxo1vOeQ4uqIcSXBYuBGYVt5%2BceRW%2BF%2B3AH4Xhv8SG82fe0hSYPVBDE9isw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9c5fc2548abf4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2001\u0026min_rtt=698\u0026rtt_var=1105\u0026sent=170\u0026recv=64\u0026lost=0\u0026retrans=0\u0026sent_bytes=149716\u0026recv_bytes=27605\u0026delivery_rate=27281507\u0026cwnd=31200\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=6284\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"e2be45d7e3d39df2143a549e0c038fdc","sha1":"8f38ceed2911fda2b639355d96fce0e8d4ccd929","sha256":"86514c920787c25b232f7b805040267680382f14a47bbd071b7c6c70936c19cd","sha512":"fd85e3141c0cbf541b7615edc48197c7f5508f0528ab6c444a3a05db3eba40ad813c4c1b1da2b9d4e64f2671fc961938d6eb7f297eb7d2d8822dcd8aca685411","ssdeep":"","tlshash":"0fc0125c311c55521cb7027bc49294045b132a05e7478a468e0aa95c3f5829df3f361a","first_seen":"2025-08-26T05:42:28.824263Z","last_seen":"2026-02-19T10:59:34.429384Z","times_seen":34,"resource_available":true,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/banner_image/banners/20-1751357349743-slide.webp","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:00.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /banner_image/banners/20-1751357349743-slide.webp HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7210\r\ncf-ray: 9c5fc2601d034e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:57:00 GMT\r\netag: \"1c2a-686397a6-17a1da;;;\"\r\nlast-modified: Tue, 01 Jul 2025 08:09:10 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gL6qo74CHkXJLyWOdPlDlgUL%2BxZO1D8ZKsZt8%2BdLVS%2FYr1MxRSTTWO8%2BVupfCvH1RkV53R%2Brx58Dr7pYS%2BPy9B9yIv%2B6mqzOV0sOIw%2FBFdKpVUTOE4GhjLFOr5dKeQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1568\u0026min_rtt=698\u0026rtt_var=610\u0026sent=630\u0026recv=125\u0026lost=0\u0026retrans=0\u0026sent_bytes=647877\u0026recv_bytes=43887\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=8147\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7210,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f5895491c368b249434aa91c55656c7b","sha1":"7849368406da81661a761928fcd6e596ded148c0","sha256":"8b2b98c7fb298a927b200b1fe8c019186e1ab8cd6ccc50e3f19b4ead0d080224","sha512":"e6d91e93b914118e5887c02ac07115395de0c3cb115ab5748aaad9b93fd5884371025447b2ec6e7dba430518f6f20a62c1f28d75d6df450932f2422d909831dc","ssdeep":"192:8kWg9jZSIVouMO/N6/ErGe4RoCVHKIcHZjXu1/X6:NWg9j2JO/IMT1CqIcHZj+1P6","tlshash":"20e19f04579bfb42fde3e5cc74a3c89eedd0c3766215d5406b1f2713091a06e4340679","first_seen":"2025-09-21T15:24:59.050445Z","last_seen":"2026-04-01T12:37:45.213984Z","times_seen":28,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/uploads/2026/01/khuyen-mai-vip.webp","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:00.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/khuyen-mai-vip.webp HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35196\r\ncf-ray: 9c5fc26179744e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:57:00 GMT\r\netag: \"897c-69565f77-1271f;;;\"\r\nlast-modified: Thu, 01 Jan 2026 11:50:15 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=z0gn%2FdN9Kwvv6tVGDVmrE9btRvPS62m5PEmS0TQw1Zx5rB4XEgC12YFMlQBQofahKLx2XcGykrY7c2kHNkvbvoDJimm07J45qBaubGNCLb8crbaU5gE5aH%2FaW82Qhg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1380\u0026min_rtt=698\u0026rtt_var=279\u0026sent=830\u0026recv=141\u0026lost=0\u0026retrans=0\u0026sent_bytes=877527\u0026recv_bytes=45144\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=8536\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35196,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5411e30154f91d50235358855e06a356","sha1":"95712db393f5740a1eb8b028b7a4d1fe6b0b501d","sha256":"6fa63337b526186b6d69389532c003a123b7c730434d458385139c05d1207baf","sha512":"50426bf970a903918c89a9e554805bdf09fa36697fe6d61792e901611ae0bb1cdafb6fa641e22ec26b94154c89684c5d72498e33bdcbf7eda5b4932216e03ea1","ssdeep":"768:l7u8mMSaK+5+oXAqItue7tmTe3qF+XRwurD:VPKDoQ/tuGqFm","tlshash":"f6f2e047d1b5042aec70bb712c744181e7b0ad198f4d8ac6b739905fe5e6bb07a0eb22","first_seen":"2026-01-09T01:02:05.528576Z","last_seen":"2026-02-01T02:44:00.225699Z","times_seen":4,"resource_available":false,"data":null}},"time_used":779,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":778,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/litespeed/js/c8603c5f2b12843b83a145163c26f90b.js?ver=85712","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:58.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/litespeed/js/c8603c5f2b12843b83a145163c26f90b.js?ver=85712 HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:59 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 40370\r\ncf-ray: 9c5fc2548ab14e4c-OSL\r\netag: \"25ab9-697c7197-c5970;br\"\r\nlast-modified: Fri, 30 Jan 2026 08:53:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=iyb9u5RCzlEwasaaWHYLGLRI0ANrAbE1baRFc0v6koV7jAZYeec4689iy8OzNhaKIjvT4QOJrjop2W%2BjAqi0L5WEEB4rAsM4KCt5Teple3c2cJ1nAq33Zr9HbcCVgQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1816\u0026min_rtt=698\u0026rtt_var=1304\u0026sent=286\u0026recv=78\u0026lost=0\u0026retrans=0\u0026sent_bytes=275591\u0026recv_bytes=29971\u0026delivery_rate=27281507\u0026cwnd=62400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=6477\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154297,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"48542f784cfff02bc6dfcbd869519421","sha1":"f61e7190d31059db1e3140bfe815646462dd0d2d","sha256":"09a5a63084018aad19d3660e823ca758a19ebb1f543d68946609ebfb7d9df880","sha512":"1dd0fd6b938d15ba9e17a9b21d942dba38e7454f21983902ac540eb9c7ab83cd9eaab76149f3310c5a103081d6c02f8fe19f595eec564b1b0b89c0f8398d9123","ssdeep":"1536:0KJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQrP:BJebsNy1ikuGeBnR/TDQ9chHdN+uw","tlshash":"cbe3e789a221b67646e3169b93e4c211b3b50544b80ac4f470fd4c9f597e89c13feefa","first_seen":"2025-08-18T13:40:56.491907Z","last_seen":"2026-04-04T07:03:14.01907Z","times_seen":275,"resource_available":true,"data":null}},"time_used":984,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":798,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/litespeed/js/9eaa67db7ae97f778af04d4f68c28abe.js?ver=9732f","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:58.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/litespeed/js/9eaa67db7ae97f778af04d4f68c28abe.js?ver=9732f HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:58 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 457\r\ncf-ray: 9c5fc2548ab84e4c-OSL\r\netag: \"467-697c7197-c5971;br\"\r\nlast-modified: Fri, 30 Jan 2026 08:53:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ciZt8OCkdGrWKBvp7nHnZQnvMKirkZ29tArvFaM63oMbKM2pb5nx2yz88s9QubulubbWaZmsoEukv8nSFHawQrKEq3nzqRFgDY3EegY6CNGcpIQ8QX1AN2sW7ROypA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1791\u0026min_rtt=698\u0026rtt_var=981\u0026sent=175\u0026recv=66\u0026lost=0\u0026retrans=0\u0026sent_bytes=152335\u0026recv_bytes=27696\u0026delivery_rate=27281507\u0026cwnd=31200\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=6302\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (425)","md5":"2747b812d7cb99aa87e7a7aaf83c24a9","sha1":"67bd4986c62ad7301bd2d881887825d5c4115f11","sha256":"fc54d34d140e785ec5673b98b0e1573a5bc541fcf7203116f3b0e9db6c8b2055","sha512":"013cf69ace69e73c88c456ef566fe19144a8ee5346ebd1f30c4a13bb0508578067262d62754f12ed5b2d8a7745a63aaa75e5a784829c8d133c8eef0a2bf4e839","ssdeep":"","tlshash":"8a219727e3343072a4259d7e2bfbbb01a0e21203d442c5f186245c9ec9785a32afa5ed","first_seen":"2025-10-03T23:56:19.489986Z","last_seen":"2026-04-04T07:03:14.004337Z","times_seen":270,"resource_available":true,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sqlive.io/wp-content/uploads/2025/03/dark-green-gradient-background.webp","fqdn":"sqlive.io","domain":"sqlive.io","tld":"io"},"ip":{"addr":"172.67.207.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:59.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sqlive.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 18:49:42 GMT","end":"Mon, 27 Apr 2026 19:47:19 GMT"},"fingerprint":{"sha1":"98:0D:F0:FB:00:A9:60:91:13:6E:D1:C1:E4:A0:9E:22:E8:9A:2D:90","sha256":"FB:A6:8C:17:0E:81:ED:C9:41:57:A6:41:F9:99:3B:F8:3A:03:6D:D5:3E:89:04:F5:98:40:C2:AA:9E:62:9A:06"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/dark-green-gradient-background.webp HTTP/1.1\r\nHost: sqlive.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 30 Jan 2026 08:56:59 GMT\r\ncontent-length: 0\r\nlocation: https://betweeneastandwest.com/wp-content/uploads/2025/03/dark-green-gradient-background.webp\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2rriWVg3HkqFM%2BKIRk8ZxSGDkLTCtUHHvg4Rb1vi%2FAxkIEr0C85MREV5LN%2F%2FRCrafHmNfQCsUCG0laS0zAktdqJPkMIJKRYAmw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9c5fc259efb9c759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10762,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":75,"dns":59,"connect":1,"send":0,"wait":6,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/themes/flatsome/assets/js/chunk.slider.js?ver=3.19.2","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:00.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/chunk.slider.js?ver=3.19.2 HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 12877\r\ncf-ray: 9c5fc25fec834e4c-OSL\r\netag: \"c2f8-68a573f2-8142e;br\"\r\nlast-modified: Wed, 20 Aug 2025 07:06:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jol3s5V9QII%2BipUg3BjswYgNSRLFWgbjUEUx8Jtb8Q7jlhhmCbUBV29tDYTGsPYFqWnK9fgfVvbqS2jH5PvqqYb2zWTu1PUIJyFJH1dhAn9%2FsS4frSquAWIoMRRvTQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1461\u0026min_rtt=698\u0026rtt_var=388\u0026sent=673\u0026recv=129\u0026lost=0\u0026retrans=0\u0026sent_bytes=695878\u0026recv_bytes=44075\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=8330\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49912,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (49912), with no line terminators","md5":"a9820dd1581c176d3ed694c27c17c90a","sha1":"0ff123fbfccede0a2e35a0e96a7fd9d6407bfd91","sha256":"c1abb1c5dfd238fe28fdfd930789c1ced9b5fe35d4d05a1e48b23280afe64e71","sha512":"f47fb6c97d71f5b67d771a39ab68845a320dca6a94047a4da252b8cd4ec72707df60cb411e7c43a6b7dde516d212146ac93879b687095ec110fe94bd75f964dc","ssdeep":"1536:Z/0mlwxaL/hxVzKXUlTAvw3J12/tqD18+AcJQVlxdz9+rdK0:Wmlz3JZt6w","tlshash":"a923635eb2413a3941cff1a7622f464ea273206d140181acf8a9ecd65db9c8d743bf79","first_seen":"2024-06-20T14:33:15Z","last_seen":"2026-04-04T06:39:30.961915Z","times_seen":13574,"resource_available":true,"data":null}},"time_used":827,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":827,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/uploads/2025/09/logofb88-new.webp","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:00.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/logofb88-new.webp HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 61526\r\ncf-ray: 9c5fc25ffcbd4e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:57:00 GMT\r\netag: \"f056-68da42a0-835aa;;;\"\r\nlast-modified: Mon, 29 Sep 2025 08:26:08 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HPDjWIMy6REzl0KnMRLgc2fNNzG%2BBXXz8XZj15R%2FieCGIsFXfVO35Yf5WsFFcaRPjzL0THyoMvR%2F4eMkwl7I52n3ncvVjH%2FBNJD2uYoOvH755V5YZB43JCCjvzS4QQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1428\u0026min_rtt=698\u0026rtt_var=275\u0026sent=686\u0026recv=131\u0026lost=0\u0026retrans=0\u0026sent_bytes=709980\u0026recv_bytes=44171\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=8336\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61526,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7d028009f6395c8e21a6a33e6fc74545","sha1":"4bfa36de779cb833b54c11ecf7906ec9398d6809","sha256":"c2215fd413dfdef69771c4d3e35d1ba520279003f68b09fec20473df75c3507e","sha512":"dbe625cb10d00e10192fd43bfc9ba11f462305119cc26906b9b1c46eaaf0b5a2148bf2fb61b3b795653fa7818fc2086908b1455bb52de111c9e212be7c562211","ssdeep":"1536:U5l2zdpnlxTxjjkE5HKiUOWLnm/iSriyAt9jeXB1A:UrYdpnlxhjkEGpKHrPAm","tlshash":"10530238732033339d7454aee05449f01fa2ed2153d57f91aeab31e24a89a94deb94b3","first_seen":"2026-01-20T05:16:54.491996Z","last_seen":"2026-02-01T02:44:00.211369Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1015,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/uploads/2025/03/dark-green-gradient-background.webp","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:00.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/dark-green-gradient-background.webp HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10762\r\ncf-ray: 9c5fc25ffcc34e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:56:59 GMT\r\netag: \"2a0a-68a573a1-835b2;;;\"\r\nlast-modified: Wed, 20 Aug 2025 07:05:05 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qG%2FE1rbw77%2B0pVplVeBHN05sMpX2Wm%2BnqrH4bBg8bJN8kGz3NkPoMHmsb6fCM17ljTCcdeY6PjhM3O%2FoEdkN2buGC19Ivfgsno%2B80ZV1pWvYaj5Vuzuxh70sI79ylA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2191\u0026min_rtt=698\u0026rtt_var=1609\u0026sent=553\u0026recv=107\u0026lost=0\u0026retrans=0\u0026sent_bytes=571116\u0026recv_bytes=38028\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=7527\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10762,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 626x417, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a16a0c5eb6e0b103706b837acb759b34","sha1":"b381b2e3b4f6192a57e2468f40a9a299f3854dea","sha256":"4d9efb51e8b034c23f7a28a473d5d0dbb902869033031d9ee853c6dd29908ba1","sha512":"661841b1e25120f9713850713f3575040e4eb74be2c9a9e49a713fb113336ba5b5b81848d687acfb678f3fa1ae2351719b4fbad2a078636a62c3dcbb290813b8","ssdeep":"192:gTMFL6HYncd7xfGOkoF01FFOr38dIimgKKdf9KRPoadaMsyJs4O/A:E9yEO0FeE4Yw+P289P","tlshash":"d222c0093fdd8fc0c80ed29d69b55cf61aa1d6f0ab850fa153229b9c2d8d062cc68d59","first_seen":"2026-01-20T05:16:54.448745Z","last_seen":"2026-02-01T02:44:00.190152Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/banner_image/banners/20-1759563115257-slide-rik88%20(1)","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:00.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /banner_image/banners/20-1759563115257-slide-rik88%20(1) HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:00 GMT\r\ncontent-length: 9204\r\ncf-ray: 9c5fc2601d1b4e4c-OSL\r\netag: \"23f4-68e0cd6c-17a223;;;\"\r\nlast-modified: Sat, 04 Oct 2025 07:31:56 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=x%2FwQaQfk0%2BlNMZBqDgPPjQtZL%2BfjD45DgC4KnWtmawakAps%2B7ipXrht7cOmfEDgSocmi5V23v3eRp8LK%2B676FgUS%2B49shNzSlIHFcGuFIScU19CQAE0ln9j9C5SZ1w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2079\u0026min_rtt=698\u0026rtt_var=1430\u0026sent=572\u0026recv=117\u0026lost=0\u0026retrans=0\u0026sent_bytes=583274\u0026recv_bytes=43023\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=7740\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9204,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"090f7a5e7dcb1b529c2f4db5f3af0fab","sha1":"ce09407e1565eff6871cf9c23e964197e5b766ac","sha256":"3b0c78e7745fee2f2c31ed62aa8f1b4501c16ae1123022ea8ef202ad5027b89f","sha512":"1da75a4377e959d11c7bd5e0065bfae23198263233b60e31d71d29a5c05bbeeea0c3d21899f9d4410cb4ff90c8f969496d50c8747144d10a219b146f463f12cc","ssdeep":"192:KLhT6EDr5mHh1dVxWccM+WjCdZaTfBdw8zqJvqd+xrzWw:Kd6EDNmBXZdjeWTfgMqJSU0w","tlshash":"e912cf1e00b7fcb488da1f8462200de13a33674a260fd05d649ed9d9f8da4186b93796","first_seen":"2025-10-24T03:21:12.342181Z","last_seen":"2026-04-01T12:37:45.245011Z","times_seen":16,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/themes/flatsome/assets/js/chunk.popups.js?ver=3.19.2","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:00.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/chunk.popups.js?ver=3.19.2 HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 6929\r\ncf-ray: 9c5fc25fec8a4e4c-OSL\r\netag: \"4e48-68a573f2-81428;br\"\r\nlast-modified: Wed, 20 Aug 2025 07:06:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=spcorwktk1diXHRI9kPKXdJjkeS3SZ5yWcqb6JWK1jGtT%2F%2BOX4OW3Febw4gl0D%2B%2FySE8bPNaxk2Newzq4xNuVKW5ykmWQWhrykaB29ajgTs%2FH4UlnRM2wTMBWcxfyw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1703\u0026min_rtt=698\u0026rtt_var=942\u0026sent=607\u0026recv=122\u0026lost=0\u0026retrans=0\u0026sent_bytes=622005\u0026recv_bytes=43750\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=8112\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20040,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20040), with no line terminators","md5":"58d197438cf1732de099a835eee1f203","sha1":"ba831d6df4962eea0b97ebfc83a03c2413228bd9","sha256":"da39613cd3084e98f35de15dffc1cbe886d429870c10df549308a23174717be3","sha512":"7e9a87932047a2f22649806584a1f37a5d4682581ac2ee9a1be5b6e3d98ace7d7dc2e75bddf54e952ade22c21dd4a016be9f0a9e843808f14be6a2e57a0cd0ea","ssdeep":"384:CP9kCoixNXe/bDhRSkvRuAoCIKJe5anL/L3LnlqV+g+JdSPR5c3GJxQc:ClNkhH0KA5anLPlqH+aPw3QGc","tlshash":"f592e858f1a2b21783eb75b86d9f240c3b72e512c94bc001765994a86dfde88a127f3c","first_seen":"2024-06-29T16:20:38Z","last_seen":"2026-04-04T06:17:07.482505Z","times_seen":10608,"resource_available":true,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/banner_image/banners/20-1751681088100-slide.webp","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:00.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /banner_image/banners/20-1751681088100-slide.webp HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5938\r\ncf-ray: 9c5fc2600cc74e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:57:00 GMT\r\netag: \"1732-68688841-17a1f8;;;\"\r\nlast-modified: Sat, 05 Jul 2025 02:04:49 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YItvD4umJ9bb2DWJGFQEESdAO7YXq4Wl%2B9LJJN6xLEtKENyHrsRP8qt4FvYr%2FqlYkW9VzIVN1QKzxF3OI%2Bq6HQus1k1qJUqKKdRvjiB1vo3dhbpHV2ESZI%2B6vyYX6Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1774\u0026min_rtt=698\u0026rtt_var=1067\u0026sent=600\u0026recv=121\u0026lost=0\u0026retrans=0\u0026sent_bytes=614059\u0026recv_bytes=43705\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=8099\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5938,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3e406a1d84b2ec417a84a41d79955294","sha1":"bc60384324d940a4bb2de681c7b7ce241019ed6c","sha256":"bfff2066b5e0cc55c19aaea50fd7598f75b03079f1eb78efc80cf29312df2b69","sha512":"7869b0589e10e4bd6d53f65b9d083bcd81d4c4548bf6964b2fa980d5b205a41cdaea29512d47c470ef7ce42d20c59dd626762b2499b984f114cd6593250feab1","ssdeep":"96:fTeO3lfi8sIOA4mzc46nJq0ull5Aff/5Ray0veDAGW10V27C2Fmj/O/f6QkEt/6/:fTH34zlWzoJq0GAfSyfy10V2G2F6KxdK","tlshash":"cfc1beaa184a454fef87d8f810e47f7425b60d2c0eb81524a8c14f9cce960acdb1a071","first_seen":"2025-07-20T13:17:16.935401Z","last_seen":"2026-04-03T22:22:24.793993Z","times_seen":62,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.www1.co.com/favicon.ico","fqdn":"www.www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.www1.co.com/","date":"2026-01-30T08:56:52.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.www1.co.com/?__cf_chl_rt_tk=XXFv2ZQN_3kaqudY.urr4LRYAqgU9N4N_WySclaLp2o-1769763412-1.0.1.1-CGsDebjnrOg6NWSfC5orzvP02xsaDxxsJA0uQbkU4b8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ndate: Fri, 30 Jan 2026 08:56:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xZ8veWG8Vl4NLhPr8ggjquNy6jm5UWtvBJiCl7%2FG3jwtHWoqTTOnCxPYCgUdyr7xuG4cSFrllKDVRSlO8%2BEi3tJl8sTvxbhpyaXS7GK64sh%2BY9OPo8bU64Juf6O26l22tuQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9c5fc2326ff54e4c-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"9c5fc2326ff54e4c\", cfL4;desc=\"?proto=QUIC\u0026rtt=2545\u0026min_rtt=698\u0026rtt_var=2601\u0026sent=56\u0026recv=15\u0026lost=0\u0026retrans=0\u0026sent_bytes=51756\u0026recv_bytes=1950\u0026delivery_rate=27281507\u0026cwnd=31200\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=232\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6829,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (6829), with no line terminators","md5":"684d6aa0c02f7db22b5ae15a6028276e","sha1":"10600653c16662da4e839f7bf41e002ee09580dd","sha256":"c660489c1c719e3c838f6dc11fc73b87b21e512f752d62f231f80c1595903a60","sha512":"c21ea7f09344f8c70852af0eb1b9a95e2e6f3932158c6d4963e1e05f763a20c3010855025dc69c98e6c174d35bb8ed7512697f1b5853c4cb80855be75b181d0e","ssdeep":"96:PNybXZtIEb0EFW87IGfIUjViI78dEhBdlDsq3YLxeUkqq8Vnk8Yzueh8eAmw:PNadB3E28dEtKkT8VnkFyuw","tlshash":"cfe16c67e6551029a3af5cb64132f314d312f0534744c989ead2ea5c8aefd87926f188","first_seen":"2026-01-30T08:57:31.194496Z","last_seen":"2026-01-30T08:57:31.194496Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/9c5fc234da9456ba/1769763413763/4Sc7-4PLNgz4ZV1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","date":"2026-01-30T08:56:54.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/d/9c5fc234da9456ba/1769763413763/4Sc7-4PLNgz4ZV1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 397\r\ncf-ray: 9c5fc23b898d56ba-OSL\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":397,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 19 x 66, 8-bit/color RGBA, non-interlaced","md5":"b226f6436b67a4633ced1d3dd218042b","sha1":"2d790ae5743ae50ac30984d432aa4e77bf234725","sha256":"d4129cd18eb358ee10b7cbde2f965eb7e8552e6180dadba9e7feadc581034507","sha512":"d174b979364e07f5cd9e4f63128dce67233e0ffee2f694e0e7bb2c53e4395f60a482ddf0e89108e12e4c734985cfa7011a3039a5e831c1f08718b0d08451ccb4","ssdeep":"","tlshash":"fde0b68af25cd0e087cc98e2f1d0db954439a314ef1004fce11de220333368b6364180","first_seen":"2025-06-18T00:31:43.585059Z","last_seen":"2026-04-02T12:57:02.977231Z","times_seen":139,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Inter:wght@100;300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:58.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:24 GMT","end":"Mon, 23 Mar 2026 19:52:23 GMT"},"fingerprint":{"sha1":"43:39:AF:0A:74:F9:2F:1B:C0:1E:4E:89:21:30:C2:28:EC:9F:6C:67","sha256":"EA:F1:0E:C7:36:18:F3:9D:D1:D5:34:23:44:7D:6F:9D:2F:61:C7:81:09:9E:E9:C8:02:C8:F2:2C:0A:83:B3:A5"}}},"request":{"raw":"GET /css?family=Inter:wght@100;300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 30 Jan 2026 08:56:59 GMT\r\ndate: Fri, 30 Jan 2026 08:56:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2591,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9d33c368b1953007af7f8e1e764b9afa","sha1":"b223227038aec4d016f8a661c5dc6f384321897f","sha256":"30086b4121cb5ce7d7c0e67ee103f0766c19e4cd006eb223972aaa1a17d8b2b6","sha512":"9d077158ce61acd90abe6bf5b6e2b6456e9427a31dcc303d049d94994216a62951cb03ac6620fc9cae76b8284842f05594a33994120d2b5858e0c9b4bb81c4f2","ssdeep":"","tlshash":"5451bfd2002b9500da471dc623cf3f35aede22842085d5b95ffe0dc5acdad268369b8e","first_seen":"2025-09-10T19:52:18.465821Z","last_seen":"2026-04-04T00:51:51.757333Z","times_seen":1694,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":176,"dns":2,"connect":20,"send":0,"wait":33,"receive":0,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betweeneastandwest.com/wp-content/uploads/2025/03/dark-green-gradient-background.webp","fqdn":"betweeneastandwest.com","domain":"betweeneastandwest.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:59.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betweeneastandwest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 00:53:32 GMT","end":"Fri, 24 Apr 2026 01:52:11 GMT"},"fingerprint":{"sha1":"13:AB:2D:C1:BD:70:02:B6:7E:7C:8B:78:74:50:B8:8C:E7:0F:3D:C3","sha256":"67:93:05:05:85:27:6B:DD:37:F8:BC:D8:6C:0C:D8:D3:A6:D3:8B:58:A9:7A:CD:AA:47:B9:3A:0C:4B:19:4D:BA"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/dark-green-gradient-background.webp HTTP/1.1\r\nHost: betweeneastandwest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 30 Jan 2026 08:56:59 GMT\r\ncontent-length: 0\r\nlocation: https://www1.co.com/wp-content/uploads/2025/03/dark-green-gradient-background.webp\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ixyq5PoKM9Yw6j94OLkNuhXKmlvNjqEvk79IvoT7SCb3qSHklrQaJamQ82rWEhe5%2BgVTr2KdTItLXGbF7hRPmXhzmw5pfDFZX2cBGfsGy1AL7WS%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9c5fc25b0e09b51d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10762,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":71,"dns":50,"connect":1,"send":0,"wait":8,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhapma.com/direct-vite-3.js?id=T8Aw7VcUww","fqdn":"nhapma.com","domain":"nhapma.com","tld":"com"},"ip":{"addr":"104.21.24.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:58.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhapma.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 03:43:38 GMT","end":"Wed, 25 Mar 2026 04:39:48 GMT"},"fingerprint":{"sha1":"D8:CB:67:10:66:C0:20:6B:FA:65:04:DF:F7:EA:95:36:2F:86:A0:6B","sha256":"5E:EF:E7:1C:54:E4:57:86:F3:A2:8C:D1:20:B8:4D:DF:34:43:4F:27:20:DC:6C:28:AA:AB:0E:12:B8:C7:9E:D2"}}},"request":{"raw":"GET /direct-vite-3.js?id=T8Aw7VcUww HTTP/1.1\r\nHost: nhapma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 08:55:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"697b208c-27d7\"\r\nexpires: Sun, 01 Mar 2026 08:56:58 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ncAwJT6IUwkgBGy63t6CBomZobDuLNTbSTYsig%2FBOLzfachFA8pWP%2FDWWNDYajHsoMDYArbxpGl0JUS8GVwdrUANw3yzNIVWt8%3D\"}]}\r\ncf-ray: 9c5fc254be695fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10199,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10189), with no line terminators","md5":"e74f7e63fe90869f4392c84433f42ecf","sha1":"43212c53f9b1af19cfa23cb6684f4cc7c6ce83e2","sha256":"4715b562b4009972af55c9845d2696af5adc02df6d7bfc8d7d537844b7620612","sha512":"2ee2ae3c1cec4b956514e86575639a240606a13601473f0304345f453a46d7e103491b7c57af43d2c839f7caf347fbe2887bb951f3f7760ea661daa9649e655a","ssdeep":"96:+MXlrnT3dQgAMDn/F3Xuisr4096lAUM9nV8Mmvwr01oYBLaXsrfih1AsMBlAhb:+2lGiNFsePMFV8MLAoYB+Xsjf2","tlshash":"7022b7c2e75d6734904ad03df6a99b843976228e5680c5ccd6f545b6223cc8c709bbfb","first_seen":"2026-01-30T08:57:31.196566Z","last_seen":"2026-02-01T02:44:00.182986Z","times_seen":3,"resource_available":true,"data":null}},"time_used":636,"timings":{"blocked":45,"dns":33,"connect":1,"send":0,"wait":540,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/9c5fc234da9456ba/1769763413763/c06d0c45715baeaf5ce5dc1f6419a7aa948d7989a2566ded732a07b876957fa2/sOF5sUndMfkUOr4","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","date":"2026-01-30T08:56:54.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/pat/9c5fc234da9456ba/1769763413763/c06d0c45715baeaf5ce5dc1f6419a7aa948d7989a2566ded732a07b876957fa2/sOF5sUndMfkUOr4 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/j247j/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\ndate: Fri, 30 Jan 2026 08:56:54 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1\r\ncf-ray: 9c5fc23ebc9456ba-OSL\r\nwww-authenticate: PrivateToken challenge=\"AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gwG0MRXFbrq9c5dwfZBmnqpSNeYmiVm3tcyoHuHaVf6IAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAzXxacrdFiyvIVGD9TSoKmI1mtojoPZ5VWTubmWatVJPUqR_H3VQBlMGar28c6PITe_lAxshcGgtyuHbaIxfkNSxrY25uzpHUcBOW2vXbhyaVp_k6JMyIMcyoZNRrohKooGVs26TRaG93JxZzWjKZbSjKJeVUZzCc02tHkabOnZZkLloUaPWYQ27XRX181-j8rgFGKO1YtZYtTWZy83BnEXEqjOyPkSWQ11bdZIShotGvwDrHJdETUO4IuL9t02OmEy_KhNkbbwc9QsPD8cUW3Zhzv3Dc2bpk8Q0BgsLbw1Tk_sD6PDHSwNMtr0LZg5ZA9QI7kaTOm3QJ3XgPKKYcswIDAQAB\", max-age=20, PrivateToken challenge=\"AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIMBtDEVxW66vXOXcH2QZp6qUjXmJolZt7XMqB7h2lX-iABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEArzDTFKPvg0tnBpjcBW1hG0PFf9no79-rzoqmbWLUnWw-pnOkSG0ifyrecNX6tcKAuIgFG2lyxYJx3mdK2_7asLy2358ofFJ_QfrPttFQ9Tw4ZBKUBsFvjUGPq0wmm94-RnrJUaVhdRoJ653QG5gk4x-45D2Sone3-Q_i0-XojE3XE50r44WPNvR26E1nU-bVJqlxjoZ3awjr6qlDs7q7tVkgQFfW25MxErJ8Mr-TLE7UBseTmuTK7ltV4SzrkSy2OZEzjl2InZ2NC0bbrmwlQ_sF1vAMPYdH_CY7TRjUNC5gaDBxK0ZVjnSghGX-LVYYoa-YV_vrFFO1wofc7UKP9wIDAQAB\", max-age=20, PrivateToken challenge=\"AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIMBtDEVxW66vXOXcH2QZp6qUjXmJolZt7XMqB7h2lX-iABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA1OLT1txnDyMQKUHuLOxbmXB4w3sICGxxSsSQHFLTLisstHGC4dAVpA91QrWzUh8tGFkt6j_YtuMIQq651XjnowKJXlk6ym_mXsMqM1k7n1lhy3u2kQzGmgM-1WDQ0kWUT4rPGdxHJSgKjWcjmAje5Vlk-ARbrMe9iEAs_C7b8NJdaUk2d_sKHYVDxgNb1NK-UilF_ibJKJIAUTYw-EoW-7RyStG913e7LKjqihPXfOIxSSOZLapu3pL47xNiuw07OLqFGSH4O0I_VtI8iKY30v-suwG1FWDLgLOt_1SCsHyQB0zfQWIVfMeOMxFUjM87EsCHsDgwPP5ItjLLgwp1lQIDAQAB\", max-age=20\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:38:23.242807Z","times_seen":400023,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.www1.co.com/","fqdn":"www.www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T08:56:55.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: www.www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.www1.co.com/?__cf_chl_tk=XXFv2ZQN_3kaqudY.urr4LRYAqgU9N4N_WySclaLp2o-1769763412-1.0.1.1-CGsDebjnrOg6NWSfC5orzvP02xsaDxxsJA0uQbkU4b8\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 4291\r\nOrigin: https://www.www1.co.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4291,"data":"5ac6b8c45d1b1a0b88a833e150f8d0ab7015f233c23290f4cf92c72fc8ccca14=gkLk9hverKhhWTe8ePHtCvfoYPBFfE8Z86aBIqhGR1Y-1769763412-1.2.1.1-qCD.HxkTaPT1ghdQ63UR13tzE0TrJGXZBT0Csn8V3cthBZGDyZWdWUP56vWliIVozfZ.8brY8pJzJnU.YM5xZvQvEwVuRHkxrZgRo1IicpqSxHuDLaJPGAPHiY1V7yFIsoncwUK_FYwTMuisvdlCjVEXiP5iIxsPQk30DQjyyix7gcb3lpYW21.lb58nUK0iq9EOo9.Cw4dlFTH5esFeMQcAOafzFyKztSw9ZrklS38j6Yp40p2C4tTfqAYb30MjTSmo3E6d1Ky0oCTXj9cUBH0b4pd6R8TgEMPOS7pMFRAhaM_2EibWZXT21QCmdmtdil6JyN9PiXs47.idRARUrCEelLA0UV7AKYAVNNCnJCVVpqA5ixPkjscFajLUgnS1wN3aFkDRc31v.bRZaEnb_clOVfPEK0Birqbzi4r8S24aFAVhI3sWE44FNq.edLs273X3Q3Emk._zdozsvPtBg854_Kmq_RFHa44.1SPZTqicE0Zaho_VFFVUgp7_1nLeOrBLarUFISb_fgl7idbO1vsZNOrrBeJLIgJ646nI2D4lQwUl.6WEKUQMZBbXTauAHPVXJ4ft5KNrEosOJRDUzBF5jmoiTrPaqagtqITolmh7FZE.cThjmBjAg8.u1K0QRymNM_EIESrY3W4zslayJy51oa5Ct7UeMocwROCTLZqhMgdPzdZl7.qv3MN3NADpcrKU9x9PYxsFUC2JA.p7HC1Y5bI6vT_YDKiZVjtqDRi4vbPkr3_lKQeu3Q15ylJJQqtOAPz.iIvbX91qNXUXxb15zpedicfZTHbesVq2_BFCSCgrxhHN0QspENtMEs_h0BL0Hj1DMmoSrYO9VDmUKo1XJbBvYmVyzXQhoCUvRRjcBY5jTxUmC6ge1Ql74P_aocRIyI_NJqlTCLnCLtDIGmx_cPEWniiiH0y6pvv2AHZmXNzCfFseXpdfkoU0PcPqGhjEBa8DgIobTdxnEkMFF1yB0Lt3_pLdkJ_F8749GO4\u00261033ec12fc25f60f5959e205daccce12bca95e56f637c205b0f0f295c432f54c=tNBI4c.fZX3ukvMus_4qi7FZigiBr5coxLQ87TYJwj4-1769763412-1.2.1.1-UPGI7ZqIVTMFQa4hshmzouSw5Ou_Zh_LnSqV7wGlwd8IAZbchGxoc0HYTP3zTNSTfBbr9007Hm3pbzto1jVjQdFsWuMcq0BbixXly8noKYxZHYhgzpBW3ov5x.4k5A35yDOyzPJNiqnexVQLo_ExTqmMOsFM7NoxsRtW6K0bkBFgWG5LTA4F4Ft.vtfCqQ5AWWDb1mwmmYqOdtGced33x4ESG2bABnyV7IHdhPP2JKfrvVSS2urv6vlWXcxVHaBvW7qHLCx2x8AERTVA4uUvxCJcNCm59H2WSuNODfwPpYjsmjPpTFq0AofoGBSuOFpSQw3vviGOxYL_dtbOknQEpWPXsNxMvHTRP3FWMLdHG8HtoFnAtG7RgpPoV0mh1880Xs3e99_14JQZsciCiqzVRkEUNU9SD2NEtNszaNQizkuJGvIbZjSjaPuuBSpK6YZX9yIBQ8cCVazs5OghxnljOZ3amxbxLBEE2hsSsv1_ioGQ3.Pqem.KGgerGP5QlLhnzH8yfl8_MrqRwfAMvrYMDJ0zdUuJKzdCkBg1.jOHHs7kIa2GKxXuwtOji3k2qYIc_KDfwh6xlPHP3WZPk19YM5ZV3osR02RSNX6CejM57VQF8Rwc8t8zkjsRyFLnJLZkbzvHliov0sIE_Q_BbjDIs6reJivTC.0gWP9p8lZIBxw_gII_D3XClOYcINMFO_.UiHzaJSJIrFiSRjtAf8K1.XohCfLB97OKULsklEoB5NFcOzTE_.J2pV9Ba5BcAmp6ca7WpG5.eIzEJEHhICpZjM17ZRtN8CofGUZF53Ph9AGuK3Yw68iAxOjApT0yUZR_Et.B6xiJi5tBbvAWs_LQeoBtup5AYu4Au9jR_MI_a.nDj_CzTtWAzHjlg.9E_0VH1_CEr7lLzDfoPXokpEcwlGij4X1u4b.olChQETCP13yZxgRmFmNL_wXs5TBq30CPMEOw0jsa8zFijwd8vexRff.wm9EbcpYFoyO7xl2qMgSD31Hv.CvbIgc_tV.JXTYyIBp9iulHqpzD6oEeBnuLIMZX.fUN6REYEYbU6IGrEryd9D6pW9sQ3SySmhDTB1miK3H40odoDTQdeaqkUWejcErcuJrysOmWZdJ_O_pu4tk5YyIDVkiJiBTUVam_0gG4VQU1S1RrVDqmMhL6HEYgSV_zS_k5ZTYMEbOSi8yVAbariX1szGFFaNBu_P1WZXpfTCYXh8vh.hGqT5Vp6TYokg9WVM7qHBeVOnuL.dE7Qx940jwVnjWAMYhvevetIo4UAqhD1z0_9jfwib9GKKVLeqkQRpDjd2W2RDp1_DH5S5EScN_d2nZhc1Ipo9xT.CLlwNP.FaP2hXWdLaiiAIXL6rBvHHsXj2IfFk9cSZJ4iiNJMNkPMVowZk9nGjjuhr0qYL4fbLdAocnFzSXq04DBwBHDoZkkmpyQ4f7umch.6JFQckAJYLxLP4eTvXQ8d2O170xxBYamd05wos2awvPjiz1bmzwHx9SwVK1vTF.n5YCuVxNXnDWahqIE03PtFp5Wvv7MAJknrE.GqPfnfVvwuYfx1dwRoiE87GRr1J3_VRDZ54Fvk_0uX3DUN0a7DGoB.1YIzR1O2y_Ms5s5d0lqyb103ZIHAKAGb_EyNbIjvzMhKXEAb00oGQ9jb5_2YLZCJG3u_cDeK8BjMnlHMJIxOviGVIpDuNTJqPOhmynKNkOz8yiZUXBZCUKexDl59MieB603iFR2pJCYZGx6pbCvuRkeJ1ajDKp95cql2N5_FcHBrQczeIiF9itxCJkPpJBZFxyVN.2m62GV05lTB_MzRWasYi2Nz1zq.pr.sJ6doChYZWgxW8okMXzB2N9fQZ.ixXJ9PjDM4DWwb5UhmSnjZyIYCI8ra6_k1RuLQFnvbOCroJGUzf5tesCET0XT_jIYBsCz82G.nAW55VfOnlSkIDcws4Ot._RFKKmX.hGfAyvP7zNpTAzi7m4RC7A3u1z7PstoBgnASoZVboblwxzjjufExAFmucRC9c.uNP7UgYc_84uJqtOqWR8i2EALJ5HMiWxcpIanuFrI3ccD4gVrpDxkkFj0SmU9xU5WyFdYRjz_ka1XNjIWmfrcCFqieOBSUHyBNc1ak.FLDzA396yC_E7PRScV6lQmP42B0OXsMujHGUYdeT4a7.9erb7L33EHJyYEhnarM3Ip9lGy.akE8L7sTOpiJ7BWHfs1fYVsYEuHmJP_TmPfY.ShmfCKOCvy_lQoeOuz1eWTvNJ51ud4PEHkF3qCgfSD6pFr8Kc.jL.71IzLQ4IL5zqtHvQgvm.3uFt9t8sUOdRdYyp6QG4AN2mn6GHf21brxM.J17ZJcToJEfk4sSdlyceQAPH9i0pgY3Gjh0NQM8RAXRdWkHfUUMkZNEJigjk9AdS0P.5A429cFmFXf16HAeeeGncVNLHfKzFOMMrEXYIeWaY3oAsFDcTIz20CiHXEaGuf78NJ1uitARx2lVa40YAyxposuk79hV71d6yWmItNjCLpgF5KhJa5gI_2dNhi1TRpPqCbLoCZhPaoTVYqdwG4w4Ebn6EDzGY.93Y6u5vQGi5Am8a4nxHiudvax60uHHD8qsxp3lcNwm1ikr3FzVs015KYzFlKcYKC8w_uC3zbCvSGDZx16FJuWJKhXyvQh7nLsmS23W_Dri.u1alWgb.sunDOGn6Bllz8sM2XVik0phGDwd5hMA\u0026ac22abc830af7e9ec63a6629d60f98216558abcdad574bfce5d68c73bb279ccd=avrBMRVi6SHSM0xNHwuTA7LrjRAAn5ZcnGtikl4pfvA-1769763415-1.0.1.1-V.b30X9P72.Lje7yutGFLPznDYTN5O2Ekhkz1hweIY7VJx1n9FrTGF2qWhFXHbi1ChYKid2pVULoSjGylootr4ZLIAXhZVB.DBir31ijhXd.DwwO9qfALUCeJ8Sz1VMYlylH04PfvlpBVFEwuUv7wVh8pYLBrjIJgUDLoC6oSKuD9PGH20HnQZynhT3eRxLB"}},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Fri, 30 Jan 2026 08:56:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://www1.co.com/\r\ncf-ray: 9c5fc2437a3c4e4c-OSL\r\nx-dns-prefetch-control: on\r\nx-redirect-by: WordPress\r\nx-litespeed-cache-control: public,max-age=604800\r\nx-litespeed-tag: 3b4_HTTP.200,3b4_HTTP.301,3b4_front,3b4_URL.6666cd76f96956469e7be39d750cc7d9,3b4_F,3b4_Po.1883,3b4_PGS,3b4_\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZGlWLflg3veSAfxzn5g2bTLfFYjWXNKbA%2FvbVDOrm9hnCTjTBuk5UcobGzkM1tKXf5bU90pR7cDn%2B0H5ytsj3%2F0fBOJ8%2FZzVb4atQOl6EnIui%2B2zI1Tf03lRyPVLacd5yns%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2228\u0026min_rtt=698\u0026rtt_var=1418\u0026sent=88\u0026recv=31\u0026lost=0\u0026retrans=0\u0026sent_bytes=82298\u0026recv_bytes=15596\u0026delivery_rate=27281507\u0026cwnd=31200\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=4574\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172083,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":1620,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1620,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/litespeed/js/2a9d4faa2cc9bf554644e82c339d9493.js?ver=618a7","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:58.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/litespeed/js/2a9d4faa2cc9bf554644e82c339d9493.js?ver=618a7 HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:58 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 670\r\ncf-ray: 9c5fc2547aa44e4c-OSL\r\netag: \"5dc-697c7197-c5943;br\"\r\nlast-modified: Fri, 30 Jan 2026 08:53:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=R40SuDRLQwgqvgUnaydlUGWS2svej5iTDgowC46E3vZ8flv%2FlXXnxDheURmRGUM8Z7mh7qnMoCdRNY2UquTqImyJPgowG7n5I2EoMWbQE9xkM7UdwxkRQf%2F61dDpvQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1881\u0026min_rtt=698\u0026rtt_var=1069\u0026sent=173\u0026recv=65\u0026lost=0\u0026retrans=0\u0026sent_bytes=150753\u0026recv_bytes=27650\u0026delivery_rate=27281507\u0026cwnd=31200\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=6292\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1500,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1463)","md5":"2553c8b8160065ca55b92b9478f3f399","sha1":"116d391fd6c6dc674f5f3a571146b005580ddf7f","sha256":"cf85eb4ba80822af46334e10183d9de1502f518b50019f07c86b55794c1504fb","sha512":"e6de3d964151a50eac5a6c7ef7677626d2e0144da9e5e2ba2843d288081ed915223c09cd1caecd0eb4b3470f1d0bad9900a5feb3221534393da7fe61dae40aaa","ssdeep":"","tlshash":"7131308e7b5260440382c260e13e88ad773b687b700c0e897b30fcd93ee5e2c56519ad","first_seen":"2023-03-11T09:39:20Z","last_seen":"2026-04-04T07:03:14.002303Z","times_seen":2462,"resource_available":true,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/litespeed/js/5625e4a0b8c0c6985d82c22c0597959d.js?ver=db863","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:58.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/litespeed/js/5625e4a0b8c0c6985d82c22c0597959d.js?ver=db863 HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:59 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 15903\r\ncf-ray: 9c5fc2547aa64e4c-OSL\r\netag: \"ce7b-697c7197-c596e;br\"\r\nlast-modified: Fri, 30 Jan 2026 08:53:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jgpEB8Jq0lbcUc1ZlMyJk3g67q713NpYTnMMce2pEF%2FOgpFAxm6NPfm%2FkDUZu9UCq4Wd2GUFloEvOt%2FOjDc2tt4XRnOZyJ6PahpsdT6WvGJ8sUMppDqZEVmDq0F%2Fbw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1751\u0026min_rtt=698\u0026rtt_var=1108\u0026sent=316\u0026recv=80\u0026lost=0\u0026retrans=0\u0026sent_bytes=309511\u0026recv_bytes=30612\u0026delivery_rate=27281507\u0026cwnd=62400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=6486\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52859,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52857)","md5":"c0f4a4261e4795d86591e152199d83fb","sha1":"ef2a5f9de6b5e7008fa3cae5acfd242ab00c2b20","sha256":"ce8b6333810332467a1c5d3d27667b72872a77a364aa236b603896426431345a","sha512":"d3f13b17018fa8ea516909d57eb9b2da40d03bcf8dd62f85472938e8502974a219b6cf89e9d698bf011359b9b33cab6794f61a8ec26403311af32b4e1b0a4095","ssdeep":"1536:wYrJqC5ZQ8kNSaNp6W9EtmoYsNqHMkSBed3tRO:7howWGX6sedm","tlshash":"af33e718725070fd01ff61a7f13fa72432376525b0064054b53e98fa2d6ad5e26a3fba","first_seen":"2024-08-19T17:38:18.533237Z","last_seen":"2026-04-04T03:25:05.533244Z","times_seen":94,"resource_available":true,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":811,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/fonts/roboto/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWub2bVmaiArmlw.woff2","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:59.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/fonts/roboto/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWub2bVmaiArmlw.woff2 HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13976\r\ncf-ray: 9c5fc2597a654e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:56:59 GMT\r\netag: \"3698-69252da5-1906f;;;\"\r\nlast-modified: Tue, 25 Nov 2025 04:16:37 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KdPWflEJGgEQV1vDOMs9A7XY0yq25owIaKelxIiLcnWqDqUPjlPjdFOLtN5EDA0h2Rp1TwIICoJOAKXICAamXMnmycyWuISQoS9vrQB4BJjSywKDwdW3x1e0GW6QZg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1592\u0026min_rtt=698\u0026rtt_var=749\u0026sent=520\u0026recv=95\u0026lost=0\u0026retrans=0\u0026sent_bytes=543718\u0026recv_bytes=32393\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=7328\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13976,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13976, version 1.0","md5":"af435fa45f0d9d9c82e07ff7d61e04a3","sha1":"ed0b0466096d47a05cc816516b4c0883655a7aa8","sha256":"ed5bf02d648da84d8d68e5e7a9261c198f4713969f92b5729a81fb039a93be15","sha512":"0e497ada661b26efc04f65fd7b065ece801657f2bd87a2584b79cfda0111e7a53adf9fcb5921984c56998a1ae049f943b60ed2abe87ce8f8490065bbb6445a9c","ssdeep":"384:E0UdojRvxM0GbLjHb6spp8TcqcRt0oG0astaoOvK/m:jUadv+vb6spq0acfOT","tlshash":"8f52cfd5e312b551ae36a0269e0f887969b1ecb0d955e4d0837fc446c7e9008ee3b376","first_seen":"2025-02-07T13:50:52.754244Z","last_seen":"2026-04-01T08:46:47.048898Z","times_seen":128,"resource_available":false,"data":null}},"time_used":856,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":855,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/fonts/roboto/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWub2bVn6iArmlw.woff2","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:59.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/fonts/roboto/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWub2bVn6iArmlw.woff2 HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 10728\r\ncf-ray: 9c5fc259bb604e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:56:59 GMT\r\netag: \"29e8-69252da5-1906c;;;\"\r\nlast-modified: Tue, 25 Nov 2025 04:16:37 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mnJWs6w1c9nBuU9Octks7rBE%2BX7LiC3U5W3h4dBmiNAzYx9WT6ReZ%2B31WldkSH74QBN%2Fd2stIujj8m7kh1c22vL4Q623aIp%2BuDNQOHuySUsVJLiABuT6F5K7ecItow%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1413\u0026min_rtt=698\u0026rtt_var=377\u0026sent=491\u0026recv=93\u0026lost=0\u0026retrans=0\u0026sent_bytes=509492\u0026recv_bytes=32297\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=7122\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10728,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10728, version 1.0","md5":"4659e39f06c04c93c6b6deca08147844","sha1":"c6fee61e0cc825aa206847ed1844603f013c7508","sha256":"21a4306e449be7b5403a98b97f9dd0f9d20bf07ab795f9d7116c6d9f72003556","sha512":"783c55dbc32a1696f7db358f20d485321135b16126abd3559e3b6baf8d2846bafc62beb6259ee2597ea64aff096a5ca7e2b0cfd7dbbdb5b7bf5f0d4ab09022a4","ssdeep":"192:bsx6lYCLGPlGzMePmcAnh1f6VXgPzfall36hnAEKFEBZ8ZJv86PM:bsx6xL2sjPmhnCaPTav36hPfDI7U","tlshash":"d722b02908468083d1ae01f8f2abcdc6678c9217678e512d51c9b469ceff1ec25f265e","first_seen":"2025-01-10T13:24:59.632921Z","last_seen":"2026-03-05T23:30:22.441911Z","times_seen":97,"resource_available":false,"data":null}},"time_used":611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/uploads/2025/09/cropped-logofb88-new-32x32.webp","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:00.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/cropped-logofb88-new-32x32.webp HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 998\r\ncf-ray: 9c5fc25fcc304e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:57:00 GMT\r\netag: \"3e6-68da42bf-83596;;;\"\r\nlast-modified: Mon, 29 Sep 2025 08:26:39 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=d3f%2Brpgi%2FRgdbxsKnnXAMkyOcP3vVN0DpuIh8ODF8iwFyer1ScP9d4fyXbEIk9JducvMli6IXpiV%2BT2FvV7ZQfZ9CRU0uBrxFVu45hzDXsBvCKH62%2FU6vJZc%2FmT22Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1873\u0026min_rtt=698\u0026rtt_var=1158\u0026sent=592\u0026recv=120\u0026lost=0\u0026retrans=0\u0026sent_bytes=605405\u0026recv_bytes=43661\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=8084\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":998,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fde9267a6d93c9008057970017c1a209","sha1":"092ecbeee039dd58efcd6324d0f97360c279837c","sha256":"5b3abfed31bff10926f86dc4f5c6d6aece9da4970c54734c34ca41dafd273720","sha512":"ecfc31eea9e4ea68d8056b509205c7afc3ec4c3a54ad5e434fa573cbcfe192e19196efe4ca6472ab184af116574067e9282c6d8a5aa585d43d87db3dfb5478f1","ssdeep":"","tlshash":"a011c854726e7e1a2554a83433765a730cf730c50f4e9b4bd0fa7557d908230b8a8790","first_seen":"2026-01-20T05:16:54.423416Z","last_seen":"2026-02-01T02:44:00.168124Z","times_seen":3,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/themes/flatsome/assets/js/flatsome.js?ver=51d1c732cb1803d92751","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:00.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/flatsome.js?ver=51d1c732cb1803d92751 HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 15899\r\ncf-ray: 9c5fc25fdc744e4c-OSL\r\netag: \"ce7a-68a573f2-81426;br\"\r\nlast-modified: Wed, 20 Aug 2025 07:06:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YLxDIHU3UjIvldsqxW4%2FKwDxhWGOQVCUt7lWSbpBCUOm%2Bk0FDGFowgw3XCL9mtdVNp4AR9duA%2B4JJu%2FwXD83BKl3v%2BWBW4r6KzLGpgNsqwmQOCcIOJsT6Sy8vL%2BvZQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1461\u0026min_rtt=698\u0026rtt_var=388\u0026sent=658\u0026recv=129\u0026lost=0\u0026retrans=0\u0026sent_bytes=678690\u0026recv_bytes=44075\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=8329\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52858,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52858), with no line terminators","md5":"d3155d97ab03b1d99d97adbe0892d522","sha1":"105405da20561d42ddef46e987afd209c23bfe95","sha256":"12c90140c176356d552a78595dba5c5920d2de8973af7dd157eb7fcadddd155f","sha512":"e24556f463737384409d93c3986b1ee6a39fee5e04d752c840ab24379db1af0d891007100fb65b8c33b0aa4e4f438a788f74cf39228ecb2aae2a33d80a752a07","ssdeep":"1536:wYrJqC5ZQ8kNSaNp6W9EtmoYsNqHMkSBed3tRm:7howWGX6sed+","tlshash":"f933e718725070fd01ff61a7f13fa72432376525b0064054b53e98fa2d6ad5e26a3fba","first_seen":"2024-06-20T14:33:15Z","last_seen":"2026-04-04T03:25:05.526435Z","times_seen":546,"resource_available":true,"data":null}},"time_used":834,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":833,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/banner_image/banners/20-1751681264141-slide.webp","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:00.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /banner_image/banners/20-1751681264141-slide.webp HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6022\r\ncf-ray: 9c5fc2601d144e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:57:00 GMT\r\netag: \"1786-686888f1-17a20d;;;\"\r\nlast-modified: Sat, 05 Jul 2025 02:07:45 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vG4CIJE4j%2BQABYGwdHP05BVEYj2HKPhjahEz%2F94W1Ylskt8nCqCW75gtslNIqSPB4wFH3u1rJT25AVp7gBbKx%2FDipTloZBeMwq%2FGGejOhOxwT19HIaL%2FkSZ8uUMOxA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1642\u0026min_rtt=698\u0026rtt_var=829\u0026sent=615\u0026recv=123\u0026lost=0\u0026retrans=0\u0026sent_bytes=630021\u0026recv_bytes=43795\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=8130\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6022,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"43f15000f8a00faa610b01f9cb786fbe","sha1":"a022fc3895e533fdadf0aa3aa01776576dd3b5ce","sha256":"ed45d4e371b2d925cefb97f1a9e5f2b2c1391c9f071e7645334747df0cf5c663","sha512":"cb2643d200b5ef644717cec9cbbb219f606d00877e4f0f762895597fdf846b9720907403baf47995a3a4dd786e99b4807ad3a333126f20321bb4149115988579","ssdeep":"96:eaowc/OlMWHG2Pz2PF84atex9Oa8Jd1SwwBPh+8FE7Itxn/g6vWLQczjky:eaomG2G2Pz2PF0tep8RSwChhFEE34FLd","tlshash":"4dc18fdabfc944ca178603a3bbbc03bef5c23c30c946b869eb5516179e652605cee445","first_seen":"2025-07-20T13:17:16.946122Z","last_seen":"2026-04-03T22:22:24.77134Z","times_seen":53,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":595,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/uploads/2025/03/logo-game-fb88-3.webp","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:00.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/logo-game-fb88-3.webp HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 75292\r\ncf-ray: 9c5fc2602d2e4e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:57:00 GMT\r\netag: \"1261c-68a573a1-835bf;;;\"\r\nlast-modified: Wed, 20 Aug 2025 07:05:05 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AuYtoZrOnxja%2FULxSX4Xys7lJRiTiSSOJW%2FmfGOD%2FrOGc4hCj4uzaSVqj%2B0tGFkRxut2Gj60Tth84rNNT%2FRv0ZEpXDfOBOs3PvCizt79prGSd7E7CprTTPZylUN5aw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1478\u0026min_rtt=698\u0026rtt_var=376\u0026sent=773\u0026recv=135\u0026lost=0\u0026retrans=0\u0026sent_bytes=813435\u0026recv_bytes=44366\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=8377\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75292,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"345d2a3eb1e062953197afece9f8f71f","sha1":"95334d43a40907fb78b5371f2ec7838e4a10c926","sha256":"5bf83eb217fccb699bfbd1b78f982b287a3cd1bea83a4a88fbfc43962930a5b1","sha512":"85495a5a26f795c9fd7d43c28a966a4872b7759d66d6b2f2fd030bda7c6026b8327083734e9bb2651f0125c63366e6a3467b6e336e099450d9e9adefe7710481","ssdeep":"1536:NU4sosD5YLjBPh5DLYsjYI7xQRwxZI9+2e6531UbmpBMHcjpUuplLSGpeYOpd:NU4qD56jX5ouKRw7C+X65FUbmpBxpUko","tlshash":"3c73023896449a3fddc963a2d248b4d7c35a5642713ede41aa8b3678803bf377e0c583","first_seen":"2026-01-20T05:16:54.486388Z","last_seen":"2026-02-01T02:44:00.219112Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1041,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":836,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/litespeed/css/883159f3575b30def53f5feff24b04b6.css?ver=55601","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:58.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/litespeed/css/883159f3575b30def53f5feff24b04b6.css?ver=55601 HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:58 GMT\r\ncontent-type: text/css\r\ncontent-length: 28021\r\ncf-ray: 9c5fc253b87b4e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:56:58 GMT\r\netag: \"251fb-697c7197-c5936;br\"\r\nlast-modified: Fri, 30 Jan 2026 08:53:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fD0jmE2hWwiidcL71J2BUgoZMx4oxpEDHvE1ckrV5TbDNFJx3zPejjFtRN42gWEQYzNE2YTvRlM0FXg2suywt4IPvloq074HuMu8EmxTtbZiufJYdq3aOwfIj3qzJg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1723\u0026min_rtt=698\u0026rtt_var=873\u0026sent=178\u0026recv=67\u0026lost=0\u0026retrans=0\u0026sent_bytes=154662\u0026recv_bytes=27741\u0026delivery_rate=27281507\u0026cwnd=31200\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=6345\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152059,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f09f8b630c6aa748f6a6307537603d38","sha1":"f4a124b47f52d44bac35e609cd17f0d33bc31853","sha256":"05242695b99f141d7166c05b79862da2c99c2ec72bfc4be4aeb976614171e0ab","sha512":"967df18c463144ff73bbd77286da081a2c2f47e6fe9b2ba881daeb86768862c68cb01ae6ef848713f71f2e8fa242519e1081a57b61d5e3e2c696d45773306175","ssdeep":"3072:Uq5/324TXYK8Jm1LqCYDASx9JNwV0dOeLWo0EADT+1zeckhNVZV:nSx9JNwV0dOeLWo0EADT+1zeckhNVZV","tlshash":"d5e32c52f384242ca5178319e5c4fbbc763991a1e7624afbf0639629cbcb6da0135f0d","first_seen":"2025-08-26T05:42:28.808109Z","last_seen":"2026-04-04T03:25:05.544211Z","times_seen":55,"resource_available":false,"data":null}},"time_used":792,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":791,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/wp-content/fonts/roboto/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWub2bVmbiArmlw.woff2","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www1.co.com/","date":"2026-01-30T08:56:59.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /wp-content/fonts/roboto/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWub2bVmbiArmlw.woff2 HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:56:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7840\r\ncf-ray: 9c5fc2597a694e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:56:59 GMT\r\netag: \"1ea0-69252da5-1906e;;;\"\r\nlast-modified: Tue, 25 Nov 2025 04:16:37 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NPovCvFkSc2AEbSr3fNTnuYRNIyPAy20F4HR11tTRrCMBAb7e6p2XFaA9chKo7jS2QH4OOUjhy9jPrEYQ1JmYNG21Taq2oeSopySxOW%2BhGQKwSfrFFIY7i5aYyNIrw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1393\u0026min_rtt=698\u0026rtt_var=448\u0026sent=483\u0026recv=92\u0026lost=0\u0026retrans=0\u0026sent_bytes=500561\u0026recv_bytes=32249\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=7057\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7840,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7840, version 1.0","md5":"8b2ca02fc0aa5d77ff3b11a897a9f28c","sha1":"b87b69b265def126d6a1b8e11f928917a8989935","sha256":"b5c6e34d471a72326c3151f6f89b70b3e4322747f767d40fcd4965607ebcca68","sha512":"2e4c39b63ad19c67596c0f96d3f48014f489b08ea57efc61a6d6151b27be5d79ab95c7414b1c1dccd45da800a22ceba3f41b85e25a549defcead967534a03f9d","ssdeep":"192:Tskgs/5YucBCatfhXhik28g7GFww/mx0hgC+L23Ep6z:Yhs/HgFhimoGCwOmL+Dkz","tlshash":"59f1cfafe065ffbdc7844e795706be5c56ce47862106800dc1f323b98c25a59c8b19a4","first_seen":"2025-06-08T08:55:53.296348Z","last_seen":"2026-03-16T12:16:32.771285Z","times_seen":43,"resource_available":false,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www1.co.com/banner_image/banners/20-1752996649590-slide.webp","fqdn":"www1.co.com","domain":"www1.co.com","tld":"co.com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www1.co.com/","date":"2026-01-30T08:57:03.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 09:26:09 GMT","end":"Sun, 08 Mar 2026 10:23:51 GMT"},"fingerprint":{"sha1":"BB:23:02:BD:5C:8A:E0:EB:DD:AF:8B:C8:FA:B9:AC:0F:C1:BE:40:7B","sha256":"5D:A3:0E:6D:EC:EC:82:B1:E1:A3:F4:7D:05:E9:67:B6:69:40:C6:1C:A0:CC:2E:0B:39:D5:DD:2E:95:56:D3:2A"}}},"request":{"raw":"GET /banner_image/banners/20-1752996649590-slide.webp HTTP/1.1\r\nHost: www1.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www1.co.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=SAbz73VQLQmnV5LGRm8hvxsV22NlPrGdOESbx5cchc0-1769763415-1.2.1.1-oD590hoPJNJxgLffRnXUbtKYFSBkbPwH.wtXvionhVAp9KM.8DAyZfr2eLjidsrj.ZwbuKnn8gAfgf69R7dLsbX39Up19ioAVGH0UO667ydxkb0k5LzGIKIwngkzEP5PtBB9jPPT3s2qQBSSOD4cq2kUqbnnIyor7m9_82vQvhJjfTRcZ9bmnGNj1oJCuLTh_xxlxQcxns9VYA8pJMFnGVWL_b.hTuEMwTWMdkc.oE4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 08:57:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6068\r\ncf-ray: 9c5fc27478da4e4c-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 30 Jan 2027 08:57:03 GMT\r\netag: \"17b4-687c9b2a-17a21b;;;\"\r\nlast-modified: Sun, 20 Jul 2025 07:30:50 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yc4gzey%2BOHaQP5njcALq%2FmWO7NgGMAfTOob41UinTsC5loUnhgZRUET3hBuO2nscwGP8Dfo%2BC6KF5L5FIVIokAxYfThnTYE3Gx5qim7s%2BG9qZW9QPYxO1PxWXchyOQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1220\u0026min_rtt=698\u0026rtt_var=201\u0026sent=972\u0026recv=153\u0026lost=0\u0026retrans=0\u0026sent_bytes=1037360\u0026recv_bytes=46206\u0026delivery_rate=31321859\u0026cwnd=68400\u0026unsent_bytes=0\u0026cid=3dac024783179d09\u0026ts=11012\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6068,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8a33409fd686d2ad7bba95c01b74a76b","sha1":"3d8c81bb00f2551f9642d7897565b246d18cd508","sha256":"46a5eca4bc67216d3720b3520779f16a7f9ee0b7618555a00af6a4f729c8f015","sha512":"379993012d5df1f5f9ac0ad1570485e7f2680c067b5f270fa47335668f6e94ce7e2c333eb719242e6ad3eb637f5e9329c021ab022a2291dc2055f3678fb75ac0","ssdeep":"96:PkAbac1bJgYriyZNvsd0bcTCpy6x7bljGw1VOlBW66m0PI33FCd0jHNok:MA+czgYrM6pHx7Ew1VO7W66P4O0Zz","tlshash":"78c19ff4de2132a4db5626cc311a19c61cffeafe5741b6f003899a2206907e1322e723","first_seen":"2025-09-21T15:24:59.015934Z","last_seen":"2026-04-01T12:37:45.204085Z","times_seen":35,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www1.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}