SocGholish Stage 1 profiling/evasion script URL observed in image; performs bot detection, DevTools checks, WordPress admin cookie checks, and mouse movement tracking before serving fake update
