{"report_id":"113dfacc-50b9-406f-8fe3-915a54cf8d4e","version":6,"status":"done","tags":[],"date":"2025-10-25T12:47:49Z","url":{"schema":"https","addr":"lovikta.com/wp/goie/users/088d7/visa/confirm.php","fqdn":"lovikta.com","domain":"lovikta.com","tld":"com"},"ip":{"addr":"66.147.240.195","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"lovikta.com/wp/goie/users/088d7/visa/confirm.php","fqdn":"lovikta.com","domain":"lovikta.com","tld":"com"},"title":"Update Payment Details"},"submit":{"url":{"schema":"https","addr":"lovikta.com/wp/goie/users/088d7/visa/confirm.php","fqdn":"lovikta.com","domain":"lovikta.com","tld":"com"},"ip":{"addr":"66.147.240.195","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-29T12:47:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-25T12:47:28Z","timestamp":1761396448,"ip_dst":{"addr":"172.67.75.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.4","port":56424,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Observed External IP Lookup Domain Domain (api .country .is in TLS SNI)","source":"{\"timestamp\":\"2025-10-25T12:47:28.617337+0000\",\"flow_id\":349192767687812,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":56424,\"dest_ip\":\"172.67.75.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2061044,\"rev\":1,\"signature\":\"ET INFO Observed External IP Lookup Domain Domain (api .country .is in TLS SNI)\",\"category\":\"Device Retrieving External IP Address Detected\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_03_25\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2025_03_25\"]}},\"tls\":{\"sni\":\"api.country.is\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3438,\"start\":\"2025-10-25T12:47:28.609412+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"lovikta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"lovikta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"lovikta.com","ip":{"addr":"66.147.240.195","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2016-07-22","domain_rank":0,"first_seen":"2025-07-04T19:40:16.223117Z","last_seen":"2025-10-23T07:44:21.734476Z","alert_count":10,"request_count":5,"received_data":27498,"sent_data":2418,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"img.icons8.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2011-10-04","domain_rank":218854,"first_seen":"2017-05-26T09:10:54Z","last_seen":"2025-10-20T18:44:01.629328Z","alert_count":0,"request_count":2,"received_data":2726,"sent_data":910,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"paymentsdk.spotifycdn.com","ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2019-09-11","domain_rank":954169,"first_seen":"2022-08-18T12:29:23Z","last_seen":"2025-10-23T07:44:21.775937Z","alert_count":0,"request_count":3,"received_data":7383,"sent_data":1353,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.country.is","ip":{"addr":"172.67.75.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-01-30","domain_rank":253271,"first_seen":"2016-09-23T06:54:06Z","last_seen":"2025-10-21T12:03:43.641912Z","alert_count":0,"request_count":1,"received_data":641,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2025-10-19T23:15:27.068202Z","alert_count":0,"request_count":1,"received_data":5837,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-25T12:47:28Z","timestamp":1761396448,"ip_dst":{"addr":"172.67.75.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.4","port":56424,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Observed External IP Lookup Domain Domain (api .country .is in TLS SNI)","source":"{\"timestamp\":\"2025-10-25T12:47:28.617337+0000\",\"flow_id\":349192767687812,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":56424,\"dest_ip\":\"172.67.75.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2061044,\"rev\":1,\"signature\":\"ET INFO Observed External IP Lookup Domain Domain (api .country .is in TLS SNI)\",\"category\":\"Device Retrieving External IP Address Detected\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_03_25\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2025_03_25\"]}},\"tls\":{\"sni\":\"api.country.is\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3438,\"start\":\"2025-10-25T12:47:28.609412+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"lovikta.com/wp/goie/users/088d7/visa/languages.js","fqdn":"lovikta.com","domain":"lovikta.com","tld":"com"},"ip":{"addr":"66.147.240.195","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"349ab872880f28bc70e8bd28e9f05523","sha1":"424f8de3d059c7c50a7921886887b7fca94ae050","sha256":"41206bedb4a82b8b23ac9430d74d9bb6453545a03ea65d5e028fd25e3b100752","sha512":"7acab5efbb0b7777cfdb18be5295083c45aaa12abff5fb33dc145e5c8e65908788c642c5151a801dc184dea7ceb7e0bfb6abb9e826d50bfd803e9d123d64a280","ssdeep":"192:Kdzy7Va0n+KaZhAVfuWI79swHwheHcKh//A5o:8y7Va0nHaZhAVfuWI79swGe8Kh//A5o","tlshash":"70d1d18a6ae260311e9a500a25475936703821ef4f21790abbdcc5a41f0e7dfdcfe36c","size":6256,"data":"","first_seen":"2025-10-23T07:44:23.539906Z","last_seen":"2025-10-27T21:07:57.583054Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lovikta.com/wp/goie/users/088d7/visa/countries.js","fqdn":"lovikta.com","domain":"lovikta.com","tld":"com"},"ip":{"addr":"66.147.240.195","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"653c24987f53c463cebfdfd805b29f82","sha1":"6f3ce9efdde239709d818e83a42238d8f0478935","sha256":"c49ce703caf336b029c475e55ba33f62b3106f2006690cdd57a524e4945fccac","sha512":"4e61cf8849247acacaafe9d335341d48de215162d22d73edbe8cfca6f7ae459b24939dd29fb84d038ce5682ab900fd4df5caeb7bf3abfe426a5b4e3907d8f89b","ssdeep":"","tlshash":"0481f2f99062731d4c60529fa549b90388c251d3ce157806fcbdd2a54f9df58a83c2bf","size":3971,"data":"","first_seen":"2025-10-23T07:44:23.629678Z","last_seen":"2025-10-27T21:07:57.576961Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lovikta.com/wp/goie/users/088d7/visa/confirm.php","fqdn":"lovikta.com","domain":"lovikta.com","tld":"com"},"ip":{"addr":"66.147.240.195","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"174613aa35228fc1f9830b3dbca44dd9","sha1":"614af5256421904e13187435159da60f2920290a","sha256":"90ecceb3369bb08f0c9de680d3cb2d133b910c31700356d62eacd3808aea1956","sha512":"98f63d9cbf9b4dee7017956fc07e1b22ef90ee864b4fcbb6ac7a105dcb711a60c512b8104e30eda9a89b6f647b6b2a7cba272f39a8732a30850dfffcde3bd9ab","ssdeep":"","tlshash":"3c416d6e36a71534aefb636e33db7744743490032941e8097b9c87418f91be599366c8","size":2264,"data":"","first_seen":"2025-10-23T07:44:23.76934Z","last_seen":"2025-10-27T21:07:57.583578Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"lovikta.com/wp/goie/users/088d7/visa/languages.js","fqdn":"lovikta.com","domain":"lovikta.com","tld":"com"},"ip":{"addr":"66.147.240.195","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lovikta.com/wp/goie/users/088d7/visa/confirm.php","date":"2025-10-25T12:47:28.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.lovikta.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Sep 2025 09:52:33 GMT","end":"Sat, 06 Dec 2025 09:52:32 GMT"},"fingerprint":{"sha1":"61:D0:EC:7E:31:9F:A0:FC:F0:73:65:3A:75:16:A6:16:AF:AE:8B:89","sha256":"DB:0C:C2:24:40:BC:8C:D6:E7:CE:B1:94:09:94:4B:FB:54:FF:72:FA:CC:E1:37:02:D0:D2:13:14:5D:30:BB:59"}}},"request":{"raw":"GET /wp/goie/users/088d7/visa/languages.js HTTP/1.1\r\nHost: lovikta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lovikta.com/wp/goie/users/088d7/visa/confirm.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 24 Oct 2025 10:50:19 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 2261\r\ncontent-type: application/javascript\r\ndate: Sat, 25 Oct 2025 12:47:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6256,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"349ab872880f28bc70e8bd28e9f05523","sha1":"424f8de3d059c7c50a7921886887b7fca94ae050","sha256":"41206bedb4a82b8b23ac9430d74d9bb6453545a03ea65d5e028fd25e3b100752","sha512":"7acab5efbb0b7777cfdb18be5295083c45aaa12abff5fb33dc145e5c8e65908788c642c5151a801dc184dea7ceb7e0bfb6abb9e826d50bfd803e9d123d64a280","ssdeep":"192:Kdzy7Va0n+KaZhAVfuWI79swHwheHcKh//A5o:8y7Va0nHaZhAVfuWI79swGe8Kh//A5o","tlshash":"70d1d18a6ae260311e9a500a25475936703821ef4f21790abbdcc5a41f0e7dfdcfe36c","first_seen":"2025-10-23T07:44:23.539906Z","last_seen":"2025-10-27T21:07:57.583054Z","times_seen":5,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"lovikta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"lovikta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lovikta.com/wp/goie/users/088d7/visa/countries.js","fqdn":"lovikta.com","domain":"lovikta.com","tld":"com"},"ip":{"addr":"66.147.240.195","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lovikta.com/wp/goie/users/088d7/visa/confirm.php","date":"2025-10-25T12:47:28.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.lovikta.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Sep 2025 09:52:33 GMT","end":"Sat, 06 Dec 2025 09:52:32 GMT"},"fingerprint":{"sha1":"61:D0:EC:7E:31:9F:A0:FC:F0:73:65:3A:75:16:A6:16:AF:AE:8B:89","sha256":"DB:0C:C2:24:40:BC:8C:D6:E7:CE:B1:94:09:94:4B:FB:54:FF:72:FA:CC:E1:37:02:D0:D2:13:14:5D:30:BB:59"}}},"request":{"raw":"GET /wp/goie/users/088d7/visa/countries.js HTTP/1.1\r\nHost: lovikta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lovikta.com/wp/goie/users/088d7/visa/confirm.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 24 Oct 2025 10:50:19 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1437\r\ncontent-type: application/javascript\r\ndate: Sat, 25 Oct 2025 12:47:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3971,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"653c24987f53c463cebfdfd805b29f82","sha1":"6f3ce9efdde239709d818e83a42238d8f0478935","sha256":"c49ce703caf336b029c475e55ba33f62b3106f2006690cdd57a524e4945fccac","sha512":"4e61cf8849247acacaafe9d335341d48de215162d22d73edbe8cfca6f7ae459b24939dd29fb84d038ce5682ab900fd4df5caeb7bf3abfe426a5b4e3907d8f89b","ssdeep":"","tlshash":"0481f2f99062731d4c60529fa549b90388c251d3ce157806fcbdd2a54f9df58a83c2bf","first_seen":"2025-10-23T07:44:23.629678Z","last_seen":"2025-10-27T21:07:57.576961Z","times_seen":5,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"lovikta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"lovikta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.icons8.com/ios-filled/50/ffffff/menu.png","fqdn":"img.icons8.com","domain":"icons8.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lovikta.com/wp/goie/users/088d7/visa/confirm.php","date":"2025-10-25T12:47:28.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1004834818.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 22:30:56 GMT","end":"Sun, 16 Nov 2025 22:30:55 GMT"},"fingerprint":{"sha1":"7E:88:A0:84:3F:66:F3:87:2D:53:89:83:58:B1:9D:0C:67:BF:B8:F7","sha256":"63:36:C7:F4:78:D5:27:9D:86:D4:1A:46:B5:64:89:6B:E3:48:E5:BF:36:24:E4:FC:F3:59:4B:C7:63:BD:58:CF"}}},"request":{"raw":"GET /ios-filled/50/ffffff/menu.png HTTP/1.1\r\nHost: img.icons8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lovikta.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 12:47:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 163\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: icon-id, icon-size, icon-format\r\nicon-id: 8113\r\nicon-size: 50\r\nicon-format: png\r\nlast-modified: Mon, 20 Oct 2025 10:55:33\r\nversion: 0.0.29\r\nfrom-mongo-cache: false\r\nfrom-redis-cache: false\r\nnot-found-platform: false\r\ncache-control: public, max-age=302400\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nx-77-nzt: EwwBuUwJCgHXsVYEAAwBuUwKDAH3awYAAAwBJRPCMQG3cQEAAA\r\nx-77-nzt-ray: e2f75420d689a095e0c6fc68b54e2d15\r\nx-77-cache: HIT\r\nx-77-age: 284337\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":163,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"8778a8748920351b79d3e43ee4b09b12","sha1":"321dea5d0dedccd5cb8f7544f1aac1107c78dd24","sha256":"c1eb1e5839aa81d4c7a53441399f4abd1728c09c01ec5891481a9de90c2c7785","sha512":"d8b8ef3015b66ae209f89b9123e4044b877dfaba089feccb5b27ba078f35c2362719007a2bb00d6e6a6a3f1b4d8e7512dd92cc0cb00cd1311ddd8ffc7a25b5d7","ssdeep":"","tlshash":"0bc08cce72446fabc8698f72501b01e4c87b522a0812909dd4e689606623ca02948363","first_seen":"2025-08-13T07:16:25.704539Z","last_seen":"2026-06-05T06:25:15.017967Z","times_seen":75,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":110,"dns":71,"connect":7,"send":0,"wait":7,"receive":1,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentsdk.spotifycdn.com/svg/cards/visa.svg","fqdn":"paymentsdk.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lovikta.com/wp/goie/users/088d7/visa/confirm.php","date":"2025-10-25T12:47:28.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:6E:8A:A8:26:1C:79:48:DC:EB:3F:9B:54:15:EA:ED:97:09:20:DF","sha256":"0C:4C:83:FA:C8:14:CE:AD:FE:9A:DA:25:4E:14:DC:0C:52:AD:C4:03:62:4A:24:70:72:A5:91:D9:FE:96:BB:8C"}}},"request":{"raw":"GET /svg/cards/visa.svg HTTP/1.1\r\nHost: paymentsdk.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lovikta.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 28 Nov 2023 09:32:04 GMT\r\netag: \"2d8c67c352ecc83b366185a5c26be6b1\"\r\nx-amz-meta-goog-reserved-file-mtime: 1701163399\r\ncontent-type: image/svg+xml\r\nx-amz-checksum-crc32c: GpuFeg==\r\naccept-ranges: bytes\r\ncontent-length: 1081\r\nexpires: Sat, 25 Oct 2025 12:47:28 GMT\r\ndate: Sat, 25 Oct 2025 12:47:28 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1081,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d8c67c352ecc83b366185a5c26be6b1","sha1":"3bd2a0f4aaa05139f3bc860a60f4fc20cc70b0cd","sha256":"0c63a22d1299d8cf6a4a6e9cabf3ca03bac10f335b24fcd28899e8dd892d80af","sha512":"6d8681f5e1deaeeeec93e8d9e4c71c50a7abed8598a326222acbf43e4becf4ab1ae618773b4f503ca190f18c892dd1657788e485a6ddac13653eabaedab3ba36","ssdeep":"","tlshash":"2a11ad7cc778466c9a9943f41f3828b174ae70cf10e552bd98acca70af544c98a898c8","first_seen":"2024-08-20T15:01:10.618489Z","last_seen":"2026-06-03T17:05:04.153185Z","times_seen":98,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":222,"dns":203,"connect":1,"send":0,"wait":5,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentsdk.spotifycdn.com/svg/cards/amex.svg","fqdn":"paymentsdk.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lovikta.com/wp/goie/users/088d7/visa/confirm.php","date":"2025-10-25T12:47:28.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:6E:8A:A8:26:1C:79:48:DC:EB:3F:9B:54:15:EA:ED:97:09:20:DF","sha256":"0C:4C:83:FA:C8:14:CE:AD:FE:9A:DA:25:4E:14:DC:0C:52:AD:C4:03:62:4A:24:70:72:A5:91:D9:FE:96:BB:8C"}}},"request":{"raw":"GET /svg/cards/amex.svg HTTP/1.1\r\nHost: paymentsdk.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lovikta.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 28 Nov 2023 09:32:04 GMT\r\netag: \"44c54a9d214cf84cebf776840aa9c16f\"\r\nx-amz-meta-goog-reserved-file-mtime: 1701163399\r\ncontent-type: image/svg+xml\r\nx-amz-checksum-crc32c: laCorQ==\r\naccept-ranges: bytes\r\ncontent-length: 3628\r\nexpires: Sat, 25 Oct 2025 12:47:28 GMT\r\ndate: Sat, 25 Oct 2025 12:47:28 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3628,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"44c54a9d214cf84cebf776840aa9c16f","sha1":"8acac62e2b70e90f4d875e8b9e1eee78385b3c6c","sha256":"e361fc4bbcf94c8347f03dad30ca336a35e5af07d9ea5c120b1316ed0be793e8","sha512":"4b0c83c44187e059e8a94e6603348bbcc61ef1ce6081ea2b6bdd8115bd3962c12d151db5979ba9aa5ff77060b4e80a9139b9a61b35fd14a4129e7679043caf12","ssdeep":"","tlshash":"1c7198ca93f465bc95ce4b4fdf390c8a389f00f929ab419880ad97e56f57819f5c4c88","first_seen":"2024-08-20T15:01:10.619669Z","last_seen":"2026-06-03T17:05:04.155899Z","times_seen":98,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":215,"dns":203,"connect":1,"send":0,"wait":3,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.country.is/","fqdn":"api.country.is","domain":"country.is","tld":"is"},"ip":{"addr":"172.67.75.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lovikta.com/wp/goie/users/088d7/visa/confirm.php","date":"2025-10-25T12:47:28.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"country.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 19:13:56 GMT","end":"Sun, 28 Dec 2025 20:13:40 GMT"},"fingerprint":{"sha1":"39:5F:F4:C6:18:04:FC:73:0C:3B:C8:4E:1A:7A:84:01:EB:39:D1:35","sha256":"39:E6:3E:E1:7C:CC:B7:9E:18:07:11:57:07:C7:4E:94:08:8A:C8:C3:6C:AB:C1:CD:07:06:7F:60:B2:BE:E3:B3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.country.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lovikta.com/\r\nOrigin: https://lovikta.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 12:47:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qzhNwjZiY3aZoiSkzyEQoUuxwhSzJatRl5NFVvE3rfm5rcAMdicmk3jkzSSW1QdFZXP%2FlEmpQAeA%2FtEOhDstHkmv7Na9omDz1GZP\"}]}\r\netag: W/\"24-zrg06P0Q0vTI8rHm2IALnoRYNN8\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9941d29bfa5d56c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6f805925944ef9fa79bd0a02e00e2e99","sha1":"ceb834e8fd10d2f4c8f2b1e6d8800b9e845834df","sha256":"3ef013039e6df373c7ef0730658c403527318c307c67145ac08c728492392800","sha512":"ba60076e291e81c9f43d0d755a461242468502102efa19654333ad0feb8ea26a16e4e5ee6cdbc474f55b07e26342584bd875ae21b9734b2c9077833e00183540","ssdeep":"","tlshash":"0480043500504714dc50c14dd507131153d54105c3070044c5c03715c5107fc1140031","first_seen":"2023-04-10T08:30:32Z","last_seen":"2026-06-07T04:43:25.14461Z","times_seen":4318,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":28,"dns":5,"connect":1,"send":0,"wait":21,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lovikta.com/favicon.ico","fqdn":"lovikta.com","domain":"lovikta.com","tld":"com"},"ip":{"addr":"66.147.240.195","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lovikta.com/wp/goie/users/088d7/visa/confirm.php","date":"2025-10-25T12:47:28.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.lovikta.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Sep 2025 09:52:33 GMT","end":"Sat, 06 Dec 2025 09:52:32 GMT"},"fingerprint":{"sha1":"61:D0:EC:7E:31:9F:A0:FC:F0:73:65:3A:75:16:A6:16:AF:AE:8B:89","sha256":"DB:0C:C2:24:40:BC:8C:D6:E7:CE:B1:94:09:94:4B:FB:54:FF:72:FA:CC:E1:37:02:D0:D2:13:14:5D:30:BB:59"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: lovikta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lovikta.com/wp/goie/users/088d7/visa/confirm.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 25 Oct 2025 12:47:29 GMT\r\nserver: nginx/1.25.5\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nlink: \u003chttps://lovikta.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nlocation: https://lovikta.com/wp-includes/images/w-logo-blue-white-bg.png\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T13:28:06.233495Z","times_seen":17690637,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"lovikta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"lovikta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lovikta.com/wp-includes/images/w-logo-blue-white-bg.png","fqdn":"lovikta.com","domain":"lovikta.com","tld":"com"},"ip":{"addr":"66.147.240.195","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lovikta.com/wp/goie/users/088d7/visa/confirm.php","date":"2025-10-25T12:47:29.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.lovikta.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Sep 2025 09:52:33 GMT","end":"Sat, 06 Dec 2025 09:52:32 GMT"},"fingerprint":{"sha1":"61:D0:EC:7E:31:9F:A0:FC:F0:73:65:3A:75:16:A6:16:AF:AE:8B:89","sha256":"DB:0C:C2:24:40:BC:8C:D6:E7:CE:B1:94:09:94:4B:FB:54:FF:72:FA:CC:E1:37:02:D0:D2:13:14:5D:30:BB:59"}}},"request":{"raw":"GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1\r\nHost: lovikta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lovikta.com/wp/goie/users/088d7/visa/confirm.php\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 26 Aug 2025 06:17:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4119\r\ncontent-type: image/png\r\ndate: Sat, 25 Oct 2025 12:47:29 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"000bf649cc8f6bf27cfb04d1bcdcd3c7","sha1":"d73d2f6d74ec6cdcbae07955592962e77d8ae814","sha256":"6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0","sha512":"73d2ea5ffc572c1ae73f37f8f0ff25e945afee8e077b6ee42ce969e575cdc2d8444f90848ea1cb4d1c9ee4bd725aee2b4576afc25f17d7295a90e1cbfe6edfd5","ssdeep":"96:h3bdWfcmTY+aRF1pXWZL2+42HGhIUc8KeLEd:hgXTY+as02mOB8XLEd","tlshash":"00814b63df38c566e66a2b189ff6bca56b290fd50ca1194c0eecb025632c06d1065089","first_seen":"2023-04-08T12:31:37Z","last_seen":"2026-08-03T10:59:36.046457Z","times_seen":72489,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"lovikta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"lovikta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lovikta.com/wp/goie/users/088d7/visa/confirm.php","fqdn":"lovikta.com","domain":"lovikta.com","tld":"com"},"ip":{"addr":"66.147.240.195","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-25T12:47:27.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.lovikta.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Sep 2025 09:52:33 GMT","end":"Sat, 06 Dec 2025 09:52:32 GMT"},"fingerprint":{"sha1":"61:D0:EC:7E:31:9F:A0:FC:F0:73:65:3A:75:16:A6:16:AF:AE:8B:89","sha256":"DB:0C:C2:24:40:BC:8C:D6:E7:CE:B1:94:09:94:4B:FB:54:FF:72:FA:CC:E1:37:02:D0:D2:13:14:5D:30:BB:59"}}},"request":{"raw":"GET /wp/goie/users/088d7/visa/confirm.php HTTP/1.1\r\nHost: lovikta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 12:47:27 GMT\r\nserver: nginx/1.25.5\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 2540\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7724,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"b8661d184857277236a651db7d983657","sha1":"320425502edfbfe06a9921c3eed1b5f6fe76ece0","sha256":"f872d1ad460f44a155267210625cb1b505d12c688779ff92a3bbd2309dd54dd0","sha512":"da295803e5ee46283e7086e9cd46562fba2d24de5dd1761984ec16a678847f6d2e317925c4e572f7f9095b3a6f06c2ba3a7485571a5f8d62f77c2b814829a868","ssdeep":"192:vrlSLJ8+ObEqdqSAmFYnVnZmNAtqJIGRdnezHpG:vra9CErmFYPd4IOEpG","tlshash":"f6f1646b25e2013ae997819d3b97fb0e7924c1039543d9593eec1b90cf89f92cdb3258","first_seen":"2025-10-23T07:44:23.499082Z","last_seen":"2025-10-27T21:07:57.579868Z","times_seen":5,"resource_available":false,"data":null}},"time_used":755,"timings":{"blocked":282,"dns":1,"connect":136,"send":0,"wait":186,"receive":0,"ssl":147},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"lovikta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"lovikta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/2/26/Spotify_logo_with_text.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lovikta.com/wp/goie/users/088d7/visa/confirm.php","date":"2025-10-25T12:47:28.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 07:25:45 GMT","end":"Tue, 13 Jan 2026 07:25:44 GMT"},"fingerprint":{"sha1":"4F:30:D3:13:28:19:1F:F1:40:FE:1E:F5:B4:A8:89:FD:9E:AC:EC:AD","sha256":"2E:EF:3D:23:1B:2B:63:B9:1F:1A:F1:5A:43:84:9A:6A:40:7F:00:3E:4B:E6:48:EB:EB:7B:3D:2A:90:B7:F4:7E"}}},"request":{"raw":"GET /wikipedia/commons/2/26/Spotify_logo_with_text.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lovikta.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 09:38:46 GMT\r\nserver: ATS/9.2.11\r\netag: W/8499c8e5f2c80a427f7695acd9d4bcf9\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: bpw38r2ss92m295r80g3gr9tk5lipsx\r\nlast-modified: Sat, 23 Jan 2016 21:17:48 GMT\r\ncontent-encoding: gzip\r\nage: 11321\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/7\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=s8h9I2pGBOeonR8q6kyVRgKXAAAAAFvdP57bn-a9KUsp4dwjku5LP6RrDQA4vpVF;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sun, 25 Oct 2026 00:00:00 GMT\r\ncontent-length: 2082\r\nx-analytics: \r\nx-request-id: 5bbbc249-b77d-4a6c-8ac7-da93d2a5f99b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4500,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8499c8e5f2c80a427f7695acd9d4bcf9","sha1":"64537a002bc1d700b3237856e3dd9a6a261c3c21","sha256":"c0e57c534e7fce5e66fb419c269b97d436385a2c69b9f508edf480ef60dedf91","sha512":"c515a06ea4cb2fdaa9a0f65ff3e29e19e25782794eb80b5b23762bfb94712eb3c8e5df3f1321e4dec7df218e803ac8dc295d7d01873a57b1e85b7ddcec00a1cf","ssdeep":"96:WNQdyfE+0X727zlk/7HuIxzHRmFEt0fu2YSoyIFSk:WNQdKEXXck/7HDZHIFEGfu2YSoJ","tlshash":"1f9121efebe96374388f4bb4cf26c4e0314aa4fd7f5662586178e6609183dc48608955","first_seen":"2025-02-25T07:13:04.374302Z","last_seen":"2026-07-29T16:15:47.549186Z","times_seen":92,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":102,"dns":31,"connect":20,"send":0,"wait":21,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.icons8.com/ios-filled/50/ffffff/user-male-circle.png","fqdn":"img.icons8.com","domain":"icons8.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lovikta.com/wp/goie/users/088d7/visa/confirm.php","date":"2025-10-25T12:47:28.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1004834818.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 22:30:56 GMT","end":"Sun, 16 Nov 2025 22:30:55 GMT"},"fingerprint":{"sha1":"7E:88:A0:84:3F:66:F3:87:2D:53:89:83:58:B1:9D:0C:67:BF:B8:F7","sha256":"63:36:C7:F4:78:D5:27:9D:86:D4:1A:46:B5:64:89:6B:E3:48:E5:BF:36:24:E4:FC:F3:59:4B:C7:63:BD:58:CF"}}},"request":{"raw":"GET /ios-filled/50/ffffff/user-male-circle.png HTTP/1.1\r\nHost: img.icons8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lovikta.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 12:47:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 1134\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: icon-id, icon-size, icon-format\r\nicon-id: 7819\r\nicon-size: 50\r\nicon-format: png\r\nlast-modified: Mon, 20 Oct 2025 13:18:35\r\nversion: 0.0.29\r\nfrom-mongo-cache: false\r\nfrom-redis-cache: false\r\nnot-found-platform: false\r\ncache-control: public, max-age=302400\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nx-77-nzt: EwwBuUwJCgHXtFYEAAwBuUwKAQH3fwwAAAwBw7WvBgGzvp0EAA\r\nx-77-nzt-ray: e2f75420d689a095e0c6fc681cd79c15\r\nx-77-cache: HIT\r\nx-77-age: 284340\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1134,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"974560e07d80a8fb2d63ef3f1024184d","sha1":"bfbf782d05d796d01e1d7341c7c7fc4e8923a866","sha256":"d6a96271a40120fd3af662dfb86f9d688b1b914c675b12fa70902f5e0d2409c3","sha512":"ba76abae69ae809a6409860ce74de0471a8fd776a8e0e232d69d310a48c1d7a461068f40a15226fb8d9f8f8f37342ffa2853f38c7f77a15404256faea67a6da4","ssdeep":"","tlshash":"ba21ca989ec15c3fdde933399b1a8d25da97c7a84e30594bc0f9c20171111f02594aee","first_seen":"2025-02-25T07:13:04.375383Z","last_seen":"2026-07-13T06:33:37.450903Z","times_seen":70,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":119,"dns":72,"connect":8,"send":0,"wait":8,"receive":1,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentsdk.spotifycdn.com/svg/cards/mastercard.svg","fqdn":"paymentsdk.spotifycdn.com","domain":"spotifycdn.com","tld":"com"},"ip":{"addr":"23.36.77.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lovikta.com/wp/goie/users/088d7/visa/confirm.php","date":"2025-10-25T12:47:28.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotifycdn.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:6E:8A:A8:26:1C:79:48:DC:EB:3F:9B:54:15:EA:ED:97:09:20:DF","sha256":"0C:4C:83:FA:C8:14:CE:AD:FE:9A:DA:25:4E:14:DC:0C:52:AD:C4:03:62:4A:24:70:72:A5:91:D9:FE:96:BB:8C"}}},"request":{"raw":"GET /svg/cards/mastercard.svg HTTP/1.1\r\nHost: paymentsdk.spotifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lovikta.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 28 Nov 2023 09:32:05 GMT\r\netag: \"f6a43c17f336e715616cc19e7bb933c8\"\r\nx-amz-meta-goog-reserved-file-mtime: 1701163399\r\ncontent-type: image/svg+xml\r\nx-amz-checksum-crc32c: 4QURQQ==\r\naccept-ranges: bytes\r\ncontent-length: 941\r\nexpires: Sat, 25 Oct 2025 12:47:28 GMT\r\ndate: Sat, 25 Oct 2025 12:47:28 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":941,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f6a43c17f336e715616cc19e7bb933c8","sha1":"8c200b13b451992efbbcafe452c7ff5ed99fbcc3","sha256":"28ff9e3d6d2b1b4f2339912792253e58abdac2af4a1757a646b496b6d8b7aa92","sha512":"9c751637a54799b30e9ef30a10d6d5aacd3d88782014d434c251e8333d772d05c573fd950677ebd3228ce1223c519f1327d28f315f4e4f179756bec15e7f13f4","ssdeep":"","tlshash":"281127bdf7b82758cd4507907f34b4a5351c20ae21a606fe552ccda0bf4d45eca45ac4","first_seen":"2024-08-20T15:01:10.620477Z","last_seen":"2026-06-03T17:05:04.155285Z","times_seen":98,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":221,"dns":201,"connect":3,"send":0,"wait":2,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}