{"report_id":"36ac20a9-547a-4ae0-9329-c355902334d4","version":0,"status":"done","tags":[],"date":"2026-09-15T19:05:29Z","url":{"schema":"http","addr":"meblegasinski.live/","fqdn":"meblegasinski.live","domain":"meblegasinski.live","tld":"live"},"ip":{"addr":"104.21.50.207","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"meblegasinski.live/","fqdn":"meblegasinski.live","domain":"meblegasinski.live","tld":"live"},"title":"Meble Gasiński - Meble tapicerowane, kuchnie na wymiar, krzesła i stoły","dom":{"size":386516,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (54609)","md5":"9b2e74df57c27f854f9c61306e213b91","sha1":"d6f3b08b3a868b1361deba4af5f7ceeeb6f7dabd","sha256":"ed298be88c30280ce52489c8d612747af1ddc2621d826011158d0eb8876f476a","sha512":"4d20b4def42db22c55033cbf1adb76e2d4c0ea2d68f813c08edd74c6a9fda908a2be3e1b3cf1092c63cba7325b54c00c49ee7b9f764dbfa40c945dfd36125416","ssdeep":"3072:zggFi5+ZSuzv40Gul6PgEhqAsCIDukYkEVcrOvt1EFseTpgn47lj8fX8/IQv/HcN:zggonYlszSyxI305L52sXbKDLm","tlshash":"fa84f8a3d15020d46363965de68179c83633a7d1d3820fe8f86dda1c87c75c2eaa27ed","dom_hash":"domhash6b270f53a0ec5d5de80644dfa7b050a1","first_seen":"2026-09-15T19:05:36.854968Z","last_seen":"2026-09-15T19:05:36.854968Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"meblegasinski.live/","fqdn":"meblegasinski.live","domain":"meblegasinski.live","tld":"live"},"ip":{"addr":"104.21.50.207","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-20T19:05:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"meblegasinski.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.google.no","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-09-14T00:01:55.00998Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":815,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":5,"received_data":388418,"sent_data":2930,"comment":"","tags":null,"fingerprints":null},{"fqdn":"meblegasinski.live","ip":{"addr":"104.21.50.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-15T18:52:45.404132Z","last_seen":"2026-09-15T18:52:45.404132Z","alert_count":60,"request_count":12,"received_data":2089354,"sent_data":6873,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress:5.2.21","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WooCommerce:3.6.7","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-13T22:44:45.310895Z","alert_count":0,"request_count":4,"received_data":1762862,"sent_data":1960,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGF2YWRhQ29tbWVudFZhcnM9eyJ0aXRsZV9zdHlsZV90eXBlIjoiIiwidGl0bGVfbWFyZ2luX3RvcCI6IjBweCIsInRpdGxlX21hcmdpbl9ib3R0b20iOiIzMHB4In0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3de8b87bc49931c6b8ea0ac02666d504","sha1":"b639cf26093be917cf74fb3accfcd0e946294032","sha256":"4aaa5d2081b0da287ad392caa5e44870e6971a560e112ca205cb7eaafe3996a5","sha512":"595f2aca6883b61a1af153dff1c438243af00e45fda4781bd34597423319e5b4185ceca3a14c66a1fbd5a768ae76abfaeb1363a0dc9faa6941c6daf2287eb076","ssdeep":"","tlshash":"7ab0128bc5401100a382081400ca54e2344c243143c04d954d60cd10f01d2c5c24c040","size":98,"data":"","first_seen":"2026-09-15T18:52:54.692042Z","last_seen":"2026-09-15T19:05:36.87391Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGF2YWRhRmFkZVZhcnM9eyJwYWdlX3RpdGxlX2ZhZGluZyI6IjEiLCJoZWFkZXJfcG9zaXRpb24iOiJUb3AifQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e0f237ecd79c559bb3d4da55d52df81","sha1":"4cb8ff4ab3fcc16d7bc523939573f2ab48f58da4","sha256":"89101a575f13b7bfd72c94b4c253f30ce3a6256992f2dff9d269d93f04ea3767","sha512":"fb44e1834077bc68c68fc7f7994f14dc6f68a6ed780dc4df5a5352b72e4007c1e7c53eb50bfc9374388f21a1428796323021becd911d2d520730723408b18ce0","ssdeep":"","tlshash":"48a02202282322200003e3cca2800c30203ccc300c80000c2c888c0e02c2222c00b880","size":67,"data":"","first_seen":"2026-05-31T07:00:29.753543Z","last_seen":"2026-09-15T19:05:36.874558Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meblegasinski.live/wp-content/litespeed/js/685c018163ab1f7ed2241b1452d0a2c1.js?ver=fd26e","fqdn":"meblegasinski.live","domain":"meblegasinski.live","tld":"live"},"ip":{"addr":"104.21.50.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"685c018163ab1f7ed2241b1452d0a2c1","sha1":"64efabbc719e2fa2c2207aab5d30a9347d6e26fd","sha256":"d7eb26be6f80cb5ff23fa3d6fcac7c8ebef1dc7e16a6db3b575ad9ea81d0e84c","sha512":"ae65efb682df108c25678c0786037be9c69793419281a703140fa05511f82a3664cf320d50e4d767fbd70840e90e200a1ab41ef0d856055eef9c81c02f9176af","ssdeep":"12288:hA3iFMMFiQehhQPqh2woSnZNwT04roBxshu1grAoTjCnTIZMp8B:GSFRFiQehhQekSnZNwT/wgrhCnTHqB","tlshash":"6a053a89b24030f941b721b9f07f570a3137aa66b5028564b16ed1e52db8d8e6237ffc","size":834353,"data":"","first_seen":"2026-09-15T18:52:54.595515Z","last_seen":"2026-09-15T19:05:36.865991Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHdvb2NvbW1lcmNlX3BhcmFtcz17ImFqYXhfdXJsIjoiXC93cC1hZG1pblwvYWRtaW4tYWpheC5waHAiLCJ3Y19hamF4X3VybCI6IlwvP3djLWFqYXg9JSVlbmRwb2ludCUlIn0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5886f749148542f7a5cda3dffb8341a1","sha1":"e92c03199b1c11dcbff8707611ba26586a463850","sha256":"7eddeff7a157e6dd0fef737ca332d3bdc613541be3e7d73843dc4ed8c87ea87d","sha512":"2df5905d915de9289191fba0a7b887e7285726db3f1c55330e9463f3709d9e3f8a4afc8075b17007e8507d5d02c2ab1e63de9789162983a341dc30ceda2088e7","ssdeep":"","tlshash":"d3b0125a45448e9372dc7dc47414395331f02227bd710c422f4dfc6c5139982cd0429b","size":104,"data":"","first_seen":"2023-03-07T12:02:05Z","last_seen":"2026-09-15T19:05:36.875112Z","times_seen":2369,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGZ1c2lvblZpZGVvVmFycz17InN0YXR1c192aW1lbyI6IjAifQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dc73556f78258ac01343f28b5f76f29","sha1":"77c0f10b5b6fc8913560bda8a870bd22b0bc852b","sha256":"0221b1a753c3166d36eee19aa01bc48c6315d8e2269a1e2ad5e2bc1527a6adc1","sha512":"73c0b076267854572950f392157c7654a86a9d47902d4c36c4efb002e23fc2e7c4c5b6369968e534fc2e14ff42ab35f613cbd69015d877bc1134ca90ccf28ebb","ssdeep":"","tlshash":"409004f144f57010d5410c1c0c4104335df7470557550707144d001007031515407050","size":40,"data":"","first_seen":"2023-03-10T13:10:45Z","last_seen":"2026-09-15T19:05:36.875637Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,alF1ZXJ5KGZ1bmN0aW9uKCQpeyQoJy5hZGRfdG9fY2FydF9idXR0b246bm90KC5wcm9kdWN0X3R5cGVfdmFyaWFibGUsIC5wcm9kdWN0X3R5cGVfZ3JvdXBlZCknKS5vbignY2xpY2snLGZ1bmN0aW9uKCl7Z3RhZygnZXZlbnQnLCdhZGRfdG9fY2FydCcseydldmVudF9jYXRlZ29yeSc6J2Vjb21tZXJjZScsJ2V2ZW50X2xhYmVsJzooJCh0aGlzKS5kYXRhKCdwcm9kdWN0X3NrdScpKT8oJCh0aGlzKS5kYXRhKCdwcm9kdWN0X3NrdScpKTooJyMnKyQodGhpcykuZGF0YSgncHJvZHVjdF9pZCcpKX0pfSl9KQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1dfea6c59dc352bdd606264bfa4356da","sha1":"f8b5d54e043c4cf83d5f7eb999a36bfa77f9bc4f","sha256":"10061de45ba4d0786261e01557dfda334d156729d88deb703256bfb37a651d37","sha512":"bb3591a079d24e877c75f9bcbf889ab660f6b336561e8436d771a430c6d227c19b926d6c21c3e29c3cd5c1b12fd0fb09d0b36f9c21478ac30bbbc076aa3a312d","ssdeep":"","tlshash":"93d02bcdf43c385d26c7b5311a6b15c1fc12618991a10508c6192fa60f9881ed3f751f","size":286,"data":"","first_seen":"2026-09-15T18:52:54.717596Z","last_seen":"2026-09-15T19:05:36.876367Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHdjX2FkZF90b19jYXJ0X3BhcmFtcz17ImFqYXhfdXJsIjoiXC93cC1hZG1pblwvYWRtaW4tYWpheC5waHAiLCJ3Y19hamF4X3VybCI6IlwvP3djLWFqYXg9JSVlbmRwb2ludCUlIiwiaTE4bl92aWV3X2NhcnQiOiJab2JhY3oga29zenlrIiwiY2FydF91cmwiOiJodHRwczpcL1wvbWVibGVnYXNpbnNraS5wbFwvY2FydFwvIiwiaXNfY2FydCI6IiIsImNhcnRfcmVkaXJlY3RfYWZ0ZXJfYWRkIjoibm8ifQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"75dbaae26253c04d708b84ba3ad7ed0b","sha1":"25668fd841836cb94cf2a6348867aad074a40503","sha256":"20b08f974209bd36a7b50635a1ee77ba00a20c6267ac774799097bea0e8f3526","sha512":"cb2951b449f1724d9e5b47ab7345f42b2ff0d39c9f492f31df2e5f6bd9c4071ef507be02dafa2931e727a162c5575d2527081e4dae8cc171495945259cd1af61","ssdeep":"","tlshash":"e8d0a75c1299de4362962fd8541830f2b0f11623f95e98689f8cbc584711581ce041af","size":232,"data":"","first_seen":"2026-09-15T18:52:54.696728Z","last_seen":"2026-09-15T19:05:36.876964Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGZ1c2lvblZpZGVvR2VuZXJhbFZhcnM9eyJzdGF0dXNfdmltZW8iOiIwIiwic3RhdHVzX3l0IjoiMCJ9","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e9232330a6361aa44052ce19b036299","sha1":"0b0ccf1f262d00d85bfe0412816c5277871710fb","sha256":"0a5f148ddb11eb0ef1406716b8c91454a5c948080a00951c8185639669d7d737","sha512":"8f8d9d4da6b26f044a446c2bef024afa15406041d84516d309537a2a4c451b6d8dd4a70bbc2c78bf74ad17f3b836642c29216d26aa5bc8bdbc7af7c3835ff4be","ssdeep":"","tlshash":"03a0029344aa612098870c1c0c8a85726db71b1a765646455acd0aa54612a96898b854","size":63,"data":"","first_seen":"2023-03-10T13:10:45Z","last_seen":"2026-09-15T19:05:36.877554Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGZ1c2lvbkxpZ2h0Ym94VmFycz17InN0YXR1c19saWdodGJveCI6IjEiLCJsaWdodGJveF9nYWxsZXJ5IjoiMSIsImxpZ2h0Ym94X3NraW4iOiJtZXRyby13aGl0ZSIsImxpZ2h0Ym94X3RpdGxlIjoiIiwibGlnaHRib3hfYXJyb3dzIjoiMSIsImxpZ2h0Ym94X3NsaWRlc2hvd19zcGVlZCI6IjUwMDAiLCJsaWdodGJveF9hdXRvcGxheSI6IiIsImxpZ2h0Ym94X29wYWNpdHkiOiIwLjk3IiwibGlnaHRib3hfZGVzYyI6IiIsImxpZ2h0Ym94X3NvY2lhbCI6IjEiLCJsaWdodGJveF9kZWVwbGlua2luZyI6IjEiLCJsaWdodGJveF9wYXRoIjoiaG9yaXpvbnRhbCIsImxpZ2h0Ym94X3Bvc3RfaW1hZ2VzIjoiIiwibGlnaHRib3hfYW5pbWF0aW9uX3NwZWVkIjoiRmFzdCJ9","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"13447e2ead112c0dddf23c306ec71956","sha1":"e69fc5d368f29fbf69a67821d2ca5b104ba85518","sha256":"5a196d7421b9e12c4afa269751e67d9da0796540d9edfef2c394357297aa794a","sha512":"b4518fc418eaadee27d702a4a934ec76053be8573d65c194eab157b48b57f7018b70fea3ef22bedff90cd4518a8799b014a9045547003c83720777c398858040","ssdeep":"","tlshash":"a1e08c06175a08a152c7a2db8008cb367bdd67f58c4d7a68c988df0309ce36dbe1be00","size":381,"data":"","first_seen":"2026-09-15T18:52:54.655695Z","last_seen":"2026-09-15T19:05:36.878025Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGZ1c2lvbkNvdW50ZXJzQm94PXsiY291bnRlcl9ib3hfc3BlZWQiOiIxMDAwIn0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c1dfcd52124ebb63e111d5ba5147c04","sha1":"340d91fa56e716624b83692f1189c96b7579d9d0","sha256":"a23df003a090a8fcd8fc459cee0e28594e8980569126aacf77bef2375eb2c53d","sha512":"95414eccda4844b5ddfc764bf52969ea11255181f0e884e57b4213ae364eef65d6668efe13b18d563abf17ef450b211479d28e77210d057e11c4ee9880c2c3d3","ssdeep":"","tlshash":"08900251751a1098b551d6086509557104926018ad41411b94cc080517c313c698c711","size":50,"data":"","first_seen":"2025-10-01T16:30:19.477716Z","last_seen":"2026-09-15T19:05:36.878626Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39a8679ed70005ee063ea62886141a2","sha1":"52b556cb7bdbe59b9b1ab9415ff905b561b8399e","sha256":"b33ed8fd08f8cf0138f219167d4bb5817f1b09c1d9ac7431e833899ecfff40f1","sha512":"c65e2fe579412ea8ef38d29185f47dec1f4fb871ec28767c104821f1c3368793c4ff577ed58971d27a9bbac97fee734093766954f7e9d2fc0ff1cb687a0ab977","ssdeep":"96:A1VdZYqhPnjpsx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBf2PfCHiUr3:AXdZYqNjpm4yPqSMbqaQGL2QfdDayCZa","tlshash":"3ca1ca9929fb50210233b1bd1bafa918b63895236208dd61bd8c9264af94437d7f1bc9","size":4693,"data":"","first_seen":"2026-05-25T14:46:35.360433Z","last_seen":"2026-09-15T20:57:24.865312Z","times_seen":98427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,d2luZG93LmRhdGFMYXllcj13aW5kb3cuZGF0YUxheWVyfHxbXTtmdW5jdGlvbiBndGFnKCl7ZGF0YUxheWVyLnB1c2goYXJndW1lbnRzKX0KZ3RhZygnanMnLG5ldyBEYXRlKCkpO2d0YWcoJ2NvbmZpZycsJ1VBLTEyOTU0ODMxNS0xJyk=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"75851cfaedccfdf5b66709634f33795b","sha1":"857553532fc5911db96c672227513bdb206f6e8e","sha256":"b18597fda8929d58d336b1a8f94f5a27727b376e53b3cc219c722e83d27e7b35","sha512":"835e9fbed747c93d5f26577e9245bd224868810e681683ec2bdf9c9724ea9389e73be390569e298cceabce68024b1dc06f6df8948f2d2ea556eba0f6abf2575e","ssdeep":"","tlshash":"88c02b8c35028c7146ff0b420f9f72002100310081800d310801b3852021cd35245c40","size":134,"data":"","first_seen":"2026-09-15T18:52:54.654056Z","last_seen":"2026-09-15T19:05:36.879647Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGZ1c2lvbkxpZ2h0Ym94VmlkZW9WYXJzPXsibGlnaHRib3hfdmlkZW9fd2lkdGgiOiIxMjgwIiwibGlnaHRib3hfdmlkZW9faGVpZ2h0IjoiNzIwIn0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"17db4ac6a80b6f1ec94acb394d0200f9","sha1":"b6c4d9cc190809ae8249750bec8bf415687af607","sha256":"6d67fa6f19eac52eb94396dc0e8715a01dfc77c86581e3c4508c7d571239b8b4","sha512":"1a8d1db021b686a0d14e6b9f0854e246b13d72601689d6552177680510ffbd1026143e92cb248fab0f1f979cb75553275c7fa913555220acce53f94e272a24cf","ssdeep":"","tlshash":"97b0123017d51000c1801dc30d0047377fcdc3081e412017c042501000c410d7c17cd4","size":89,"data":"","first_seen":"2023-03-10T13:10:45Z","last_seen":"2026-09-15T19:05:36.880407Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGZ1c2lvbk1hcHNWYXJzPXsiYWRtaW5fYWpheCI6Imh0dHBzOlwvXC9tZWJsZWdhc2luc2tpLnBsXC93cC1hZG1pblwvYWRtaW4tYWpheC5waHAifQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"db3daf32ec3f208488442b5e787e4408","sha1":"452e49bf44ba22c6700fccf8b87d938b8cfd7d20","sha256":"0a46aaaed69ed90f4140286c7e66ff8d018b9b773dd3193304306a35a674de84","sha512":"a5ef946c1933da83e0e9eddc8e2d69f2fb855606ae9d32f45d3dd57830106c5e292e5eb86cf22a934769879dbc986915d992fadef31b3cd93fa8391b8209594d","ssdeep":"","tlshash":"beb012492dd45701d1d109dc0c28a53744d19b33ac284c0916440c400617041cc80112","size":88,"data":"","first_seen":"2026-09-15T18:52:54.657538Z","last_seen":"2026-09-15T19:05:36.880971Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGZ1c2lvbkJnSW1hZ2VWYXJzPXsiY29udGVudF9icmVha19wb2ludCI6IjgwMCJ9","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"400b6fc75ac9c4ba17e5eab1fb32d017","sha1":"e19e82afc6940495e7956cabefb0b4b06772f86f","sha256":"ca9e04e06eedf3cc0dcf4dc850e7359e80bce6d22de0a83950c82e6f30b0cdf4","sha512":"fe06648f6884d99013fb94400a8c64835eb1abf394c8e6f31e4569307a1f14d4123430033f20a14a39581c2f6b7465e059f060257b49d1f719c7611aca435c0a","ssdeep":"","tlshash":"ee9002b499a9044061944a14684164a721974850c990130d80a8425c9bc3b1319d0ad0","size":51,"data":"","first_seen":"2025-07-04T19:54:25.586268Z","last_seen":"2026-09-15T19:05:36.881626Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGZ1c2lvbkNvbnRhaW5lclZhcnM9eyJjb250ZW50X2JyZWFrX3BvaW50IjoiODAwIiwiY29udGFpbmVyX2h1bmRyZWRfcGVyY2VudF9oZWlnaHRfbW9iaWxlIjoiMCIsImlzX3N0aWNreV9oZWFkZXJfdHJhbnNwYXJlbnQiOiIxIn0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"099842f35c8fb3f6d9d59b711a31d662","sha1":"509363c5637d6a80c3d91c20b6f1348cdaca59c6","sha256":"80b7e2ee7440f87529dc0ebfe352f61e20a3a0c825685af8077ccd6bd05b23ed","sha512":"456ed1b952681e8c3d4dd61fcf627f055d9691e0323163a1c27af9c9ecb92524a56d6bd39c0e36dc5430994678bdee1070d739c5761a0462769d297e1c014aeb","ssdeep":"","tlshash":"1bc02b71ff58b070f01b8e5ca0c44421398fce11c0d01e1da068c00c80c43031c40490","size":134,"data":"","first_seen":"2026-09-15T18:52:54.640867Z","last_seen":"2026-09-15T19:05:36.882196Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGZ1c2lvbkNhcm91c2VsVmFycz17InJlbGF0ZWRfcG9zdHNfc3BlZWQiOiIyNTAwIiwiY2Fyb3VzZWxfc3BlZWQiOiIyNTAwIn0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"db0983dae256402f0262961410e43ea2","sha1":"ad608276f641b9de81f5d0209ef00c5af00d14a6","sha256":"e0f5b8706ef304dca5d312122d87787b5ef6a18750f59e57f01a23f37c674557","sha512":"d009f236272751bc659b5ad3949c69cf8397432e9979a635506b0d0b7a4b4add6fe2a228bacb4798df12f5322841810f9a0f29783529d184bcdcc97c1071c64d","ssdeep":"","tlshash":"5ba02228b02c00f0cc2233888cc800b3380c3c308c228ab0c2ef800c038000a002c22c","size":77,"data":"","first_seen":"2026-01-22T13:21:21.889864Z","last_seen":"2026-09-15T19:05:36.882838Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGF2YWRhRnVzaW9uU2xpZGVyVmFycz17InNpZGVfaGVhZGVyX2JyZWFrX3BvaW50IjoiMTA1MCIsInNsaWRlcl9wb3NpdGlvbiI6ImJlbG93IiwiaGVhZGVyX3RyYW5zcGFyZW5jeSI6IjAiLCJtb2JpbGVfaGVhZGVyX3RyYW5zcGFyZW5jeSI6IjAiLCJoZWFkZXJfcG9zaXRpb24iOiJUb3AiLCJjb250ZW50X2JyZWFrX3BvaW50IjoiODAwIiwic3RhdHVzX3ZpbWVvIjoiMCJ9","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3c7ab3c2dd33069a09d212b25cdce3d","sha1":"d384e13054ed7a4a628af29ae57aec28f0e09989","sha256":"351dc20b7f4e4469f596c3fd1a60a38c57ada8bfb270fc2fa45bfec354e8c273","sha512":"7275f873db2a6e06bfd591047be407989e650db8bd72d63eaaca50f5026b050339f793a8da16bded78f03ccf407e5fb25604651445816468f747eb7352dd8605","ssdeep":"","tlshash":"2dd0a745c16534a421b39b6ca8c2cc6570db4a11d04508bb9998484e86c5182ec054d7","size":216,"data":"","first_seen":"2026-09-15T18:52:54.648892Z","last_seen":"2026-09-15T19:05:36.883538Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,d2luZG93LmRhdGFMYXllcj13aW5kb3cuZGF0YUxheWVyfHxbXTtmdW5jdGlvbiBndGFnKCl7ZGF0YUxheWVyLnB1c2goYXJndW1lbnRzKX0KZ3RhZygnanMnLG5ldyBEYXRlKCkpO2d0YWcoJ3NldCcsJ2RldmVsb3Blcl9pZC5kT0dZM05XJywhMCk7Z3RhZygnY29uZmlnJywnVUEtMTg5NDI0NTE2LTEnLHsnYWxsb3dfZ29vZ2xlX3NpZ25hbHMnOiEwLCdsaW5rX2F0dHJpYnV0aW9uJzohMSwnYW5vbnltaXplX2lwJzohMCwnY3VzdG9tX21hcCc6eydkaW1lbnNpb24xJzonbG9nZ2VkX2luJ30sJ2xvZ2dlZF9pbic6J25vJ30p","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"aaf725de9ad826a6aa8d47ac439663e4","sha1":"317141e5ae83bd9fcaef69a63ae52ecc03384c34","sha256":"66c93f623dbe235e0ff47c640b5a6c8d3137f116ce1613b6c6ecddc77bac3041","sha512":"f3bd0ce826e737368b109310d61ba2fc093986dccb189632e3aae7843f2b52ac25990375ad69c5b6b687f43ce57f103995221f7df88253667d847223e6d46d5d","ssdeep":"","tlshash":"e3e0e784251c0e7705ff6b00473712153277319010d500718839e54c790fc5342f2cd1","size":297,"data":"","first_seen":"2026-09-15T18:52:54.63698Z","last_seen":"2026-09-15T19:05:36.884155Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-129548315-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d378f0bf713acb79d474948eb6cc17d8","sha1":"144ffd7c01278b8edde8eaba2299b6138ebec7a8","sha256":"22841c7b36111900237ef46bad8fc37d444205e39f44c09443eb2b6cb71f8df1","sha512":"8d94a9b66491b3270cc7abf42281639e8b14c4f30083372a6bdf67b96f35db58fb3564e0abd9e51805889601fe69a4199d82e86f1a0e48892dbff9ad57f2b528","ssdeep":"6144:5Cn1KcIpPImOh9mHFLgycRtbJEqq3RtWWfA7y23fHdr:5FH+5WYxP5","tlshash":"be8409ccb7d6742283a3b574503f018bb27a79a2b84cc898f286d9d42e3465a5177f7c","size":381933,"data":"","first_seen":"2026-09-15T19:05:36.858548Z","last_seen":"2026-09-15T19:05:36.858548Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGZ1c2lvblRlc3RpbW9uaWFsVmFycz17InRlc3RpbW9uaWFsc19zcGVlZCI6IjcwMDAifQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"acbfec3958bd92fbae4ae76886871acb","sha1":"aa57671e5e8a6ebf31468629c0fe17c7661638f5","sha256":"5c8943b4b3d947d4b548353e7ccb8fd032b2eb6cccae77167e7b43ce31249adb","sha512":"1a02ed5ecdd858fbf7739cf3b8db795809400f0d2adc633bf991ba6665a7b39bb927c0f38483d796870ef4ae0f6b3d75921714a64b8eac3e65a9b4eb864f6e70","ssdeep":"","tlshash":"09900281156b10504510f42c9c0494331295b9105e534b75c04c28499244171202a414","size":55,"data":"","first_seen":"2026-09-15T18:52:54.644592Z","last_seen":"2026-09-15T19:05:36.885376Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGZ1c2lvbkJsb2dWYXJzPXsiaW5maW5pdGVfYmxvZ190ZXh0IjoiPGVtPkxvYWRpbmcgdGhlIG5leHQgc2V0IG9mIHBvc3RzLi4uPFwvZW0+IiwiaW5maW5pdGVfZmluaXNoZWRfbXNnIjoiPGVtPkFsbCBpdGVtcyBkaXNwbGF5ZWQuPFwvZW0+Iiwic2xpZGVzaG93X2F1dG9wbGF5IjoiMSIsInNsaWRlc2hvd19zcGVlZCI6IjcwMDAiLCJwYWdpbmF0aW9uX3ZpZGVvX3NsaWRlIjoiIiwic3RhdHVzX3l0IjoiIiwibGlnaHRib3hfYmVoYXZpb3IiOiJhbGwiLCJibG9nX3BhZ2luYXRpb25fdHlwZSI6ImxvYWRfbW9yZV9idXR0b24iLCJmbGV4X3Ntb290aEhlaWdodCI6ImZhbHNlIn0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5de7a72171845e5d72fde20309e9b5b","sha1":"9cce4a40e6aa0b0b0176fa6fcbd2a388f4ea7b47","sha256":"77e7258b58e01542ebda783c40dab0bf0e6afea7888eec485f1d733ce8944652","sha512":"df7762050819646dc1140e653c7c11de576f0f7a5480d8894f3b486f1212a927aa5dc19b5c0365204e6d889847b003a76dbd77b19eaceddce623efbedc358fd5","ssdeep":"","tlshash":"5fe07d0adf6fd54783a911b5446c83b625fc0c219bc1ae8cc8ce855a164c989737d9ec","size":332,"data":"","first_seen":"2026-09-15T18:52:54.707317Z","last_seen":"2026-09-15T19:05:36.88603Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGF2YWRhV29vQ29tbWVyY2VWYXJzPXsib3JkZXJfYWN0aW9ucyI6IkRldGFpbHMiLCJ0aXRsZV9zdHlsZV90eXBlIjoiIiwid29vY29tbWVyY2Vfc2hvcF9wYWdlX2NvbHVtbnMiOiI0Iiwid29vY29tbWVyY2VfY2hlY2tvdXRfZXJyb3IiOiJOb3QgYWxsIGZpZWxkcyBoYXZlIGJlZW4gZmlsbGVkIGluIGNvcnJlY3RseS4iLCJ3b29jb21tZXJjZV9zaW5nbGVfZ2FsbGVyeV9zaXplIjoiNjUwIiwicmVsYXRlZF9wcm9kdWN0c19oZWFkaW5nX3NpemUiOiIyIn0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"717a40494334afba611d82db4e60cd94","sha1":"053617f1b5b8dbcca11eb5b1fb535d80d22add40","sha256":"23a66516e07e3aec9cd5f4bf149d30e0c7731fc2b80f2a17174a6126832373f5","sha512":"71a309cfe910cceaea908c1defe3fd316ad2c6d836e606bb65bdde05337a13959d6169bbef417c021fb85fbe19bcfd9d14769ad863b5efcaf3221e86049405c9","ssdeep":"","tlshash":"7cd05e27e071ce5637ca22f40c56d9e23ed4444ba9900a62ad8cde3ce1945cf6c1620e","size":263,"data":"","first_seen":"2026-09-15T18:52:54.681193Z","last_seen":"2026-09-15T19:05:36.886718Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0ES9EX76ZB\u0026cx=c\u0026gtm=4e69b1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"05b747fe6ad6507300917b53d6453a3e","sha1":"6848d7b257587911487cfd77d4e1dfc0012987b0","sha256":"76c46bf96508f98eb91e6fd6e365fa712d267edff06d461ac6fc2f2d7e36f4db","sha512":"315c519a15903cd847b8a890fff636334cae686131c5662e6d6e252fdd8db13aad6dedc14928fa7a6636aeb9667618123c8e9cee07bf8326b176ced878743294","ssdeep":"6144:Fawn1KcIGUPWmJhgY+6Y512Lg2cRtbJEqq3RtwDZA/y2uBwtgT8k6Zr:QL8sen3zDGVu1+","tlshash":"c3b419ce73c674229796f574903f01cb6a7b28a2b49cc89af289dce02d3455a5163f7c","size":532884,"data":"","first_seen":"2026-09-15T19:05:36.866502Z","last_seen":"2026-09-15T19:05:36.866502Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meblegasinski.live/","fqdn":"meblegasinski.live","domain":"meblegasinski.live","tld":"live"},"ip":{"addr":"104.21.50.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5c399557f73fcf0024f42259cf94ee17","sha1":"d2f46cbd088e9b289e63cc23e2377462c6459e3f","sha256":"254e737260e5ff4f6043abc4ab52ee1f9ea6e9eab066b5c7ac1665c4cf75692b","sha512":"45d3f9da1f4948d1f01993e19e0f42c54d7a30187978deddee02d4be94d4567f0045bd1192393f108570bded3f1805f233a5a41dfb9bb164f30086f598a3cc41","ssdeep":"","tlshash":"9e9004f574d311004d57317404571cdc1134c4701c544d744070f4d10c75074551745c","size":46,"data":"","first_seen":"2023-04-11T22:36:29Z","last_seen":"2026-09-15T19:05:36.887457Z","times_seen":30108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-G15DLB3BHV\u0026cx=c\u0026gtm=4e69b1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"87209e21c32c066a56c2fb679c868440","sha1":"764a91ee817a91bc73abe3ad53bfa7d2be9893d0","sha256":"ecb75150e0b95b6adc388c813ab7aa10da0e43be725f11ba41ceb2cce027b3ca","sha512":"7f3d1fa82ca6bf5a3b3179f154352fe5966426f5d02bb67db0e90eed8823e611643b528a9363bfebf0e428af18df7159f12a6bf228b6937362ad1e93f4a8437d","ssdeep":"6144:VJGn1KcIGUPWmJhgYcYnsLg2cRtbJEqq3RtwLnA/y2MnwtgT84btr:nZ8seoJLAVM/B","tlshash":"ffa419cd73c6742293a2f674903f018ba67b69a2b44cc899f28adcd42d3465a5173f7c","size":463613,"data":"","first_seen":"2026-09-15T19:05:36.869968Z","last_seen":"2026-09-15T19:05:36.869968Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-189424516-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b2eb1767a356f1e530865af8c768756","sha1":"1e3631fde14d816483cac7baa48882ba1a50b580","sha256":"8f4e667bdea7e229dae666c100606bc3ccda89b03ad020155227c2069918ba2e","sha512":"179335d059fd5142cd816d126ba9714a3f38f7d5ee9cef31763d7caf2bea2f080f57ff8803ba63590ffa4f836026933925872d39d4e0da305c6a4f9fa4819b35","ssdeep":"6144:dkn1KcIpPImOh9mHFLgycRtbJEqq3RtWWfA7y23fHdr:d/H+5WYxP5","tlshash":"7f8408ccb7d6742283a3b574503f018bb27a79a2b84cc898f286d9d42e3465a5177f7c","size":381964,"data":"","first_seen":"2026-09-15T19:05:36.86076Z","last_seen":"2026-09-15T19:05:36.86076Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGRvYz1kb2N1bWVudC5kb2N1bWVudEVsZW1lbnQ7ZG9jLnNldEF0dHJpYnV0ZSgnZGF0YS11c2VyYWdlbnQnLG5hdmlnYXRvci51c2VyQWdlbnQp","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1890c7b7208ed0c7f75457e4e21cb301","sha1":"c9804d4a5fed026fb4f64ed10e8758eda8bedb20","sha256":"c26fb74c8e0223ec43cea0e391d8eb544b217fe36aac463c5dc7aae2a25831c6","sha512":"0985e3ad072137206035c99491c228f1ee68f45e4688ee3c4289bfd2d7145198b74e862544262bc59c37962b694e8129247e25ca2eb1e3dec0d7138cabe538cb","ssdeep":"","tlshash":"cbb0127d20005039086f006e746040903c217010b4071801a01d90c6c421c918802c04","size":87,"data":"","first_seen":"2023-03-07T15:33:30Z","last_seen":"2026-09-15T19:05:36.888066Z","times_seen":573,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,ZG9jdW1lbnQud3JpdGUobmV3IERhdGUoKS5nZXRGdWxsWWVhcigpKQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bd43cf0ae158526c6ab93dc3be79f28","sha1":"15c289e342bd3fdf5b1e95f7abf25a2bc78bf357","sha256":"7a13d5ae0755d86c09084ec300c4a0f1a0a06921f74d9980eba9d966ff17ad38","sha512":"5190eb107c27f5d655eab378cd468228aa031d088f59082f257f41d464a29fbdb23594043afe89a3f9b63ce86d91efad6c2901c816d85196389293a6a5a28521","ssdeep":"","tlshash":"df90040100513554711530d00134c3dd157df075dc4dd335754f57004040405c53c401","size":40,"data":"","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-09-15T20:33:21.099886Z","times_seen":33124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGM9ZG9jdW1lbnQuYm9keS5jbGFzc05hbWU7Yz1jLnJlcGxhY2UoL3dvb2NvbW1lcmNlLW5vLWpzLywnd29vY29tbWVyY2UtanMnKTtkb2N1bWVudC5ib2R5LmNsYXNzTmFtZT1j","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c63ee35601c2b84c95cd1fca0bec5d15","sha1":"10c4a241396fcf55b9fded19247240e0737fa7dc","sha256":"a574c9045c67697de74e1be1eb49810924e5501252db6c78f793ba91a87efd3b","sha512":"186e964c5102b283406b52232ecd37dbefebcd2435bc4c6006d5f3e2e512a5c9121f0f13d369e9ccb0ac8ca5f2cafdcfd1035da13cb41acf089717bfd23c6f38","ssdeep":"","tlshash":"ddb09223244409e4128a35e018dd93e03c31a488b5512810d8b97509d0808c62801ed4","size":105,"data":"","first_seen":"2023-03-07T12:02:24Z","last_seen":"2026-09-15T19:05:36.889183Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGZ1c2lvblRhYlZhcnM9eyJjb250ZW50X2JyZWFrX3BvaW50IjoiODAwIn0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5eaf6fcf8546cf27682c6aa2906bd9bf","sha1":"0d9a668ec970ee02d03bbf75b595898da42a212d","sha256":"cbfa0767e53c8b2f8f5a30b607b6d62dc66042b03bcbb8cdf01068b1184af200","sha512":"2de2f7171c9ab4b0fe8d920e9219622f34adcc5a38117ef3992134ff7ea0e2b81e5724b1dedac6154b8b3e3b1e499b4bfd29db958fc09dec72543d3a859b01be","ssdeep":"","tlshash":"da9002789a590450a55449145801a47b21975850c991150d90b8414483c57422990990","size":47,"data":"","first_seen":"2025-10-01T16:30:19.518768Z","last_seen":"2026-09-15T19:05:36.889912Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGZ1c2lvblZpZGVvQmdWYXJzPXsic3RhdHVzX3ZpbWVvIjoiMCIsInN0YXR1c195dCI6IjAifQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e13a7936f4e00cf06852ca604c125bb3","sha1":"83ba6f456fc555e9c1e9487412017f329f5e3c03","sha256":"fd6e42cc7a8e7b179c0d5a99d38fdc3b09fdfe37548c9e5228f57a490878695d","sha512":"a4b13d7fe7ffb72576cd238afaee0f89080b3684eabb8b9bdf89b82a2fb9b13b6597a64653de6770d5579cb257519973dc6c3ad47cdd8388083d2ada5470cb8c","ssdeep":"","tlshash":"62a002924496611499a70c580c8845726da70b1a665a064659dd0a200616692850a050","size":58,"data":"","first_seen":"2023-03-10T13:10:44Z","last_seen":"2026-09-15T19:05:36.890584Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGZ1c2lvblNjcm9sbFRvQW5jaG9yVmFycz17ImNvbnRlbnRfYnJlYWtfcG9pbnQiOiI4MDAiLCJjb250YWluZXJfaHVuZHJlZF9wZXJjZW50X2hlaWdodF9tb2JpbGUiOiIwIn0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b29a07c2eee4f68bbaf1cf717a6da4c8","sha1":"918a2362644818d72ab79a8dd66444c728d16c64","sha256":"d0cd42782282b7f4d0157660f0c5af9ee461f3ae48a14fb07540549354ab5b86","sha512":"41eddd2dad5eaa533382976ac7cf3b287fa285e77a48a84efbc631433a19e35f06e03ebeff7d2731659734a9a2e3abbc8b986bed4d50606935afc0b51def2b6c","ssdeep":"","tlshash":"cdb01275ee6db455f1de1f6ce5411472199bc841c6800b1e8899d1ac82c6a0318409d0","size":104,"data":"","first_seen":"2026-05-31T07:00:29.737587Z","last_seen":"2026-09-15T19:05:36.891172Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGF2YWRhU2lkZWJhcnNWYXJzPXsiaGVhZGVyX3Bvc2l0aW9uIjoidG9wIiwiaGVhZGVyX2xheW91dCI6InYyIiwiaGVhZGVyX3N0aWNreSI6IjEiLCJoZWFkZXJfc3RpY2t5X3R5cGUyX2xheW91dCI6Im1lbnVfb25seSIsInNpZGVfaGVhZGVyX2JyZWFrX3BvaW50IjoiMTA1MCIsImhlYWRlcl9zdGlja3lfdGFibGV0IjoiMCIsInN0aWNreV9oZWFkZXJfc2hyaW5rYWdlIjoiMSIsIm5hdl9oZWlnaHQiOiIxMzAiLCJzaWRlYmFyX2JyZWFrX3BvaW50IjoiODAwIn0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"236071feb9f19003c55123ee9212e86d","sha1":"f7522e00b23cda470b5a87721dec2042971b4156","sha256":"59f4456d07c1ab28e07843d70c22a3fb903d96024a6c4091c9ac9f300909ced3","sha512":"09314f64d2d991f6c66009233ff24d34f3a650a72438206e28b77dd466e2de3f0bd9551f8ccc23feacbed28499a9f4a9a93e432a0e31e7ba0102ef5e33fd0de6","ssdeep":"","tlshash":"2dd02e08030bb0300293d788c6c54c7a30cf1aa21cf40036e9e88eee04d4243e198ac6","size":266,"data":"","first_seen":"2026-09-15T18:52:54.675949Z","last_seen":"2026-09-15T19:05:36.891741Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGZ1c2lvbkVxdWFsSGVpZ2h0VmFycz17ImNvbnRlbnRfYnJlYWtfcG9pbnQiOiI4MDAifQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"75b938627d594ffdb58e98bb07e2ec52","sha1":"61c4f3db0c791172f581aab40ed1d9a318de7f23","sha256":"0d59ba0b61c3fe4017ecfe4bb7a4d17f818795965096ae0d459762591331131e","sha512":"2edb2260c089e585147eb8516c557b1aa5cecf9db9db18fa198b973a8ff9dde0e0a6d71adfe0a34f362ba696659b22d938ee0397759996055ffcfdeb980fa54b","ssdeep":"","tlshash":"089002b49ba81450a15449159809a567219b8860c994510dc1a9434982d17033ad89a0","size":55,"data":"","first_seen":"2023-07-13T13:50:21Z","last_seen":"2026-09-15T19:05:36.892435Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHNwUGljVGVzdD1kb2N1bWVudC5jcmVhdGVFbGVtZW50KCJwaWN0dXJlIik7aWYoIXdpbmRvdy5IVE1MUGljdHVyZUVsZW1lbnQmJmRvY3VtZW50LmFkZEV2ZW50TGlzdGVuZXIpe3dpbmRvdy5hZGRFdmVudExpc3RlbmVyKCJET01Db250ZW50TG9hZGVkIixmdW5jdGlvbigpe3ZhciBzY3JpcHRUYWc9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7c2NyaXB0VGFnLnNyYz0iaHR0cHM6Ly9tZWJsZWdhc2luc2tpLnBsL3dwLWNvbnRlbnQvcGx1Z2lucy9zaG9ydHBpeGVsLWltYWdlLW9wdGltaXNlci9yZXMvanMvcGljdHVyZWZpbGwubWluLmpzIjtkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkKHNjcmlwdFRhZyl9KX0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c468630f317bbce8ba5e05217edcb6d2","sha1":"32f5212eecef5d4cfdd88a955b6ec8210f59be33","sha256":"9acec1b6095a40bea51d66c37c88894c0672d90db0e49857cda717e6272d1232","sha512":"a6506ccbd7a5e67a4d2c01d3540c8da2cb38738056893b9bcd88935e9109df94511a6ab6d8193598bee01f5bb69f1258730761b2e9f897dada4417dbc6ba855d","ssdeep":"","tlshash":"dbe0c0361e1189b24194c16f30bffb19fae20f236400988044bccc4cfa70fc68272c85","size":359,"data":"","first_seen":"2026-09-15T18:52:54.683222Z","last_seen":"2026-09-15T19:05:36.893008Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGdhUHJvcGVydHk9J1VBLTE4OTQyNDUxNi0xJzt2YXIgZGlzYWJsZVN0cj0nZ2EtZGlzYWJsZS0nK2dhUHJvcGVydHk7aWYoZG9jdW1lbnQuY29va2llLmluZGV4T2YoZGlzYWJsZVN0cisnPXRydWUnKT4tMSl7d2luZG93W2Rpc2FibGVTdHJdPSEwfQpmdW5jdGlvbiBnYU9wdG91dCgpe2RvY3VtZW50LmNvb2tpZT1kaXNhYmxlU3RyKyc9dHJ1ZTsgZXhwaXJlcz1UaHUsIDMxIERlYyAyMDk5IDIzOjU5OjU5IFVUQzsgcGF0aD0vJzt3aW5kb3dbZGlzYWJsZVN0cl09ITB9","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e35ef09bb55e80056a935b8e2e504585","sha1":"596fc24cfabe02b5127bcf3f9775c00cf4eeadd5","sha256":"811f61f5310f729a06acf22cfd1c8b4d3cba37b35e9fd851f0a6cb4095dc2e97","sha512":"039c574cb3e4c1bd0c7e98bf3356237fdc36d3a339bc500aed81502ced4ab89a61da0679e1b671ca6d4bfed97fad1816e27bc860030d0754694d7985b87e9fda","ssdeep":"","tlshash":"10d02e60222638e38ce0d31013632f8ef33100082a2e80245a0868f825dfc0b4921f7b","size":270,"data":"","first_seen":"2026-09-15T18:52:54.694228Z","last_seen":"2026-09-15T19:05:36.89365Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHdwY2Y3PXsiYXBpU2V0dGluZ3MiOnsicm9vdCI6Imh0dHBzOlwvXC9tZWJsZWdhc2luc2tpLnBsXC93cC1qc29uXC9jb250YWN0LWZvcm0tN1wvdjEiLCJuYW1lc3BhY2UiOiJjb250YWN0LWZvcm0tN1wvdjEifSwiY2FjaGVkIjoiMSJ9","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea92b65a324b8fb8b4df83021e48bcec","sha1":"6044eaabc7f09502c9362bf0cdaa1b6d6760691a","sha256":"ece71d88aea6b48861023bcdb7c6257b31cbb0803a016187500ddaa183800027","sha512":"c7769a7231cba7c71bb3e5d9fa159d4ce44a569843f852d131e58249cb2d3b55f1f4479586c87655d5758ea12266f85a1046b83ba23edcffe2f34cddd082a584","ssdeep":"","tlshash":"62c02b082380eb0920d2c388062c323030455f33cd2f07b6d200048007db0f8c948141","size":138,"data":"","first_seen":"2026-09-15T18:52:54.650377Z","last_seen":"2026-09-15T19:05:36.894364Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHdjX2NhcnRfZnJhZ21lbnRzX3BhcmFtcz17ImFqYXhfdXJsIjoiXC93cC1hZG1pblwvYWRtaW4tYWpheC5waHAiLCJ3Y19hamF4X3VybCI6IlwvP3djLWFqYXg9JSVlbmRwb2ludCUlIiwiY2FydF9oYXNoX2tleSI6IndjX2NhcnRfaGFzaF9jZTM5N2U4YWNjNzZmNmI4NjNlYjNiYTBiYTU4NmZkNiIsImZyYWdtZW50X25hbWUiOiJ3Y19mcmFnbWVudHNfY2UzOTdlOGFjYzc2ZjZiODYzZWIzYmEwYmE1ODZmZDYiLCJyZXF1ZXN0X3RpbWVvdXQiOiI1MDAwIn0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"de8e209c27ba93d9e9adde49edc8e4f2","sha1":"60b91aea0c882ba82625a0e7d92e5da2dc00f81a","sha256":"c9e64303085c5b7d7c6bd889216668d4bd218a80e4de6601cf52eb6239ea5cc6","sha512":"78b9a518580364f0e0570e0b4fbd9225f2f519d5f28ff21d102812885b30853f285d47da018703b51e2f2f9973c7373aa4a20712f6b47e0d3d1c44cd4edce5a7","ssdeep":"","tlshash":"f6d0a5c717d4cedb17e519d55617b9b721643151b57c098117095c74d655f43ce0082f","size":263,"data":"","first_seen":"2026-09-15T18:52:54.698933Z","last_seen":"2026-09-15T19:05:36.89523Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGZ1c2lvbkZsZXhTbGlkZXJWYXJzPXsic3RhdHVzX3ZpbWVvIjoiIiwicGFnZV9zbW9vdGhIZWlnaHQiOiJmYWxzZSIsInNsaWRlc2hvd19hdXRvcGxheSI6IjEiLCJzbGlkZXNob3dfc3BlZWQiOiI3MDAwIiwicGFnaW5hdGlvbl92aWRlb19zbGlkZSI6IiIsInN0YXR1c195dCI6IiIsImZsZXhfc21vb3RoSGVpZ2h0IjoiZmFsc2UifQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"11c38a79fe5539ccb2375d600bb5f620","sha1":"ead4f07ae42f396d5e86dc9efc5d008d72162bca","sha256":"353e8d9f496578d17c66730d1f9eca19738bcaa56db25448d46d0b2a85942d5d","sha512":"66fbc33b3f7f550ad1d83065ded3202f36445c464f954b1cabb20d21876bbcc33b8cea549e5ad9fbdf12cf50c75f7ff5e579798df57cf5703fae720f420f5162","ssdeep":"","tlshash":"7fc0c0031f30104590e807344c10c3333dfe1d1021808f0cc0d84d220940484738ead8","size":193,"data":"","first_seen":"2026-08-27T12:38:27.388367Z","last_seen":"2026-09-15T19:05:36.895904Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGZ1c2lvblR5cG9ncmFwaHlWYXJzPXsic2l0ZV93aWR0aCI6IjExNzBweCIsInR5cG9ncmFwaHlfcmVzcG9uc2l2ZSI6IjEiLCJ0eXBvZ3JhcGh5X3NlbnNpdGl2aXR5IjoiMC42MCIsInR5cG9ncmFwaHlfZmFjdG9yIjoiMS41MCIsImVsZW1lbnRzIjoiaDEsIGgyLCBoMywgaDQsIGg1LCBoNiJ9","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6853098683ec81f026fd6ca3f30812ba","sha1":"5b41e1007a506008b10a711c6f6aabd6dcfe60b9","sha256":"f79dd6163615c6d29c643bc06a9e5ae5379a179f24e816c6f73b3c7a73b1ba30","sha512":"3d463168fd51e209071aca04cdd0e7a8784f00af9a29e1f2b3dfac201c1840adb014ae2ea1749f2b6d69b0418e5e3cd3661d8973cc603fda6919d25912478cb0","ssdeep":"","tlshash":"f3c01289368201088087982c00c21d5f9164e1598f4bc75e8a9807017444b5e102c00d","size":171,"data":"","first_seen":"2026-09-15T18:52:54.69016Z","last_seen":"2026-09-15T19:05:36.896572Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGF2YWRhTW9iaWxlSW1hZ2VWYXJzPXsic2lkZV9oZWFkZXJfYnJlYWtfcG9pbnQiOiIxMDUwIn0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ae1679db52b2943401b8374279a4cea","sha1":"c68ce268e94880fc233f7251e242a37e270c1baa","sha256":"539ac001da354de679f08eb4fcaa57d43edf63c72311afaea988578a5389cf06","sha512":"f5d8d4f7a63516b4d0fb5751f34fea04625f9285c7c1db6325b15c8d9757913d440dbe005bdc80788543e51ae8b15c3ac5ed78e01391734bbd07af9abc8b1c4f","ssdeep":"","tlshash":"f2a0024a92e52d0530208914ac0794fe31c55660c155552a659c49d95fd2762e6289d5","size":59,"data":"","first_seen":"2026-09-15T18:52:54.716269Z","last_seen":"2026-09-15T19:05:36.897268Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac70ec46fd88ab11898c334cec93236b","sha1":"cfb7146c2d2901a773695bfdbf0006571ea5b8c0","sha256":"de81772ee89ff54f18e136a47b55e8114e27d263a9b9e33994f60a6429fa46af","sha512":"8e906c2652b7f058f8335e13d0ed9a67414989cb42d04e33406c0fd46611f85dde0b449628adc4747edf9eb8177c741a453892d3ae18681fca48384d98cc9d83","ssdeep":"","tlshash":"0bf05948cb1f7930439b97dde28a9c7630ce19a22ae000a2fda4ceeba0d0101d295944","size":529,"data":"","first_seen":"2026-09-15T18:52:54.647378Z","last_seen":"2026-09-15T19:05:36.89794Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c42947dc09a3c8b1bd8c87adc2148e9f","sha1":"6427d99c0fe3541562faf6456c31d5645f3fb799","sha256":"041aff4d64fa2d128b1246aea7a92760eea96ca5ec7d2cd0e0d7b9763823c68e","sha512":"2d1b7972ce74de70699a33ddcc7297e563bbeb97319b0522b72e02ddeba0154a6df291672ec443cb9c23eaffada5e374e32b2c6d47ee47eb4a259192de8ce417","ssdeep":"","tlshash":"92e0ab09c347363282c2ebccea0f4cb4208e0b1687d54a13eae148fec9d7612d7c6879","size":430,"data":"","first_seen":"2026-09-15T18:52:54.714802Z","last_seen":"2026-09-15T19:05:36.89854Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meblegasinski.live/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp","fqdn":"meblegasinski.live","domain":"meblegasinski.live","tld":"live"},"ip":{"addr":"104.21.50.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49edccea2e7ba985cadc9ba0531cbed1","sha1":"f8747f8ee704d9af31d0950015e01d3f9635b070","sha256":"1db21d816296e6939ba1f42962496e4134ae2b0081e26970864c40c6d02bb1df","sha512":"f766df685b673657bdf57551354c149be2024385102854d2ca351e976684bb88361eae848f11f714e6e5973c061440831ea6f5be995b89fd5bd2d4559a0dc4a6","ssdeep":"1536:HYE1fGBiByJsbfXXeRJ/shgWCeLLccJdZVHk04ssx+/mvaSIFSet43tpXJIGVyp3:fsAg0psxTva/FSeKy2bDD5a98Hrq","tlshash":"f893e8d9b2d6715287b734a850bf410bb17a98dab80c4c60f058d8e47e78e9d607bf2d","size":96873,"data":"","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-09-15T20:55:17.816779Z","times_seen":26346,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,alF1ZXJ5KGRvY3VtZW50KS5yZWFkeShmdW5jdGlvbigpe3ZhciBhamF4dXJsPSdodHRwczovL21lYmxlZ2FzaW5za2kucGwvd3AtYWRtaW4vYWRtaW4tYWpheC5waHAnO2lmKDA8alF1ZXJ5KCcuZnVzaW9uLWxvZ2luLW5vbmNlJykubGVuZ3RoKXtqUXVlcnkuZ2V0KGFqYXh1cmwseydhY3Rpb24nOidmdXNpb25fbG9naW5fbm9uY2UnfSxmdW5jdGlvbihyZXNwb25zZSl7alF1ZXJ5KCcuZnVzaW9uLWxvZ2luLW5vbmNlJykuaHRtbChyZXNwb25zZSl9KX19KQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"742a3327b879e54b2d07f7847b721ce1","sha1":"4584c74795592cea3dc4ac9e6dde03040939b3d4","sha256":"15a17da4a65665f5f7d2d2ffcdd70775beb65a88c138407c61ee0e718c8e9098","sha512":"27db812172dec8d947a6c6c13b7b3a23bdb10f20881210e3f54d704216c99b171894bb2b1c8d0c01dfa8c2db48d18f91fdfde82d75be31e660599ba8a7693683","ssdeep":"","tlshash":"97d02b2c8f043595507631e0a0fb1b2b70b719246d019a145a5750102e4ca09a807845","size":259,"data":"","first_seen":"2026-09-15T18:52:54.664408Z","last_seen":"2026-09-15T19:05:36.899168Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGF2YWRhUG9ydGZvbGlvVmFycz17ImxpZ2h0Ym94X2JlaGF2aW9yIjoiYWxsIiwiaW5maW5pdGVfZmluaXNoZWRfbXNnIjoiPGVtPkFsbCBpdGVtcyBkaXNwbGF5ZWQuPFwvZW0+IiwiaW5maW5pdGVfYmxvZ190ZXh0IjoiPGVtPkxvYWRpbmcgdGhlIG5leHQgc2V0IG9mIHBvc3RzLi4uPFwvZW0+IiwiY29udGVudF9icmVha19wb2ludCI6IjgwMCJ9","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f476b17227634e67bad967a5553ac2ac","sha1":"82f13fa938701e2ba82205e843c30a79be0ee35f","sha256":"834b2d03d3e2ff8dfcd824ce920186fbd47b018ebf158d17989774b3e25d8918","sha512":"5c576cb0be0f0116f35092c70b8a452df592f7cc9215c3ddb559f503b531b69814626af257868dbea63993b0d35c7af2e2fd009e6bdda8f56315c75fc7b7f27b","ssdeep":"","tlshash":"80d0223cce57c64b636998d5880c03eb2a384c71cf836d0c888e81889389c0ab5bc8c5","size":201,"data":"","first_seen":"2025-03-27T02:57:07.740249Z","last_seen":"2026-09-15T19:05:36.899785Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGZ1c2lvblJlY2VudFBvc3RzVmFycz17ImluZmluaXRlX2xvYWRpbmdfdGV4dCI6IjxlbT5Mb2FkaW5nIHRoZSBuZXh0IHNldCBvZiBwb3N0cy4uLjxcL2VtPiIsImluZmluaXRlX2ZpbmlzaGVkX21zZyI6IjxlbT5BbGwgaXRlbXMgZGlzcGxheWVkLjxcL2VtPiIsInNsaWRlc2hvd19hdXRvcGxheSI6IjEiLCJzbGlkZXNob3dfc3BlZWQiOiI3MDAwIiwicGFnaW5hdGlvbl92aWRlb19zbGlkZSI6IiIsInN0YXR1c195dCI6IiJ9","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"530d85d8f8fd04a31e8072b3861af6ba","sha1":"32c693b699765b9262fbf42d5b1eda686c5fd50e","sha256":"bec15fe70b667988e13f116f710a686a18bf08b8118def9038c917f8d106927c","sha512":"a40ce23fa94d1de0ee6d86c0eb3fa48d23b21461e68a448c6a1285ee186fd4a98fa73599aeb3b87f19f4a9aa282b5a3b1e7b0088c4bf50876e01a3be27ec7653","ssdeep":"","tlshash":"23d0a709da6bc21753a56435485c43f55cf84c33df819f5cc5ce0015d248d45a23d5e8","size":246,"data":"","first_seen":"2025-06-21T08:28:50.50398Z","last_seen":"2026-09-15T19:05:36.90055Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9},{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9},{"level":"log","text":"JQMIGRATE: Migrate is installed, version 1.4.1","filename":"https://meblegasinski.live/wp-content/litespeed/js/685c018163ab1f7ed2241b1452d0a2c1.js?ver=fd26e","line_number":2,"column_number":552},{"level":"log","text":"[LiteSpeed] Start Lazyload image","filename":"https://meblegasinski.live/wp-content/litespeed/js/685c018163ab1f7ed2241b1452d0a2c1.js?ver=fd26e","line_number":142,"column_number":5154}]},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/titilliumweb/v19/NaPDcZTIAOhVxoMyOr9n_E7ffHjDGIVzZg.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://meblegasinski.live/","date":"2026-09-15T19:04:53.365Z","timestamp":1789499093365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/titilliumweb/v19/NaPDcZTIAOhVxoMyOr9n_E7ffHjDGIVzZg.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://meblegasinski.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meblegasinski.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25835\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 09:41:44 GMT\r\nexpires: Fri, 10 Sep 2027 09:41:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 465789\r\nlast-modified: Tue, 09 Sep 2025 18:58:54 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48804,"size_decoded":26693,"mime_type":"font/ttf","magic":"SIMH tape data","md5":"f717e6031676933c2d7c4617fa33e179","sha1":"4c770be4e044a4b4475273553e8dc74668fb78c4","sha256":"bebb0d80751df66d9a9f4e3276654af522a2a7a3ad2438c00ecb2625b24ef1a2","sha512":"ed6e101c2a7069a2c6aa21d7753cef493497a21ea73391405c7b6b2498fd948073181ec457d2b9133b826a16f98eb7e23de360f94a153c4cc2ff958646bd5ae2","ssdeep":"768:kNM4t2E8H7O1j7/FaNfcR5FAFaOxK5Y0lVrogwODjDEtbga/KtB0md1QYeSnJI/z:u2E8H7O1j7dnFABAYGN1DjDEtB/KtB0B","tlshash":"80236c5ef341961bca43783512398232d167f518fbe74b0ae9fa6738dc810868ea475f","first_seen":"2025-06-25T14:43:08.807569Z","last_seen":"2026-09-15T19:05:36.85715Z","times_seen":16,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":41,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meblegasinski.live/wp-content/uploads/2024/05/Magnolia7-1.webp","fqdn":"meblegasinski.live","domain":"meblegasinski.live","tld":"live"},"ip":{"addr":"104.21.50.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://meblegasinski.live/","date":"2026-09-15T19:04:53.088Z","timestamp":1789499093088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meblegasinski.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:07:41 GMT","end":"Tue, 03 Nov 2026 15:05:59 GMT"},"fingerprint":{"sha1":"B0:23:D3:F8:20:08:78:02:85:49:DE:CD:BF:87:EA:39:45:FB:3C:BF","sha256":"E2:87:49:4C:C1:10:87:BB:A9:1F:93:E7:E0:F3:7B:5C:DD:73:EA:11:30:E9:19:5D:3C:A2:87:41:CC:62:4F:F2"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/Magnolia7-1.webp HTTP/1.1\r\nHost: meblegasinski.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meblegasinski.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 15 Sep 2026 19:04:53 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9e653dc235a94-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 769\r\ncache-control: public, max-age=2592000\r\netag: \"13504-663be295-13bbbb2c5bfc2551;;;\"\r\nexpires: Thu, 15 Oct 2026 18:52:03 GMT\r\nlast-modified: Wed, 08 May 2024 20:37:41 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DG4pynjj138JI7vO%2F0G1GeipTyVWK6%2Feb0tvatqFlSx6kkt1cIsgx%2BFKcLyycsPX4CiOtr4Hvt%2FarxmdvhYo%2FQMsM4dHyrdaGcYAIC3%2B7MqfhymsTM3TPws8x4QTcirGGUt9OPQ%3D\"}]}\r\ncontent-length: 79108\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79108,"size_decoded":79937,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 933x700, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5e132b7abffdab8947be1c916f8d57db","sha1":"3c08e897720d3089167ba122f0c2b69e8475fd82","sha256":"4ceea67409e5cf03983e794dadca21cd61079df7db17277eadd42b70c9470eb0","sha512":"32491d810742c6b8557b61c8f268de396bab9bf009acd9f6d472665242553425aa79b050b15ad2c505ffce27eb6792c7a74c8e54b1598075fe32c047abb46bc7","ssdeep":"1536:5JBBxkPBOGuIHFMndiAHJ8c0ECUIUH6TjA+zVLZQ/X00r0lVJXliGzxxQA:5JVcfydiAHcElIUaox/X0ekdBzH","tlshash":"5a73025ff3024ab17f8d76bf26c5e44b803b32635126a45b3bf37811362597bae0a910","first_seen":"2026-09-15T18:52:54.634191Z","last_seen":"2026-09-15T19:05:36.857786Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"meblegasinski.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-129548315-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meblegasinski.live/","date":"2026-09-15T19:04:53.077Z","timestamp":1789499093077,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=UA-129548315-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meblegasinski.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 15 Sep 2026 19:04:53 GMT\r\nexpires: Tue, 15 Sep 2026 19:04:53 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 15 Sep 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 134707\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":381933,"size_decoded":135357,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4998)","md5":"d378f0bf713acb79d474948eb6cc17d8","sha1":"144ffd7c01278b8edde8eaba2299b6138ebec7a8","sha256":"22841c7b36111900237ef46bad8fc37d444205e39f44c09443eb2b6cb71f8df1","sha512":"8d94a9b66491b3270cc7abf42281639e8b14c4f30083372a6bdf67b96f35db58fb3564e0abd9e51805889601fe69a4199d82e86f1a0e48892dbff9ad57f2b528","ssdeep":"6144:5Cn1KcIpPImOh9mHFLgycRtbJEqq3RtWWfA7y23fHdr:5FH+5WYxP5","tlshash":"be8409ccb7d6742283a3b574503f018bb27a79a2b84cc898f286d9d42e3465a5177f7c","first_seen":"2026-09-15T19:05:36.858548Z","last_seen":"2026-09-15T19:05:36.858548Z","times_seen":1,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":1,"connect":16,"send":0,"wait":37,"receive":58,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meblegasinski.live/wp-content/uploads/2019/03/logo-70.webp","fqdn":"meblegasinski.live","domain":"meblegasinski.live","tld":"live"},"ip":{"addr":"104.21.50.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://meblegasinski.live/","date":"2026-09-15T19:04:53.085Z","timestamp":1789499093085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meblegasinski.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:07:41 GMT","end":"Tue, 03 Nov 2026 15:05:59 GMT"},"fingerprint":{"sha1":"B0:23:D3:F8:20:08:78:02:85:49:DE:CD:BF:87:EA:39:45:FB:3C:BF","sha256":"E2:87:49:4C:C1:10:87:BB:A9:1F:93:E7:E0:F3:7B:5C:DD:73:EA:11:30:E9:19:5D:3C:A2:87:41:CC:62:4F:F2"}}},"request":{"raw":"GET /wp-content/uploads/2019/03/logo-70.webp HTTP/1.1\r\nHost: meblegasinski.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meblegasinski.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 15 Sep 2026 19:04:53 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9e653dc205a94-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 769\r\ncache-control: public, max-age=2592000\r\netag: \"115e-5d09656b-7aef9b04a91269a8;;;\"\r\nexpires: Thu, 15 Oct 2026 18:52:03 GMT\r\nlast-modified: Tue, 18 Jun 2019 22:27:55 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Ohi2%2B0Oa8jU%2BnXL01zqUi67RyOuQLy60zXF8KBAqr8NH6c0qtPl16h8DPckYAZ39YGIGQPoEpLMAjPuMgrroNpT97zONsQuwTE%2FXxWaptOR6%2B50YskOiIIEr2lLTg4jItrMDZM%3D\"}]}\r\ncontent-length: 4446\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4446,"size_decoded":5269,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 308x70, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"48661a3132fca7b1558783dc190399b1","sha1":"d31519a442bfa3c6c6e37a2c78d69c7f439b2701","sha256":"df77b0f4cdf00afd59719a5d43b2fddc9a11a2f99419e7c18b8efb91fed0415e","sha512":"c716077df14ac2650d1b1ad8c72f858c888ed6edb671466efd2edf81478d3c1ba5bc375cee2788dbc67bd7465b33bdf64d8ef37879d6c3605f9e853eeed084e0","ssdeep":"96:c8EVFrYxH/rtcA3mS2Oz2V/37lESqw++l4EtS7AX92fCjFQJL57X:c80YvcFS2oE/37lE9wev8tQoFQLX","tlshash":"ca917c49e12f5282c41dd4a1d10fad89632bd7a8c2f78e7821993c0d99dbf552d1c4fe","first_seen":"2026-09-15T18:52:54.632562Z","last_seen":"2026-09-15T19:05:36.859589Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"meblegasinski.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meblegasinski.live/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp","fqdn":"meblegasinski.live","domain":"meblegasinski.live","tld":"live"},"ip":{"addr":"104.21.50.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meblegasinski.live/","date":"2026-09-15T19:04:52.879Z","timestamp":1789499092879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meblegasinski.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:07:41 GMT","end":"Tue, 03 Nov 2026 15:05:59 GMT"},"fingerprint":{"sha1":"B0:23:D3:F8:20:08:78:02:85:49:DE:CD:BF:87:EA:39:45:FB:3C:BF","sha256":"E2:87:49:4C:C1:10:87:BB:A9:1F:93:E7:E0:F3:7B:5C:DD:73:EA:11:30:E9:19:5D:3C:A2:87:41:CC:62:4F:F2"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1\r\nHost: meblegasinski.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meblegasinski.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 19:04:53 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IBTElrUGqxJtoTFUAdVaZ5El1Esn5vRxpaFgCvuhvlfm7dNRcHZIrP5q05RQKAHO7ZyGbYyS6eZf101aQbbePbztkRnkL%2BlpKBdiJfMdTi13iS%2FEYNoQboeFa9JppaCquLu8vgk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a3b9e6528ba05a94-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96873,"size_decoded":36408,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"49edccea2e7ba985cadc9ba0531cbed1","sha1":"f8747f8ee704d9af31d0950015e01d3f9635b070","sha256":"1db21d816296e6939ba1f42962496e4134ae2b0081e26970864c40c6d02bb1df","sha512":"f766df685b673657bdf57551354c149be2024385102854d2ca351e976684bb88361eae848f11f714e6e5973c061440831ea6f5be995b89fd5bd2d4559a0dc4a6","ssdeep":"1536:HYE1fGBiByJsbfXXeRJ/shgWCeLLccJdZVHk04ssx+/mvaSIFSet43tpXJIGVyp3:fsAg0psxTva/FSeKy2bDD5a98Hrq","tlshash":"f893e8d9b2d6715287b734a850bf410bb17a98dab80c4c60f058d8e47e78e9d607bf2d","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-09-15T20:55:17.816779Z","times_seen":26346,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"meblegasinski.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-189424516-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meblegasinski.live/","date":"2026-09-15T19:04:53.075Z","timestamp":1789499093075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=UA-189424516-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meblegasinski.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 15 Sep 2026 19:04:53 GMT\r\nexpires: Tue, 15 Sep 2026 19:04:53 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 15 Sep 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 134716\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":381964,"size_decoded":135366,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4998)","md5":"1b2eb1767a356f1e530865af8c768756","sha1":"1e3631fde14d816483cac7baa48882ba1a50b580","sha256":"8f4e667bdea7e229dae666c100606bc3ccda89b03ad020155227c2069918ba2e","sha512":"179335d059fd5142cd816d126ba9714a3f38f7d5ee9cef31763d7caf2bea2f080f57ff8803ba63590ffa4f836026933925872d39d4e0da305c6a4f9fa4819b35","ssdeep":"6144:dkn1KcIpPImOh9mHFLgycRtbJEqq3RtWWfA7y23fHdr:d/H+5WYxP5","tlshash":"7f8408ccb7d6742283a3b574503f018bb27a79a2b84cc898f286d9d42e3465a5177f7c","first_seen":"2026-09-15T19:05:36.86076Z","last_seen":"2026-09-15T19:05:36.86076Z","times_seen":1,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":40,"receive":55,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meblegasinski.live/wp-content/uploads/2019/03/logo-80-white.webp","fqdn":"meblegasinski.live","domain":"meblegasinski.live","tld":"live"},"ip":{"addr":"104.21.50.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://meblegasinski.live/","date":"2026-09-15T19:04:53.091Z","timestamp":1789499093091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meblegasinski.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:07:41 GMT","end":"Tue, 03 Nov 2026 15:05:59 GMT"},"fingerprint":{"sha1":"B0:23:D3:F8:20:08:78:02:85:49:DE:CD:BF:87:EA:39:45:FB:3C:BF","sha256":"E2:87:49:4C:C1:10:87:BB:A9:1F:93:E7:E0:F3:7B:5C:DD:73:EA:11:30:E9:19:5D:3C:A2:87:41:CC:62:4F:F2"}}},"request":{"raw":"GET /wp-content/uploads/2019/03/logo-80-white.webp HTTP/1.1\r\nHost: meblegasinski.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meblegasinski.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 15 Sep 2026 19:04:53 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9e653ec265a94-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 769\r\ncache-control: public, max-age=2592000\r\netag: \"10a2-5d09655e-59f96e3f8657f7fc;;;\"\r\nexpires: Thu, 15 Oct 2026 18:52:03 GMT\r\nlast-modified: Tue, 18 Jun 2019 22:27:42 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=72SeDooB4xa5F6ZUki1ARYE8d27IkVdCyPdN6PwjhYGjTZ1AKagaa5PahUgnD4bziWnEc5EfyzVJbfpvP%2F8SQBFitLVH0y5muKaYiXrHL%2BKwxE1ThpxhiwsRtVUjHlRMst0qw%2FU%3D\"}]}\r\ncontent-length: 4258\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4258,"size_decoded":5079,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7c442eadd04a37321fd1fda501d0f125","sha1":"2e83f492bd068d817f6d474f0e0ce589e6de317e","sha256":"cd00bc8f5a5032e0e67e627d2b3b2602c0899ffa48e43b682b0b02e1184da5c7","sha512":"7e28e5619706b2a4752402527b8620430ed235b5ab69c6cd5396c527e80a2605f3cffe3cb45023da1551288f0fd627a4407556144685ba9b82cb8172a84c5076","ssdeep":"96:pinp4HnNyWssiLkHXMbX7HAcYccWUp2YtQ:ZHNyWWLk3MbX7gccWU0SQ","tlshash":"d3918e1c153bbe7d9a51827464a8ebe5e95f54e4100886a201af0c0f9b322b41b004ef","first_seen":"2026-09-15T18:52:54.630766Z","last_seen":"2026-09-15T19:05:36.861715Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"meblegasinski.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meblegasinski.live/","fqdn":"meblegasinski.live","domain":"meblegasinski.live","tld":"live"},"ip":{"addr":"104.21.50.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-15T19:04:51.865Z","timestamp":1789499091865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meblegasinski.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:07:41 GMT","end":"Tue, 03 Nov 2026 15:05:59 GMT"},"fingerprint":{"sha1":"B0:23:D3:F8:20:08:78:02:85:49:DE:CD:BF:87:EA:39:45:FB:3C:BF","sha256":"E2:87:49:4C:C1:10:87:BB:A9:1F:93:E7:E0:F3:7B:5C:DD:73:EA:11:30:E9:19:5D:3C:A2:87:41:CC:62:4F:F2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: meblegasinski.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MGkmlnN9ZDH%2B5ySRtmJ7kdHpjVVptrnB0Y6x8jsNuhTIzib3EM6zB4ftVnRUCIcvamxKy5H39MotDAORNO9qs6Y6gi1nHU6cLfNAdvdXRRkowJ8Qtgfr8ujXDaEgykN6oQ5yFDY%3D\"}]}\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 19:04:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: zstd\r\ncf-ray: a3b9e64ce9df5a94-CPH\r\ncf-cache-status: DYNAMIC\r\ncache-control: private, must-revalidate\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 15 Sep 2026 09:05:57 GMT\r\nlink: \u003chttps://meblegasinski.pl/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://meblegasinski.pl/\u003e; rel=shortlink, \u003c/wp-content/litespeed/css/58b23d794049e3055c8e9185000c0580.css?ver=fd26e\u003e; rel=preload; as=style,\u003c/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp\u003e; rel=preload; as=script,\u003c/wp-content/litespeed/js/685c018163ab1f7ed2241b1452d0a2c1.js?ver=fd26e\u003e; rel=preload; as=script\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-litespeed-cache: hit\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress:5.2.21","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WooCommerce:3.6.7","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":381357,"size_decoded":63604,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (55704)","md5":"9b7e15a285705ee1005e29befb0e1004","sha1":"202ca857d2a9c00282c3f52615e0d04fde39331d","sha256":"a7aef7f4a44de3205d1b1972a6614c9538d1a074a380ab70ad38410c6ea479da","sha512":"e2a3a8edddbbd50be29be3659e8818e535db23afcd63ca949d0c23e0aec0a00693e5636bee618a38c401f46fbe1d2940f7de788c2cb0780c03ebc087b7ab8389","ssdeep":"3072:CNi5+ZSuzv40Gul6PgEhqAsCIDukYkEVcrOvt1EFseTpgn47lj8fX8/IQv/HcRwJ:CgnYlszSNI5N/DLutRnNEaOgjjwLUV5","tlshash":"4a84f893d15020d46363961de68179c87633a7d2d2820fecf86dda1c87c75c2eaa27ed","first_seen":"2026-09-15T18:52:54.616561Z","last_seen":"2026-09-15T19:05:36.862342Z","times_seen":2,"resource_available":false,"data":null}},"time_used":791,"timings":{"blocked":-1,"dns":66,"connect":40,"send":0,"wait":682,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"meblegasinski.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meblegasinski.live/wp-content/uploads/2024/05/Fokus1.webp","fqdn":"meblegasinski.live","domain":"meblegasinski.live","tld":"live"},"ip":{"addr":"104.21.50.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://meblegasinski.live/","date":"2026-09-15T19:04:53.087Z","timestamp":1789499093087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meblegasinski.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:07:41 GMT","end":"Tue, 03 Nov 2026 15:05:59 GMT"},"fingerprint":{"sha1":"B0:23:D3:F8:20:08:78:02:85:49:DE:CD:BF:87:EA:39:45:FB:3C:BF","sha256":"E2:87:49:4C:C1:10:87:BB:A9:1F:93:E7:E0:F3:7B:5C:DD:73:EA:11:30:E9:19:5D:3C:A2:87:41:CC:62:4F:F2"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/Fokus1.webp HTTP/1.1\r\nHost: meblegasinski.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meblegasinski.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 15 Sep 2026 19:04:53 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9e653dc215a94-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 769\r\ncache-control: public, max-age=2592000\r\netag: \"9d82-663be213-9d264e4e8c825e9a;;;\"\r\nexpires: Thu, 15 Oct 2026 18:52:03 GMT\r\nlast-modified: Wed, 08 May 2024 20:35:31 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2FRym%2Beo6g9jsQ54oGyqWQvHP5uiCwD4Xug0ogcYPPD982xanrOqU6rzTD9Cv4kpA77iQFQWo2EyA5cqAPslobgYMF4r5Fnhg4NFH6sSbEEfq%2FFg0APlVcOk60KZaPu7q0w%2BCOk%3D\"}]}\r\ncontent-length: 40322\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":40322,"size_decoded":41146,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 933x700, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4edd8774080be2dc86988c4f5cd6709d","sha1":"00be783ceca4cc98195f23f5ba4f10ec975b1ea7","sha256":"764a7f2a7002e3a437ae4dbbb009b7e843316dd66e1cd8a8e91d4c819a5ee95f","sha512":"2d6671b1b1796634bcc691dd77c9ea0186cc5765f8e9fbb67cdd806fa2ee95dcbd2259fb245b046254906e9c8e4148debb674ffba5975ee7c7c0b9e0c8bd9ea7","ssdeep":"768:bZJx9NjRrin+hTpbXAQu03f3p1nPC/zWEQoyTyja8sDEt/SKctbpF:brx9NjRSaTNwQu0P/PC/zLIDsQbj","tlshash":"fc03f1b5f268c636e3d42b93b0e882917625676c10d4719310f1bdb88b3b6178628f93","first_seen":"2026-09-15T18:52:54.629167Z","last_seen":"2026-09-15T19:05:36.862889Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"meblegasinski.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meblegasinski.live/favicon.ico","fqdn":"meblegasinski.live","domain":"meblegasinski.live","tld":"live"},"ip":{"addr":"104.21.50.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meblegasinski.live/","date":"2026-09-15T19:04:53.748Z","timestamp":1789499093748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meblegasinski.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:07:41 GMT","end":"Tue, 03 Nov 2026 15:05:59 GMT"},"fingerprint":{"sha1":"B0:23:D3:F8:20:08:78:02:85:49:DE:CD:BF:87:EA:39:45:FB:3C:BF","sha256":"E2:87:49:4C:C1:10:87:BB:A9:1F:93:E7:E0:F3:7B:5C:DD:73:EA:11:30:E9:19:5D:3C:A2:87:41:CC:62:4F:F2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: meblegasinski.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meblegasinski.live/\r\nCookie: _ga_0ES9EX76ZB=GS2.1.s1789499093$o1$g0$t1789499093$j60$l0$h0; _ga=GA1.1.1699841475.1789499094; _ga_G15DLB3BHV=GS2.1.s1789499093$o1$g0$t1789499093$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nx-turbo-charged-by: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Tue, 15 Sep 2026 19:04:53 GMT\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\ncf-ray: a3b9e657fd4c5a94-CPH\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lu%2BZoiRHygDr4rEUOfSxMw9ms7nUj2pHoFC8yWX0bTj6%2F57qEDK%2FpIcwNxb6GFexEhSd8Jyr%2Bwx57Zd5HRYXPRxYIUWp7fCSWV3pS0Phx881nrL4Z3Vxy5kij70WfHzlhLFp3OE%3D\"}]}\r\ncache-control: max-age=14400\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 25 May 2024 09:07:23 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10369,"size_decoded":4672,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4856)","md5":"8443c913b5ddb0ce9a5d429c15f282a8","sha1":"40d9cf2b8556f2d7639ca7374b40c9e77d38d321","sha256":"e5932dccd8147039264ea339a732b82805dee0ec2afe92d6e60596b07ad738b4","sha512":"a8ab55b72554d0ab542d5a23fda5b32986f8466147c0a8eb12d323725cdba543a33871568e0ade77c6516d2f1c6cd7530901d122b6e6312a93bac4c80fd77879","ssdeep":"192:6+xe1R76V0XalvCr2m+w84uSTG1zaeQzzo7iBzZ6uS4y7woQFDr:MLdXM6Z8tzyzo7iptHy7LYr","tlshash":"6022b5736e80a42ca49b8c3bf6632168a02cc407d9d6d3a4b87d8126dfd51c2d377b8d","first_seen":"2024-08-19T20:22:23.941617Z","last_seen":"2026-09-15T19:05:36.863509Z","times_seen":9,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"meblegasinski.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/karla/v33/qkBIXvYC6trAT55ZBi1ueQVIjQTDH52aHUlP.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://meblegasinski.live/","date":"2026-09-15T19:04:53.361Z","timestamp":1789499093361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/karla/v33/qkBIXvYC6trAT55ZBi1ueQVIjQTDH52aHUlP.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://meblegasinski.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meblegasinski.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22131\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 12 Sep 2026 14:37:42 GMT\r\nexpires: Sun, 12 Sep 2027 14:37:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:44:21 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nage: 275231\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35804,"size_decoded":22989,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 12 names, Microsoft, language 0x409","md5":"f74bcdb6d512b2f2921d8fb7916a32db","sha1":"b53327246ba89dae09280605e10e60f778675264","sha256":"1c64f402ba5fb25214d2beb8f5151efc78b89703ba4b7b992b78c5178b257cae","sha512":"868f350f7b51bbb5dbf9ad3ebc7ca4acbc3afc91e005b876713c1405029fd5217c4919919ed014a1fc809efa25862a5fdaf472c888d555158fa481d8f6f464eb","ssdeep":"768:pjaSV6s6ddbbZydIM/udaD33pcOiWCUYyk0zOwVLV06JGV2mema/:pjaSVkbFy2faD35cYC+7zdLVL9","tlshash":"54f25c07f753ea08d2436fb8986353541bbefd047d5a634f908abb34dc892f44e52668","first_seen":"2025-10-23T17:24:32.676881Z","last_seen":"2026-09-15T19:05:36.865593Z","times_seen":22,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":36,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meblegasinski.live/wp-content/litespeed/js/685c018163ab1f7ed2241b1452d0a2c1.js?ver=fd26e","fqdn":"meblegasinski.live","domain":"meblegasinski.live","tld":"live"},"ip":{"addr":"104.21.50.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meblegasinski.live/","date":"2026-09-15T19:04:53.074Z","timestamp":1789499093074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meblegasinski.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:07:41 GMT","end":"Tue, 03 Nov 2026 15:05:59 GMT"},"fingerprint":{"sha1":"B0:23:D3:F8:20:08:78:02:85:49:DE:CD:BF:87:EA:39:45:FB:3C:BF","sha256":"E2:87:49:4C:C1:10:87:BB:A9:1F:93:E7:E0:F3:7B:5C:DD:73:EA:11:30:E9:19:5D:3C:A2:87:41:CC:62:4F:F2"}}},"request":{"raw":"GET /wp-content/litespeed/js/685c018163ab1f7ed2241b1452d0a2c1.js?ver=fd26e HTTP/1.1\r\nHost: meblegasinski.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meblegasinski.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 19:04:53 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VtWr%2Fu%2FKmhXbyN%2B5aqhzNGodTmDDUTIeq6DLkJMZ3Kf%2FIHQY8CuFAvYD9fNXN6%2BO2czFEH%2BQTK6SMlbvZLSdBXMFlJ4EPutILqTlzoCEiM8c4SQJfIUd0qJb%2Bq0shVuP1XdwH%2FA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a3b9e653cc1c5a94-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":834353,"size_decoded":229477,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26235)","md5":"685c018163ab1f7ed2241b1452d0a2c1","sha1":"64efabbc719e2fa2c2207aab5d30a9347d6e26fd","sha256":"d7eb26be6f80cb5ff23fa3d6fcac7c8ebef1dc7e16a6db3b575ad9ea81d0e84c","sha512":"ae65efb682df108c25678c0786037be9c69793419281a703140fa05511f82a3664cf320d50e4d767fbd70840e90e200a1ab41ef0d856055eef9c81c02f9176af","ssdeep":"12288:hA3iFMMFiQehhQPqh2woSnZNwT04roBxshu1grAoTjCnTIZMp8B:GSFRFiQehhQekSnZNwT/wgrhCnTHqB","tlshash":"6a053a89b24030f941b721b9f07f570a3137aa66b5028564b16ed1e52db8d8e6237ffc","first_seen":"2026-09-15T18:52:54.595515Z","last_seen":"2026-09-15T19:05:36.865991Z","times_seen":2,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"meblegasinski.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0ES9EX76ZB\u0026cx=c\u0026gtm=4e69b1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meblegasinski.live/","date":"2026-09-15T19:04:53.389Z","timestamp":1789499093389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-0ES9EX76ZB\u0026cx=c\u0026gtm=4e69b1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meblegasinski.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 15 Sep 2026 19:04:53 GMT\r\nexpires: Tue, 15 Sep 2026 19:04:53 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 177649\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":532884,"size_decoded":178233,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7830)","md5":"05b747fe6ad6507300917b53d6453a3e","sha1":"6848d7b257587911487cfd77d4e1dfc0012987b0","sha256":"76c46bf96508f98eb91e6fd6e365fa712d267edff06d461ac6fc2f2d7e36f4db","sha512":"315c519a15903cd847b8a890fff636334cae686131c5662e6d6e252fdd8db13aad6dedc14928fa7a6636aeb9667618123c8e9cee07bf8326b176ced878743294","ssdeep":"6144:Fawn1KcIGUPWmJhgY+6Y512Lg2cRtbJEqq3RtwDZA/y2uBwtgT8k6Zr:QL8sen3zDGVu1+","tlshash":"c3b419ce73c674229796f574903f01cb6a7b28a2b49cc89af289dce02d3455a5163f7c","first_seen":"2026-09-15T19:05:36.866502Z","last_seen":"2026-09-15T19:05:36.866502Z","times_seen":1,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":38,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meblegasinski.live/wp-content/litespeed/css/58b23d794049e3055c8e9185000c0580.css?ver=fd26e","fqdn":"meblegasinski.live","domain":"meblegasinski.live","tld":"live"},"ip":{"addr":"104.21.50.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://meblegasinski.live/","date":"2026-09-15T19:04:52.877Z","timestamp":1789499092877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meblegasinski.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:07:41 GMT","end":"Tue, 03 Nov 2026 15:05:59 GMT"},"fingerprint":{"sha1":"B0:23:D3:F8:20:08:78:02:85:49:DE:CD:BF:87:EA:39:45:FB:3C:BF","sha256":"E2:87:49:4C:C1:10:87:BB:A9:1F:93:E7:E0:F3:7B:5C:DD:73:EA:11:30:E9:19:5D:3C:A2:87:41:CC:62:4F:F2"}}},"request":{"raw":"GET /wp-content/litespeed/css/58b23d794049e3055c8e9185000c0580.css?ver=fd26e HTTP/1.1\r\nHost: meblegasinski.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meblegasinski.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rB0oadIYFdWa7m0j0QlHMWhzIm%2BUSF2QlzINSMLA9uL7Bw48YCBKPfUiQGRo9uMhiB%2B%2FjeYwNh3Xu6baOkiJRo0GTkW%2BAjIzwIk2LSbVYkzOAD5h0AkpnzPJ4sPjgBrdBGYP4uI%3D\"}]}\r\ndate: Tue, 15 Sep 2026 19:04:53 GMT\r\ncontent-type: text/css\r\npriority: u=0,i=?0\r\ncf-ray: a3b9e6528b9f5a94-CPH\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: max-age=4838400, private\r\ncontent-encoding: br\r\netag: \"7d9e2-614edf79-343cf0b3339b0901;br\"\r\nexpires: Thu, 15 Oct 2026 19:04:53 GMT\r\nlast-modified: Sat, 25 Sep 2021 08:36:09 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":514530,"size_decoded":58350,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"58b23d794049e3055c8e9185000c0580","sha1":"186cae15f3e25a76a1b2cbeb6bdd39b06dc3a6b6","sha256":"69c45d7af658c36956caab25bf2fe9355801f54b3424f53de9709202f7534c9a","sha512":"85f4dfeddbaf865c8a78e4b5fd4f0167b4ef55a685977a51cf702d564dd3b24d26ab209570f9ca5ef71bf170f2ee342411a92aef261a29947c12723bddc6d645","ssdeep":"1536:CV2KdSiqgGiZyBMW7pJz/kW/wRFyfMWhHCtjeEBJD3AI4FF3DMyNQIoUxTF4Ags4:CV2EdbFDkE85g0di","tlshash":"37b4b7e2401023d82323822d93826d8473779fe1e6627bddb49ed4d48bde581e9672f7","first_seen":"2026-09-15T18:52:54.625498Z","last_seen":"2026-09-15T19:05:36.867453Z","times_seen":2,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"meblegasinski.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meblegasinski.live/?wc-ajax=get_refreshed_fragments","fqdn":"meblegasinski.live","domain":"meblegasinski.live","tld":"live"},"ip":{"addr":"104.21.50.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://meblegasinski.live/","date":"2026-09-15T19:04:53.751Z","timestamp":1789499093751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meblegasinski.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:07:41 GMT","end":"Tue, 03 Nov 2026 15:05:59 GMT"},"fingerprint":{"sha1":"B0:23:D3:F8:20:08:78:02:85:49:DE:CD:BF:87:EA:39:45:FB:3C:BF","sha256":"E2:87:49:4C:C1:10:87:BB:A9:1F:93:E7:E0:F3:7B:5C:DD:73:EA:11:30:E9:19:5D:3C:A2:87:41:CC:62:4F:F2"}}},"request":{"raw":"POST /?wc-ajax=get_refreshed_fragments HTTP/1.1\r\nHost: meblegasinski.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 18\r\nOrigin: https://meblegasinski.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meblegasinski.live/\r\nCookie: _ga_0ES9EX76ZB=GS2.1.s1789499093$o1$g0$t1789499093$j60$l0$h0; _ga=GA1.1.1699841475.1789499094; _ga_G15DLB3BHV=GS2.1.s1789499093$o1$g0$t1789499093$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"time=1789499093748"}},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lh%2FugsGqAY1%2BCM1l2gm7kJgVhtI8D39THJ5HjFFGJEy8J0I96gsUBNG6naPmpG1OtxY9kEYIWB27o3B8RExfzU5PIBxdRMB18YPxPcM7Y%2BrmrK7lSNCUs1wPi5igAXIgIRs04vI%3D\"}]}\r\ndate: Tue, 15 Sep 2026 19:04:54 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: a3b9e6580d4e5a94-CPH\r\ncf-cache-status: DYNAMIC\r\ncache-control: private, must-revalidate\r\ncontent-encoding: br\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-litespeed-cache-control: no-cache\r\nx-litespeed-tag: 576_HTTP.200,576_HTTP.200\r\nx-robots-tag: noindex\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":488,"size_decoded":1117,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"63be60f0440a35c13f596f2ff93a7580","sha1":"5b19ad47af8a7c73e92f1277b095c04768c8899d","sha256":"8af179d1db351bdbda2bbc58b373652b968699ccd2284bf9180ee6371d0f2822","sha512":"0e9e3a19b54259f0ed5ecf6a4492bd15817194181396ddae3104c5a8b34ccb8e04e4a11887d537facc0456aaaf61df2813d03128ef3f75593731d843f9d9e158","ssdeep":"","tlshash":"70f0279220b5847b8a938ccd114db5e8b272068ced0b4955cae92f081788fc182b56be","first_seen":"2026-09-15T18:52:54.620174Z","last_seen":"2026-09-15T19:05:36.868529Z","times_seen":2,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"meblegasinski.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w3aX8.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://meblegasinski.live/","date":"2026-09-15T19:04:53.362Z","timestamp":1789499093362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w3aX8.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://meblegasinski.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meblegasinski.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 58160\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 10:54:06 GMT\r\nexpires: Fri, 10 Sep 2027 10:54:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 461447\r\nlast-modified: Thu, 04 Sep 2025 17:11:05 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":124924,"size_decoded":59018,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 12 names, Microsoft, language 0x409","md5":"5b9d0957c93c5e68e6bb3659c99d2f09","sha1":"b9f7361982a5d28cb951b81e68466f8c5434d95a","sha256":"368a872dc3b0eab173bb9040ea9f480115a46efe966e39b4f2c2a6104e48ef22","sha512":"ad068972be76e0f3b0e66faea3b4e6b27a14de1eb6f746dc41070e0e3283e9689b75b5e70e571abd95090749dee536caf7bc0f51d56b34e33fff6e070f6f6a57","ssdeep":"1536:2Ptnlj+fCnBH97xz3DRQEpJ6Ew3v1Zul8KFGnx5yCNdnYx5rE:OnofCnBJR3u5P3v1Zul8agx5yCvorE","tlshash":"f9c31a13b303e64dde863d789ee2d3b03775bd286e1dd21bfd426e28a08f5844985399","first_seen":"2025-09-24T09:45:04.899763Z","last_seen":"2026-09-15T19:05:36.869447Z","times_seen":323,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":19,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-G15DLB3BHV\u0026cx=c\u0026gtm=4e69b1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meblegasinski.live/","date":"2026-09-15T19:04:53.411Z","timestamp":1789499093411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-G15DLB3BHV\u0026cx=c\u0026gtm=4e69b1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meblegasinski.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 15 Sep 2026 19:04:53 GMT\r\nexpires: Tue, 15 Sep 2026 19:04:53 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 159544\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":463613,"size_decoded":160128,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"87209e21c32c066a56c2fb679c868440","sha1":"764a91ee817a91bc73abe3ad53bfa7d2be9893d0","sha256":"ecb75150e0b95b6adc388c813ab7aa10da0e43be725f11ba41ceb2cce027b3ca","sha512":"7f3d1fa82ca6bf5a3b3179f154352fe5966426f5d02bb67db0e90eed8823e611643b528a9363bfebf0e428af18df7159f12a6bf228b6937362ad1e93f4a8437d","ssdeep":"6144:VJGn1KcIGUPWmJhgYcYnsLg2cRtbJEqq3RtwLnA/y2MnwtgT84btr:nZ8seoJLAVM/B","tlshash":"ffa419cd73c6742293a2f674903f018ba67b69a2b44cc899f28adcd42d3465a5173f7c","first_seen":"2026-09-15T19:05:36.869968Z","last_seen":"2026-09-15T19:05:36.869968Z","times_seen":1,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtZ6Hw3aX8.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://meblegasinski.live/","date":"2026-09-15T19:04:53.359Z","timestamp":1789499093359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtZ6Hw3aX8.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://meblegasinski.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meblegasinski.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 56616\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 08:40:57 GMT\r\nexpires: Sat, 11 Sep 2027 08:40:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 383036\r\nlast-modified: Thu, 04 Sep 2025 17:11:05 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":123352,"size_decoded":57474,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 14 names, Microsoft, language 0x409","md5":"796b85b565911c346be9a3a9a95e95bd","sha1":"8d8857166868d2414a201cf4d35a49f1707a6dba","sha256":"f96602c89e122b2e1a920841e03b3729dd659da7c7be5d4293779dfa72266c96","sha512":"d3e5810bcf2fe949c5c9fe287289ef431aef1022fb240a7e4ccfe15d538e9553a3299176a2f984774ecf423c2537d188384b31308808d9816cb6d16b1aeed66c","ssdeep":"3072:aGfCDQTpHjaLavrwckNUUzHBx8ht5U5lOfLYe:NaDChjnk/CUzgilc","tlshash":"aec32a16b307e64dde863d789eb1c3b07774b928bf5dd20bf8462a2ca48f5444d82395","first_seen":"2025-09-21T08:37:49.480873Z","last_seen":"2026-09-15T19:05:36.871029Z","times_seen":480,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":24,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meblegasinski.live/wp-content/uploads/2024/05/Moderno.webp","fqdn":"meblegasinski.live","domain":"meblegasinski.live","tld":"live"},"ip":{"addr":"104.21.50.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://meblegasinski.live/","date":"2026-09-15T19:04:53.090Z","timestamp":1789499093090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meblegasinski.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:07:41 GMT","end":"Tue, 03 Nov 2026 15:05:59 GMT"},"fingerprint":{"sha1":"B0:23:D3:F8:20:08:78:02:85:49:DE:CD:BF:87:EA:39:45:FB:3C:BF","sha256":"E2:87:49:4C:C1:10:87:BB:A9:1F:93:E7:E0:F3:7B:5C:DD:73:EA:11:30:E9:19:5D:3C:A2:87:41:CC:62:4F:F2"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/Moderno.webp HTTP/1.1\r\nHost: meblegasinski.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meblegasinski.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 15 Sep 2026 19:04:53 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9e653dc255a94-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 769\r\ncache-control: public, max-age=2592000\r\netag: \"dc82-663bdd2f-b0942c93d92f1a6d;;;\"\r\nexpires: Thu, 15 Oct 2026 18:52:03 GMT\r\nlast-modified: Wed, 08 May 2024 20:14:39 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mK42md01o3k9T8IUxC8AbSTW%2BX6TVomB9XhizEOKeyXYXosf47Iv%2BZBc%2B10SFj6pDh59VCzF4AYcNXvTU6ckkNltNRy1nFWX%2Bws%2FABhmcqdW%2FsjqApaggIfX2MTD7cgM%2B%2Bya4vs%3D\"}]}\r\ncontent-length: 56450\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":56450,"size_decoded":57282,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 933x700, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"90cb1e7099f916bc5731cd525d56ffa2","sha1":"f1de0f1af04e1543c1aa5f5aabc20bc90af83d62","sha256":"65ddee9f680bdeb8af9216ceda6c6278b05f940aef55f4964e59d13bea74da86","sha512":"c636ef3563b2cdc3653367ea03e8614e3b52abbe3c50dc455d9ee0927dcf482e0751a6ac059300e2f4ded75f6715648e2e33c642b6332e763fe30c5f304e2172","ssdeep":"1536:gowhqeXxDAC0/ElQzLGWbIDy0U4GRT6ojZvSi3:gowhqeOPVt8ux4ET6oFvS0","tlshash":"db43028c0ace20d7fb3cd27447616a3381021d7c5f70d1ae45188aae96d0ea33a4b979","first_seen":"2026-09-15T18:52:54.621954Z","last_seen":"2026-09-15T19:05:36.871603Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"meblegasinski.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/titilliumweb/v19/NaPecZTIAOhVxoMyOr9n_E7fdM3mCA.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://meblegasinski.live/","date":"2026-09-15T19:04:53.358Z","timestamp":1789499093358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/titilliumweb/v19/NaPecZTIAOhVxoMyOr9n_E7fdM3mCA.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://meblegasinski.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meblegasinski.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27090\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 11:29:28 GMT\r\nexpires: Thu, 09 Sep 2027 11:29:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 545725\r\nlast-modified: Tue, 09 Sep 2025 18:58:53 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51244,"size_decoded":27948,"mime_type":"font/ttf","magic":"SIMH tape data","md5":"4da2e437bca8182bfc70c87040690e15","sha1":"4e6c565c6445890e583c1b5ef26d5bb201899f0c","sha256":"cd5126b644dbc97abfeb81064b959b781064082acd207ae77efe8d299dcfa55d","sha512":"c608d2649d35d8e89ca6239b93f3bb000a16953a15890c22769174be1c964edf5621981c099a7e28ad1ffa0d800a2dd9a5e63bc4b169c16d1a4d7d8a1c5c3502","ssdeep":"1536:qg2E8H7O1j7QRFDJYr9kO+8XVng+6jRs1SPDoo:X2E8H7O1j7QRdJ6eO+8xg+64SPDj","tlshash":"99335ceff284c708de1369354a29e7319252f60ce6e32743ff782e6895844d61d70a9b","first_seen":"2025-06-25T14:43:08.81384Z","last_seen":"2026-09-15T19:05:36.872162Z","times_seen":21,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":31,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026ibt=1\u0026tid=G-0ES9EX76ZB\u0026cid=1699841475.1789499094\u0026gtm=45je69b1v9131911056za20g\u0026rcb=11\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938466~115938468~118897920~118897930~120213116~120385422~120469145~120469153~120912438\u0026z=649390338","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meblegasinski.live/","date":"2026-09-15T19:04:53.636Z","timestamp":1789499093636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:40:49 GMT","end":"Mon, 02 Nov 2026 08:40:48 GMT"},"fingerprint":{"sha1":"AC:46:A3:8B:39:87:22:F5:32:ED:16:91:E0:7E:28:F9:39:7F:D5:13","sha256":"A4:B2:FB:D3:1E:80:B3:DC:DB:0F:63:1F:D1:60:FE:3F:E6:F8:61:9E:91:4E:FF:2E:A6:1E:2D:71:C9:D0:1F:75"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026ibt=1\u0026tid=G-0ES9EX76ZB\u0026cid=1699841475.1789499094\u0026gtm=45je69b1v9131911056za20g\u0026rcb=11\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938466~115938468~118897920~118897930~120213116~120385422~120469145~120469153~120912438\u0026z=649390338 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meblegasinski.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 15 Sep 2026 19:04:53 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-09-15T21:51:31.53518Z","times_seen":1066560,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":3,"connect":17,"send":0,"wait":39,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meblegasinski.live/wp-content/uploads/2015/09/slider650.jpg","fqdn":"meblegasinski.live","domain":"meblegasinski.live","tld":"live"},"ip":{"addr":"104.21.50.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meblegasinski.live/","date":"2026-09-15T19:04:53.889Z","timestamp":1789499093889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meblegasinski.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:07:41 GMT","end":"Tue, 03 Nov 2026 15:05:59 GMT"},"fingerprint":{"sha1":"B0:23:D3:F8:20:08:78:02:85:49:DE:CD:BF:87:EA:39:45:FB:3C:BF","sha256":"E2:87:49:4C:C1:10:87:BB:A9:1F:93:E7:E0:F3:7B:5C:DD:73:EA:11:30:E9:19:5D:3C:A2:87:41:CC:62:4F:F2"}}},"request":{"raw":"GET /wp-content/uploads/2015/09/slider650.jpg HTTP/1.1\r\nHost: meblegasinski.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meblegasinski.live/\r\nCookie: _ga_0ES9EX76ZB=GS2.1.s1789499093$o1$g0$t1789499093$j60$l0$h0; _ga=GA1.1.1699841475.1789499094; _ga_G15DLB3BHV=GS2.1.s1789499093$o1$g0$t1789499093$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 15 Sep 2026 19:04:53 GMT\r\ncontent-type: image/jpeg\r\npriority: u=4,i\r\ncf-ray: a3b9e658ddc05a94-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 769\r\ncache-control: public, max-age=4838400\r\netag: \"dedb-5d09654a-204333cae58269ce;;;\"\r\nexpires: Thu, 15 Oct 2026 18:52:04 GMT\r\nlast-modified: Tue, 18 Jun 2019 22:27:22 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RhIUV%2FY%2FuVflviGRHASiaZFpENSpxPnW6ID4vjAdgbozTLOqJVu7%2FmKRR7vN7uDKbU4r%2FONnmGoVp8MT6XHSv2Joant69XQkoRNgWiKPvMkF%2FNGnDdzPhKZfbJ2iXv789Ygm3c0%3D\"}]}\r\ncontent-length: 57051\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57051,"size_decoded":57877,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1874x651, components 3","md5":"dd6c0791fafc3f2e8be8fb8604d5a985","sha1":"a3c9763868b82b649e12a22a1742705aea401b09","sha256":"708c9fb1ffa18adde907b8cc6bd158ee510efa010cb9ff5c2d47bdb81f13097d","sha512":"855d52d5ca921dc8471f41b21ab45915d89aa8b575b62796a24f177067713e0ab85dae29deee33a3a2ae0bc1669d83eb0beac469cdda9993c4e039d068bc37dc","ssdeep":"1536:u/5FFLk3UUg52+BsAnrOPt9O1dQple62ZGN:m3k3RIlBsJTO1YlG+","tlshash":"8a43f2ec3a365b81edb9c1f11ab10325e9b47a224a1bdead0751ec7c311fa541211eb7","first_seen":"2026-09-15T18:52:54.610278Z","last_seen":"2026-09-15T19:05:36.873258Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"meblegasinski.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"meblegasinski.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}