{"report_id":"3823aa7a-9e93-409d-9f69-d2d5ad399138","version":0,"status":"done","tags":[],"date":"2026-09-24T09:59:33Z","url":{"schema":"http","addr":"salonkosmetycznybialystok.live/","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"title":"Podolog Białystok - Gabinet Podologiczny Pro.feet Elżbieta Polewko","dom":{"size":1564413,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (36158)","md5":"fe07115f26e5137477b72d2c11435c5d","sha1":"5a220fe81f158008653ff15d33aba97dd097ffce","sha256":"2aa0503d1389d6acba98bf52adf8661e4b83d0f8c00dbc008ab1caf00fd38895","sha512":"d5728839385804d274e20445e68bb9058b013a921d0c9a829a1ccc06cbb046c893aad17d5c1e1144f90cdb8e09b032e89b67ce97b160f130eeb8c29525f491e4","ssdeep":"24576:BamToq/7OC9Q26vbDOwZHwG1ZAIkKDJ3bys5XrHee01TDxuVwP9l:YmToq/K26dVwP9l","tlshash":"2e75fa72f85010cd2333cd2ef7d47a68752bc162d5920eeef266e4094bc669d22a6737","dom_hash":"domhashe30c68be273b65b5db693f602624d169","first_seen":"2026-09-24T09:59:50.31363Z","last_seen":"2026-09-24T09:59:50.31363Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"salonkosmetycznybialystok.live/","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-29T09:59:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"salonkosmetycznybialystok.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"salonkosmetycznybialystok.live","ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-24T09:57:38.386781Z","last_seen":"2026-09-24T09:57:40.772173Z","alert_count":85,"request_count":17,"received_data":2362947,"sent_data":9591,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-20T22:44:48.5379Z","alert_count":0,"request_count":4,"received_data":1802358,"sent_data":2002,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":4,"received_data":65607,"sent_data":2287,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":6296,"sent_data":574,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn-cookieyes.com","ip":{"addr":"104.18.19.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-22","domain_rank":9847,"first_seen":"2020-04-26T13:42:32Z","last_seen":"2026-09-21T12:41:33.503161Z","alert_count":0,"request_count":1,"received_data":99656,"sent_data":524,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"59c70dce5fd08f7140d86012da600504","sha1":"ebc248d1f00d24c671b41bf2001a4f3b39c09273","sha256":"0fe7da77d39290bbb892e7f21553dd01a86ad94eea4de53e8c62c68565534a48","sha512":"3286338f53c5a12a402c03999ac69aaf52b4fe212771e2d7b2724cf633c8d5439f55410465a7b7483e7f067493eb0b8d1f57bba7d53c3b96dac608f9ec93d820","ssdeep":"","tlshash":"e4f0a789a50a083114a736d53e7e6400a5301167b86aedf83adf51c80f6e76fd3a7dcc","size":523,"data":"","first_seen":"2024-09-19T21:25:19.471684Z","last_seen":"2026-09-24T09:59:50.327776Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2d2a5bcf974df311bd3775adb81ab30","sha1":"e02e6cd9bc05ca7a72be36c97fc907ed76cb712c","sha256":"d0e111dd2c6dd1163e762c0a86f41d0d7d5d32da6de6a1a0b0c8aba8385eef90","sha512":"4b61f57794bfe95107dfa1134445a4723cbe167a869d3c1fa5133571401b7e97bd97604e91f72cd0da21da9942a01c1a7bde9f8d5961168eee9474d13902b5d7","ssdeep":"","tlshash":"b0c02bc8260a0cf185fb2b408b3ff600b421320894d05d33481923044e10e03d744804","size":151,"data":"","first_seen":"2026-09-24T09:57:48.450254Z","last_seen":"2026-09-24T09:59:50.328596Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"28eb3723ac0b3a12cc07c5d799202784","sha1":"836b036ddd1c0281d7394fa462cf0d943c14db52","sha256":"8810b96be13b93a14ed57c5d03399e906ad5f3ad4b30e5bd73e022bb86e14455","sha512":"6ff8e2970fd904d3a36889f5949787998d0d728936f13c90ceaee50271b73fe9dfb63f26d35adce0cf054ff0e933a9b9bbca7779f663e8611686f41eb1094056","ssdeep":"","tlshash":"1fc0220cab8e400680db3d8a49a860ce242870184e321b4384ad8e89c0a2ca60853eee","size":191,"data":"","first_seen":"2025-02-27T05:08:47.162648Z","last_seen":"2026-09-24T09:59:50.329437Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"849edb7d1b330a036fec57f5f033b086","sha1":"8cc9f4a1421bdfef7b8731596df7e86409e884ca","sha256":"d7fd5aa1d914d0a8996e0195c1b652d543112f28cd24ebb4e7f016ae51ac1203","sha512":"c87d6b93cf501eb97871d0c39714e06bada8593075220adc2018fdc62a740f94e2f51ea99fe8617ace1d00aba03b912a36c26c91c689c250bd698f17f5f585c9","ssdeep":"","tlshash":"d5c02b8c210a4c7141e727008f3ff600b4013304d4e579310c49a3044d60e17d744810","size":149,"data":"","first_seen":"2026-09-24T09:57:48.452274Z","last_seen":"2026-09-24T09:59:50.330213Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b687c36d1d05c32bd8ef6022daaba261","sha1":"6bf010a92bfb5f09f3c2bebc44aa2c0e2d5ec02f","sha256":"0596f4b1016755abd68b22dea7e47382fd5d1dc24ea0c06c785f8ce7838f8d18","sha512":"84a3247d2b3f8f2014b63b8fe6024076993eff21db0aab4db351c1c2c743667cdaec42bf96e8925c35d50433cc699e5f35882aa05aa499a85befb198ec993703","ssdeep":"","tlshash":"4fe0c0da7811087170d905b533b5a1287563560868091d32cdfdcd1428186c748134cc","size":342,"data":"","first_seen":"2026-09-24T09:57:48.453285Z","last_seen":"2026-09-24T09:59:50.330976Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"29376c79460c1da0950805c6632a12a4","sha1":"7f67f994301cb608c1aa51752c37670f98c16163","sha256":"b2b51964dd71f64404729019d895c660ba783a726e4fb1e997874ba4f94c40ef","sha512":"2671433c39e9a1c3598a18c98ea9c2dcf0dc95716c889d235e2a64783ae328ffec696cea2af971ed051ba7d1caa7c27a99215ae90560fb9ed6e327a95f84725c","ssdeep":"","tlshash":"640122e0608c530186ef54ccc68620c2d271ea77ad906c37f9c6e91408a960bedc2e75","size":848,"data":"","first_seen":"2026-09-24T09:57:48.454373Z","last_seen":"2026-09-24T09:59:50.331593Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"505db0121c7c8f1658e89e8677171136","sha1":"b0dc5ef82bbc7cd12d68be30e6372dde94202861","sha256":"f2dccb6e20d785eb7c42899fb46719a1b9b105c88ce2e095b53782c1af99ba72","sha512":"1cc0d097af2c6dab5bd1b93da3a1bfa17567fea57cd97c8835df7ed1a0b26b955c58f9bcb843fd0dea0296d8cce8be06eb6d1209b7d376a719afbccd81f337b7","ssdeep":"","tlshash":"fa514b209a0f205d063fb7a3e64f5d36a8af952e93fc1204dae18f1762d71561bfc606","size":2808,"data":"","first_seen":"2026-09-24T09:57:48.455364Z","last_seen":"2026-09-24T09:59:50.332507Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-B1T7HM8TEG","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d23a9f3ab49ca05752f616f2302b0dd4","sha1":"f9a082e58748758979b86bf7b3ddd87529816c69","sha256":"f463b644bb93370a5af6fdd21388f274a310a9837b03e7f8687c451a901608b7","sha512":"fdc5badb33c5bc386304518279c40062212923522c89e04550ea57a2d5ffbb9d2c0a89cf0322d8340b6206e11bf962a6aa092b2859a4d65ee6a20370c5dce5f6","ssdeep":"6144:Iyp1mijFW0XwgY6J4HnrgoUdOc1abxE/B3pd3wrLWNUDT9HDaeQm:aIFWhx6YhiwuNqBb","tlshash":"a5c409ce73c67422a396f578943f01cb697b29a2b49cc89ab18ddce02d3454a5163f7c","size":548379,"data":"","first_seen":"2026-09-24T09:57:48.439877Z","last_seen":"2026-09-24T09:59:50.315773Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-P2XKK7QJ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b7060c1d50e98f4b089bde8c86dd875","sha1":"9157423727f42454c2d9ee59fce6fc22f1bfe529","sha256":"3a31d7a5677a4332f9124d9f77d4d61e5ae90455cdb68d4ca7acde515ec45452","sha512":"b375e56e71acd3ce5d17a871da7031e6002d302f8da629193b621c9449a1d38b7885396fbd6f60029f667fb69df957cfe03871cd9db59a672e4392f1a5e797ee","ssdeep":"6144:E31iBQwGw1QMMlQrjQ9HS8cfmb9E0B3wX0Z4zaImKwbnI:vPVeEjIjZ4ZmQ","tlshash":"ea941acc73d670629392b674903f018bb67a69a2f84cc895f28adcd42d3469a5173f7c","size":442578,"data":"","first_seen":"2026-09-24T09:59:50.316721Z","last_seen":"2026-09-24T09:59:50.316721Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cookieyes.com/client_data/0b51a9e7c8193e2567f4ec21/script.js","fqdn":"cdn-cookieyes.com","domain":"cdn-cookieyes.com","tld":"com"},"ip":{"addr":"104.18.19.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a18055d3233126c5c73c94aa3bc5e6a9","sha1":"a33fc99ae2a850055555422185cbc16b9da44e6c","sha256":"ed7a34dbc52e0a199a083eaff22c1679efbdad489290bf0f933a324b4757d510","sha512":"d7a846f986b0cc73c03809f85839e8e93d0cf756cd5e13204cda1135310133699069bbdaa9057b8d6e16f639d342a4c653a2fa8a1130718516ca75b9042d5255","ssdeep":"1536:1LGWh7/MnhKnuD7QWfQARJJb8J/LpsMzCTNmmJI6TWtgjnew:1T7/MhKunQoQRBsnew","tlshash":"42a3b58cfad1f0a517e360a4806f950bf17b2a69740d94d1eaa2c5d1ac78e8f4037e7d","size":98989,"data":"","first_seen":"2026-09-24T09:57:48.448795Z","last_seen":"2026-09-24T09:59:50.322457Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-131496492-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"47f5e742b7d7b42b1913d9871f833625","sha1":"83a99af459f0b22b9c6c3678ead4f155d4014092","sha256":"0bae97bc564ace9f8bef7014e8af76422ba0303ac204b6d61d98e70c9451637a","sha512":"c651d994c586b2336509362b57c52f5b4abb779e6090c5e7518b43f4b108d1ba5a506717a2a23b3d07842efc17da2b68779fc5e1b5c886acc24734ea8b114542","ssdeep":"6144:Cp1mivFwkl6ZRqsdcc1abxE/B3pd5ovLWrSH9G5m:RB46JoSrEJ","tlshash":"c38419ccb3d6702283a3b574903f018bb27a6d92b84cc898f286d9d42e7465a5177f7c","size":382112,"data":"","first_seen":"2026-09-24T09:57:48.442637Z","last_seen":"2026-09-24T09:59:50.324516Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"c2d9846a1e53b37d5e8387dd238da6f7","sha1":"a1373b2a22cb1e1fea8f11d510793bacb9b6787e","sha256":"b053f89118e06170c0bfdb9f887c86b361fcb1d4f435fd36e35f980ed69b00f5","sha512":"676bb9af24f3d7db6d087b8c2285e6f060e2b20e03260c27fcff1b8eb9de6b4f47ad0458c9021857461a253d32c22003cfbb3127f0bf512edbc695d0718f7bd9","ssdeep":"","tlshash":"db900214e6c490831201284a61131208e14e1008109f0c1384440104711a074c010528","size":45,"data":"","first_seen":"2023-04-17T18:19:02Z","last_seen":"2026-09-24T09:59:50.333225Z","times_seen":994,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39a8679ed70005ee063ea62886141a2","sha1":"52b556cb7bdbe59b9b1ab9415ff905b561b8399e","sha256":"b33ed8fd08f8cf0138f219167d4bb5817f1b09c1d9ac7431e833899ecfff40f1","sha512":"c65e2fe579412ea8ef38d29185f47dec1f4fb871ec28767c104821f1c3368793c4ff577ed58971d27a9bbac97fee734093766954f7e9d2fc0ff1cb687a0ab977","ssdeep":"96:A1VdZYqhPnjpsx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBf2PfCHiUr3:AXdZYqNjpm4yPqSMbqaQGL2QfdDayCZa","tlshash":"3ca1ca9929fb50210233b1bd1bafa918b63895236208dd61bd8c9264af94437d7f1bc9","size":4693,"data":"","first_seen":"2026-05-25T14:46:35.360433Z","last_seen":"2026-09-24T12:24:27.59295Z","times_seen":103790,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/wp-content/cache/autoptimize/js/autoptimize_c42c2d4bf6bc98e87e6e9e2ac4d420c1.js","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"170ed5a523cb16244d5aabdb9aba0178","sha1":"66bb5f4942ca9aafd741e888ff18fee7272f6c29","sha256":"feae1ca6576c920f1a1af84cff695fdc57f069bfe8eb64cf7ef817a61c703b91","sha512":"4e5dc96b97d82bf79355658092c421d5549d30f9cfedfd91b23d1cb79a70cb98fe74cb7eca3d1a2f3248795295b3bc902089e75662dbe8e32527dcccb611768b","ssdeep":"12288:ykNI/shxhaaWxKVOtyGJ1Ws9qD4/+hESSBigKO:yII/shxhaaWxUO8G+hEvBig9","tlshash":"a4d42b4af20031a642fb61aa703f520eb237a576f502406cb17ad8f96d78d496237f7d","size":642089,"data":"","first_seen":"2026-09-24T09:57:48.443728Z","last_seen":"2026-09-24T09:59:50.326896Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16667339630\u0026cx=c\u0026gtm=4e69n0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8ff9839d3638fe755aa2367bad61c8e","sha1":"ebb753e3e083a3d89d3684d22f0e7b9a75e0c8d2","sha256":"e6a8291e9c8d3318c5657e59fb61324fdd17256b7a55666e4f37160bf9370dfa","sha512":"6a8f994ee89140dbc8dd9913a55e8ff62e67f8e5847ef2eb88b076f3f5b64a6bb1f9016f22f152509edb371d3035545c14495486a719ac9cc1e301aeb36b5b8c","ssdeep":"6144:A31iBQwnw1QMMlQrjQ9HS8cfmb9E0B3wX0O4zaIrunI:bPweEjIjO4Zrt","tlshash":"5a941acc73d674629393b674903f018bb27a69a2b84cc894f28adcd42d7469a5173f7c","size":426416,"data":"","first_seen":"2026-09-24T09:59:50.319492Z","last_seen":"2026-09-24T09:59:50.319492Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9}]},"http":[{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/wp-content/uploads/2019/07/podologia-bg4.jpg","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:57.221Z","timestamp":1790243937221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salonkosmetycznybialystok.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:52 GMT","end":"Mon, 26 Oct 2026 14:37:16 GMT"},"fingerprint":{"sha1":"C6:29:45:C0:C0:BC:B4:11:2A:F8:36:F1:AB:3C:99:3A:2E:8B:A1:6A","sha256":"0A:A3:A5:2B:B0:84:19:C6:22:7C:D0:C2:27:5D:57:C7:38:87:7D:0B:B9:93:C3:C7:CD:26:04:76:DD:73:3C:3C"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/podologia-bg4.jpg HTTP/1.1\r\nHost: salonkosmetycznybialystok.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salonkosmetycznybialystok.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 09:58:57 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-encoding: zstd\r\ncf-ray: a400eeffaa991ae6-OSL\r\ncf-cache-status: BYPASS\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HJLQl%2B4zEJgQ0jj82qQvMFKRpEcrkyLQM6bib4V%2BnIt1B1EWjjVztwRpr6Hse69WQJRMEGKkwUkW9v4J1qk4Cgjbx5q%2FdbsY89kzjhwkU%2F7OgN%2Bl3do7f6lgD3tkdBvZpNFCg5yBXVTOmTwWiu21Pc4%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":814,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"5290b8512262fffca20df1dbf2a674a4","sha1":"9c1add44d731073281ae82abbbb2b7687a93b1bb","sha256":"ab768623070128ccef048c88def86155dbe776c3d8db423cc8fa89432673d8a8","sha512":"c9e1331164ac3e50e576bae5470a5f575e1f3c47016a68d8639e54bbcf3448803294005cec80a7c4d06d04b109bfc21bbbb6eb857ac789ddf59dec9f31276b1c","ssdeep":"","tlshash":"51d0979fe1ae82084253b3c07ed127c0b402937a78c206cc9b86e043d0042fdc00904c","first_seen":"2025-12-13T12:55:08.223293Z","last_seen":"2026-09-24T11:34:04.864176Z","times_seen":1076,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"salonkosmetycznybialystok.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-B1T7HM8TEG","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:56.599Z","timestamp":1790243936599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtag/js?id=G-B1T7HM8TEG HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salonkosmetycznybialystok.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 24 Sep 2026 09:58:56 GMT\r\nexpires: Thu, 24 Sep 2026 09:58:56 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 181370\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":548379,"size_decoded":181974,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6301)","md5":"d23a9f3ab49ca05752f616f2302b0dd4","sha1":"f9a082e58748758979b86bf7b3ddd87529816c69","sha256":"f463b644bb93370a5af6fdd21388f274a310a9837b03e7f8687c451a901608b7","sha512":"fdc5badb33c5bc386304518279c40062212923522c89e04550ea57a2d5ffbb9d2c0a89cf0322d8340b6206e11bf962a6aa092b2859a4d65ee6a20370c5dce5f6","ssdeep":"6144:Iyp1mijFW0XwgY6J4HnrgoUdOc1abxE/B3pd3wrLWNUDT9HDaeQm:aIFWhx6YhiwuNqBb","tlshash":"a5c409ce73c67422a396f578943f01cb697b29a2b49cc89ab18ddce02d3454a5163f7c","first_seen":"2026-09-24T09:57:48.439877Z","last_seen":"2026-09-24T09:59:50.315773Z","times_seen":2,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":54,"connect":28,"send":0,"wait":50,"receive":96,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-P2XKK7QJ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:56.833Z","timestamp":1790243936833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtm.js?id=GTM-P2XKK7QJ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salonkosmetycznybialystok.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 24 Sep 2026 09:58:56 GMT\r\nexpires: Thu, 24 Sep 2026 09:58:56 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 24 Sep 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 154090\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":442578,"size_decoded":154720,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6189)","md5":"0b7060c1d50e98f4b089bde8c86dd875","sha1":"9157423727f42454c2d9ee59fce6fc22f1bfe529","sha256":"3a31d7a5677a4332f9124d9f77d4d61e5ae90455cdb68d4ca7acde515ec45452","sha512":"b375e56e71acd3ce5d17a871da7031e6002d302f8da629193b621c9449a1d38b7885396fbd6f60029f667fb69df957cfe03871cd9db59a672e4392f1a5e797ee","ssdeep":"6144:E31iBQwGw1QMMlQrjQ9HS8cfmb9E0B3wX0Z4zaImKwbnI:vPVeEjIjZ4ZmQ","tlshash":"ea941acc73d670629392b674903f018bb67a69a2f84cc895f28adcd42d3469a5173f7c","first_seen":"2026-09-24T09:59:50.316721Z","last_seen":"2026-09-24T09:59:50.316721Z","times_seen":1,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":58,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lora/v37/0QI6MX1D_JOuGQbT0gvTJPa787weuxJPkq1umA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:56.883Z","timestamp":1790243936883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/lora/v37/0QI6MX1D_JOuGQbT0gvTJPa787weuxJPkq1umA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://salonkosmetycznybialystok.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12016\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:08:25 GMT\r\nexpires: Tue, 21 Sep 2027 16:08:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 17:08:06 GMT\r\ncontent-type: font/woff2\r\nage: 237031\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12016,"size_decoded":12829,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12016, version 1.0","md5":"6b6382ec0af701958e3991d8a3590947","sha1":"257bfd4a0511418212577d7123ba8f097d64e567","sha256":"525551030c504c0eb42d71b48ce10027e4431bd405d6cd04c468a535ce8d961b","sha512":"95fc3253e73868ec509c418383614f388b6476e72e3abf45cfb771654644027ca5afd769269d5d4973eb5da045457b64ff40ce91941c38787cb0eb966f3bbdcb","ssdeep":"192:zdHhwMZXx24Q7fCsOYTC3TNfKrh6k15T/Q6wNG5xna27gvF3A4c16OHkAO5077v4:zdpBcp7D5CjtQhJchNGamgvNA4c16JAe","tlshash":"1242d036763ceb08ca0b4d2e600788befb78a917670510620fd7abc0940cbde45e5246","first_seen":"2025-09-16T18:29:47.554399Z","last_seen":"2026-09-24T09:59:50.318187Z","times_seen":202,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":60,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lora%3A400%7CLato%3A400\u0026display=fallback\u0026subset=latin-ext\u0026ver=5.2.28","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:56.588Z","timestamp":1790243936588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css?family=Lora%3A400%7CLato%3A400\u0026display=fallback\u0026subset=latin-ext\u0026ver=5.2.28 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salonkosmetycznybialystok.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 24 Sep 2026 09:58:56 GMT\r\ndate: Thu, 24 Sep 2026 09:58:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5612,"size_decoded":2181,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"72b50d648fac4b8a90bdfda98842b6b0","sha1":"013bf0620b010155dc4b602d411d99d4b846a995","sha256":"2ff3a99cfc8cb88d4dc2ed7b18276b7b1836e85713905a91768977adf61887c9","sha512":"d25fea61b9ce3023d57a2535012ba4da2ff2315f7da33b0453d1c3907705dd842f1cce0b250338f419949ade378d9331c5f7d8f7e12e911149971d371eb41b1f","ssdeep":"96:HOEPZpJc+u7OEPqNFOEP0yOEP3FZpOEPly+aZjzBrDOEPmubqGIFuV4xOEPcOEPI:N7IG04DlqF5bqGIwV4j+AKA","tlshash":"e3c140a0041394089b5718d623cebf32ee4e52157044e135abfd5b8bfd8ecb6a3a4b1c","first_seen":"2026-05-17T04:55:59.396425Z","last_seen":"2026-09-24T09:59:50.318796Z","times_seen":4,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":25,"connect":28,"send":0,"wait":104,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/wp-content/uploads/2017/04/plansza_informacyjna_PFR_pion_srodkowa-400x400.jpg","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:56.607Z","timestamp":1790243936607,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salonkosmetycznybialystok.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:52 GMT","end":"Mon, 26 Oct 2026 14:37:16 GMT"},"fingerprint":{"sha1":"C6:29:45:C0:C0:BC:B4:11:2A:F8:36:F1:AB:3C:99:3A:2E:8B:A1:6A","sha256":"0A:A3:A5:2B:B0:84:19:C6:22:7C:D0:C2:27:5D:57:C7:38:87:7D:0B:B9:93:C3:C7:CD:26:04:76:DD:73:3C:3C"}}},"request":{"raw":"GET /wp-content/uploads/2017/04/plansza_informacyjna_PFR_pion_srodkowa-400x400.jpg HTTP/1.1\r\nHost: salonkosmetycznybialystok.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salonkosmetycznybialystok.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 09:58:56 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-encoding: zstd\r\ncf-ray: a400eefbca461ae6-OSL\r\ncf-cache-status: BYPASS\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YCfjN7yff2g7IWdBPRzts7KYULPvwha2XfsDSux%2FgP4%2FEmq%2BlSsgA5lJ9hbrQOsDdRN0agNs6bqCT06SuQ7ur%2BE0QCAtO0vV18EULnnUz7J6Zvsf3rWPFERJy8s7vTsycTk2QV4JglKxK%2BlcWEjnzUk%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":814,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"5290b8512262fffca20df1dbf2a674a4","sha1":"9c1add44d731073281ae82abbbb2b7687a93b1bb","sha256":"ab768623070128ccef048c88def86155dbe776c3d8db423cc8fa89432673d8a8","sha512":"c9e1331164ac3e50e576bae5470a5f575e1f3c47016a68d8639e54bbcf3448803294005cec80a7c4d06d04b109bfc21bbbb6eb857ac789ddf59dec9f31276b1c","ssdeep":"","tlshash":"51d0979fe1ae82084253b3c07ed127c0b402937a78c206cc9b86e043d0042fdc00904c","first_seen":"2025-12-13T12:55:08.223293Z","last_seen":"2026-09-24T11:34:04.864176Z","times_seen":1076,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"salonkosmetycznybialystok.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16667339630\u0026cx=c\u0026gtm=4e69n0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:57.148Z","timestamp":1790243937148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtag/destination?id=AW-16667339630\u0026cx=c\u0026gtm=4e69n0h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salonkosmetycznybialystok.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 24 Sep 2026 09:58:57 GMT\r\nexpires: Thu, 24 Sep 2026 09:58:57 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:71:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:71:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:71:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:71:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 149346\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":426416,"size_decoded":150335,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5116)","md5":"f8ff9839d3638fe755aa2367bad61c8e","sha1":"ebb753e3e083a3d89d3684d22f0e7b9a75e0c8d2","sha256":"e6a8291e9c8d3318c5657e59fb61324fdd17256b7a55666e4f37160bf9370dfa","sha512":"6a8f994ee89140dbc8dd9913a55e8ff62e67f8e5847ef2eb88b076f3f5b64a6bb1f9016f22f152509edb371d3035545c14495486a719ac9cc1e301aeb36b5b8c","ssdeep":"6144:A31iBQwnw1QMMlQrjQ9HS8cfmb9E0B3wX0O4zaIrunI:bPweEjIjO4Zrt","tlshash":"5a941acc73d674629393b674903f018bb27a69a2b84cc894f28adcd42d7469a5173f7c","first_seen":"2026-09-24T09:59:50.319492Z","last_seen":"2026-09-24T09:59:50.319492Z","times_seen":1,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/wp-content/uploads/2019/07/pierwsza-wizyta.jpg","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:57.224Z","timestamp":1790243937224,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salonkosmetycznybialystok.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:52 GMT","end":"Mon, 26 Oct 2026 14:37:16 GMT"},"fingerprint":{"sha1":"C6:29:45:C0:C0:BC:B4:11:2A:F8:36:F1:AB:3C:99:3A:2E:8B:A1:6A","sha256":"0A:A3:A5:2B:B0:84:19:C6:22:7C:D0:C2:27:5D:57:C7:38:87:7D:0B:B9:93:C3:C7:CD:26:04:76:DD:73:3C:3C"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/pierwsza-wizyta.jpg HTTP/1.1\r\nHost: salonkosmetycznybialystok.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salonkosmetycznybialystok.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 09:58:57 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-encoding: zstd\r\ncf-ray: a400eeffaa9b1ae6-OSL\r\ncf-cache-status: BYPASS\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IqcU1MNCCE4t0DpG5freY72E74F7g3bhwDOOhAJ4r3sXF1juu%2FaIPA3E3FD9Y51mR7Tttx1I3V7KstExBcWpfcRtbf%2FdlIRBSLsErRacox7I2JSpZ5G73sjcmAWGRpidaZqW7ljMKBTijpRwhDzC91I%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":808,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"5290b8512262fffca20df1dbf2a674a4","sha1":"9c1add44d731073281ae82abbbb2b7687a93b1bb","sha256":"ab768623070128ccef048c88def86155dbe776c3d8db423cc8fa89432673d8a8","sha512":"c9e1331164ac3e50e576bae5470a5f575e1f3c47016a68d8639e54bbcf3448803294005cec80a7c4d06d04b109bfc21bbbb6eb857ac789ddf59dec9f31276b1c","ssdeep":"","tlshash":"51d0979fe1ae82084253b3c07ed127c0b402937a78c206cc9b86e043d0042fdc00904c","first_seen":"2025-12-13T12:55:08.223293Z","last_seen":"2026-09-24T11:34:04.864176Z","times_seen":1076,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"salonkosmetycznybialystok.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/wp-content/uploads/2017/04/background-footer.jpg","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:57.225Z","timestamp":1790243937225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salonkosmetycznybialystok.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:52 GMT","end":"Mon, 26 Oct 2026 14:37:16 GMT"},"fingerprint":{"sha1":"C6:29:45:C0:C0:BC:B4:11:2A:F8:36:F1:AB:3C:99:3A:2E:8B:A1:6A","sha256":"0A:A3:A5:2B:B0:84:19:C6:22:7C:D0:C2:27:5D:57:C7:38:87:7D:0B:B9:93:C3:C7:CD:26:04:76:DD:73:3C:3C"}}},"request":{"raw":"GET /wp-content/uploads/2017/04/background-footer.jpg HTTP/1.1\r\nHost: salonkosmetycznybialystok.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salonkosmetycznybialystok.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 09:58:57 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-encoding: zstd\r\ncf-ray: a400eeffaa9c1ae6-OSL\r\ncf-cache-status: BYPASS\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2BTcYycXqrdY5kK60Gj6i4hBOa9leLoYNhZ0wFJrYoUtEheNv7NEvt3xsiYf4krTqQqeSYC2HRElNN46tj8D%2Fde0ehTO%2F8Nx5ccA8xBxRvurecE%2F6PJp7IqA9s8kojbtGDwQ9PUo0yGiSUMC9XecORs%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":812,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"5290b8512262fffca20df1dbf2a674a4","sha1":"9c1add44d731073281ae82abbbb2b7687a93b1bb","sha256":"ab768623070128ccef048c88def86155dbe776c3d8db423cc8fa89432673d8a8","sha512":"c9e1331164ac3e50e576bae5470a5f575e1f3c47016a68d8639e54bbcf3448803294005cec80a7c4d06d04b109bfc21bbbb6eb857ac789ddf59dec9f31276b1c","ssdeep":"","tlshash":"51d0979fe1ae82084253b3c07ed127c0b402937a78c206cc9b86e043d0042fdc00904c","first_seen":"2025-12-13T12:55:08.223293Z","last_seen":"2026-09-24T11:34:04.864176Z","times_seen":1076,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"salonkosmetycznybialystok.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/wp-content/themes/Zephyr/fonts/fa-brands-400.woff2","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:56.886Z","timestamp":1790243936886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salonkosmetycznybialystok.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:52 GMT","end":"Mon, 26 Oct 2026 14:37:16 GMT"},"fingerprint":{"sha1":"C6:29:45:C0:C0:BC:B4:11:2A:F8:36:F1:AB:3C:99:3A:2E:8B:A1:6A","sha256":"0A:A3:A5:2B:B0:84:19:C6:22:7C:D0:C2:27:5D:57:C7:38:87:7D:0B:B9:93:C3:C7:CD:26:04:76:DD:73:3C:3C"}}},"request":{"raw":"GET /wp-content/themes/Zephyr/fonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: salonkosmetycznybialystok.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salonkosmetycznybialystok.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ndate: Thu, 24 Sep 2026 09:58:56 GMT\r\ncontent-type: application/x-font-woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a400eefd8a5d1ae6-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kJRrZRUOWqe78mGWxTtvNiHU4WBz6yhP%2BN2%2FN1zktuwtIINkTkEbjUaT8VliOeueKd0WrMFCt44tUwMyPrsJE5S%2FkapQun9Yq47FiDcoW9afSbm5hYZCfbEdwcDHH9E9MjyVLT5mZTroOzqy8Zy1%2FTM%3D\"}]}\r\nage: 123\r\ncache-control: max-age=31536000\r\netag: W/\"cec7a10-119b0-585c440df1800-gzip\"\r\npriority: u=3,i=?0\r\nexpires: Fri, 24 Sep 2027 09:56:52 GMT\r\nlast-modified: Fri, 05 Apr 2019 08:27:12 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72112,"size_decoded":72998,"mime_type":"application/x-font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72112, version 329.31064","md5":"4b115e1153a9ea339d6a0bb284cc8ed3","sha1":"f988b2efe9434b0af28943708d33dd3afad9a5ba","sha256":"d5f471476e1636e23b00991ae8a85d3703ada55bc6d6162472a28aa94fa64d4e","sha512":"c7a8e9341f5194d2c8dcaadaabb42d6b025433e79b5bfef680f06d0d8e3674e3c00b1a669207d4809e202e24ad0f7ffe702a674be32ea01862a09eb0ea21baad","ssdeep":"1536:bF9XCilr6kyJsCue+7zQhNFepcW90fAUQiyPEM7XTVDW:pZBlmkyuW+YfFepcW903W/7TVy","tlshash":"216302eaf6a0885746db10ac317941dba2db2db91e92d4e00187968ddb130c2fc16fb7","first_seen":"2023-04-11T01:51:17Z","last_seen":"2026-09-24T09:59:50.321085Z","times_seen":2390,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"salonkosmetycznybialystok.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-24T09:58:55.410Z","timestamp":1790243935410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salonkosmetycznybialystok.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:52 GMT","end":"Mon, 26 Oct 2026 14:37:16 GMT"},"fingerprint":{"sha1":"C6:29:45:C0:C0:BC:B4:11:2A:F8:36:F1:AB:3C:99:3A:2E:8B:A1:6A","sha256":"0A:A3:A5:2B:B0:84:19:C6:22:7C:D0:C2:27:5D:57:C7:38:87:7D:0B:B9:93:C3:C7:CD:26:04:76:DD:73:3C:3C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: salonkosmetycznybialystok.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=is7N9HzsXfUhm%2BlxPSXk1ATa5ojCeThuDr1QPfzCF41TfwptOSZ4J3e571aT46OeMqOagCz1kXBdpr3d2zLrXQD1PohstneuaWO0dqId7%2FSR0lTrvPs4Pd9raN11%2FXIJCDNfjOygmPkf8c5Jtl0MASs%3D\"}]}\r\ndate: Thu, 24 Sep 2026 09:58:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: zstd\r\ncf-ray: a400eef4d9b31ae6-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: max-age=7200\r\npriority: u=0,i\r\nexpires: Thu, 24 Sep 2026 11:58:55 GMT\r\nlink: \u003chttps://salonkosmetycznybialystok.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://salonkosmetycznybialystok.com/\u003e; rel=shortlink\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":1559950,"size_decoded":219597,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (36162), with CRLF, LF line terminators","md5":"1a3d72973e5a66376adec91f252cc126","sha1":"dcfcbc9c916b9cf84472ac21352dda50f82b2c57","sha256":"0612d80322438ab47b3f1e3d57b5b1c71ff791f39532fda62dd76d3fe81c321f","sha512":"96cd69736f1d7f7c741e3613b7ee0d55a0017460892d0db93407355686c1e946420180ae2d6870f762fc77fb2b70861d31a4b8ccfae130f505ca24a96103e57e","ssdeep":"6144:jaOLuO0GRXJTLcq9J1hznOC9hsjr7qc26pACUH/vIZJ3KdGfQPB/VK1wsUzcVC6G:jaOLBxTLcq9J1dnOC9Y526vbDOn","tlshash":"0a25f9b1f46414cf2373c97fb6e0ba29691781a2d4c20feaf056d90c4bca15e256773a","first_seen":"2026-09-24T09:57:48.445374Z","last_seen":"2026-09-24T09:59:50.321723Z","times_seen":2,"resource_available":true,"data":null}},"time_used":851,"timings":{"blocked":0,"dns":61,"connect":19,"send":0,"wait":767,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"salonkosmetycznybialystok.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cookieyes.com/client_data/0b51a9e7c8193e2567f4ec21/script.js","fqdn":"cdn-cookieyes.com","domain":"cdn-cookieyes.com","tld":"com"},"ip":{"addr":"104.18.19.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:56.590Z","timestamp":1790243936590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-cookieyes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 02:58:25 GMT","end":"Mon, 30 Nov 2026 03:58:12 GMT"},"fingerprint":{"sha1":"F5:3A:BD:D5:13:C0:EF:4B:D2:E9:56:AB:13:62:FC:DE:57:44:74:31","sha256":"08:1B:49:E6:CF:61:D9:22:DE:23:7E:00:39:FA:EE:76:28:49:BC:F6:3F:7C:9B:06:BE:2C:26:D2:5B:B6:A3:D8"}}},"request":{"raw":"GET /client_data/0b51a9e7c8193e2567f4ec21/script.js HTTP/1.1\r\nHost: cdn-cookieyes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salonkosmetycznybialystok.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 24 Sep 2026 09:58:56 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-amz-id-2: XZlA6Zyvhis3PgYf3gbn/J5abuHG7LPIvoHRVTvZavy+YGYc+7phbujUOHs8Ct/SBuXfXWSLwUi4sHU7UxgDZUaoswlhJJxT\r\nx-amz-request-id: EDR6WNP4QM1J4RN8\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 07 Aug 2025 06:05:05 GMT\r\netag: \"a18055d3233126c5c73c94aa3bc5e6a9\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=0, must-revalidate, s-maxage=604800, proxy-revalidate\r\nage: 175710\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\ncf-ray: a400eefc2de8b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98989,"size_decoded":34979,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49982), with NEL line terminators","md5":"a18055d3233126c5c73c94aa3bc5e6a9","sha1":"a33fc99ae2a850055555422185cbc16b9da44e6c","sha256":"ed7a34dbc52e0a199a083eaff22c1679efbdad489290bf0f933a324b4757d510","sha512":"d7a846f986b0cc73c03809f85839e8e93d0cf756cd5e13204cda1135310133699069bbdaa9057b8d6e16f639d342a4c653a2fa8a1130718516ca75b9042d5255","ssdeep":"1536:1LGWh7/MnhKnuD7QWfQARJJb8J/LpsMzCTNmmJI6TWtgjnew:1T7/MhKunQoQRBsnew","tlshash":"42a3b58cfad1f0a517e360a4806f950bf17b2a69740d94d1eaa2c5d1ac78e8f4037e7d","first_seen":"2026-09-24T09:57:48.448795Z","last_seen":"2026-09-24T09:59:50.322457Z","times_seen":2,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":64,"connect":1,"send":0,"wait":14,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/wp-content/uploads/2017/04/background-footer.jpg","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:56.852Z","timestamp":1790243936852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salonkosmetycznybialystok.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:52 GMT","end":"Mon, 26 Oct 2026 14:37:16 GMT"},"fingerprint":{"sha1":"C6:29:45:C0:C0:BC:B4:11:2A:F8:36:F1:AB:3C:99:3A:2E:8B:A1:6A","sha256":"0A:A3:A5:2B:B0:84:19:C6:22:7C:D0:C2:27:5D:57:C7:38:87:7D:0B:B9:93:C3:C7:CD:26:04:76:DD:73:3C:3C"}}},"request":{"raw":"GET /wp-content/uploads/2017/04/background-footer.jpg HTTP/1.1\r\nHost: salonkosmetycznybialystok.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salonkosmetycznybialystok.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 09:58:57 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-encoding: zstd\r\ncf-ray: a400eefd5a5a1ae6-OSL\r\ncf-cache-status: BYPASS\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MVqigE1awfymIK3J8sLnEjyl0vVttQI89iQeq8t6gFz0MiTjyaVaP47wBXERftUq6lpdctmFX5jZL7k1%2BDNKh3e9apEFCmDUeIai%2B3oc8TdtoLYFzu%2FUB35XMply%2F%2BzTVQ7AafhawJkvpMiPhUwTM6Q%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":814,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"5290b8512262fffca20df1dbf2a674a4","sha1":"9c1add44d731073281ae82abbbb2b7687a93b1bb","sha256":"ab768623070128ccef048c88def86155dbe776c3d8db423cc8fa89432673d8a8","sha512":"c9e1331164ac3e50e576bae5470a5f575e1f3c47016a68d8639e54bbcf3448803294005cec80a7c4d06d04b109bfc21bbbb6eb857ac789ddf59dec9f31276b1c","ssdeep":"","tlshash":"51d0979fe1ae82084253b3c07ed127c0b402937a78c206cc9b86e043d0042fdc00904c","first_seen":"2025-12-13T12:55:08.223293Z","last_seen":"2026-09-24T11:34:04.864176Z","times_seen":1076,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"salonkosmetycznybialystok.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjxAwXjeu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:56.880Z","timestamp":1790243936880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjxAwXjeu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://salonkosmetycznybialystok.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 5612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:01:34 GMT\r\nexpires: Tue, 21 Sep 2027 16:01:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:42 GMT\r\ncontent-type: font/woff2\r\nage: 237442\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5612,"size_decoded":6424,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5612, version 1.0","md5":"633f8feda2188d767d2396652da17377","sha1":"d35cc70037f82ab61d86f2c4d80685a474821d45","sha256":"8b9fc9737043f88c1a9a7195c27a239bd329cc33d928ffb67736c61ae7a1dbbd","sha512":"edadc35473adc7d3d2b6c0bc04789dc78c7f38c0eccac6f08625738d5c8cfa9203c1d9ef2ee6ce721fabc5a4eba41cd19f47e56dc85ff3bc1f7f0ede2ec5ba0b","ssdeep":"96:iD0G8mpQLE+J8uftoCUdUZ/OGjfSg7uov39XTr9a8dBmhPk7jJ5lpqaAjiv/8qBA:7xXLZ8uVoCUdUFOGjJ7Pv39Pw0MiZ5cB","tlshash":"23c1af36b54e1d4bf74201b8137b823e41c70c621637356dbb16aa9418dcf4161371e7","first_seen":"2025-09-17T03:45:02.002945Z","last_seen":"2026-09-24T10:05:31.280369Z","times_seen":5652,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":42,"dns":1,"connect":0,"send":0,"wait":58,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lora/v37/0QI6MX1D_JOuGQbT0gvTJPa787weuxJBkq0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:56.882Z","timestamp":1790243936882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/lora/v37/0QI6MX1D_JOuGQbT0gvTJPa787weuxJBkq0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://salonkosmetycznybialystok.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21148\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:58:32 GMT\r\nexpires: Tue, 21 Sep 2027 15:58:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 17:07:45 GMT\r\ncontent-type: font/woff2\r\nage: 237624\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21148,"size_decoded":21961,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21148, version 1.0","md5":"5d5a586a9741d0050f687f4a1039b421","sha1":"a8b5e205b4bd4eac321247a2188a27a24b9a2860","sha256":"ac079950fd9885261c0f73d9e87233f31b5427333ce0eb20e26c119458493c40","sha512":"c17375f370f106e65c29e2c47f6a61cfd899dca801f7eaec3d96b292a4c9cd34b643e2455cbd8f2081225e0871a4f8143b8146a0d2cb4a750dbeefb5b3f511e3","ssdeep":"384:DStApsoS9xPMxpaQcYL2XI1Hv24p5OjYQM4UP3I+iu:DxC9NM6uyIlUYQFUg3u","tlshash":"ac92f20bc1b8b4d6c5dd65a8f14f66514a58032e3bef16f58d2fd025e5b4f2d11a3630","first_seen":"2025-09-14T18:33:50.003599Z","last_seen":"2026-09-24T09:59:50.323904Z","times_seen":3561,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":33,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/wp-content/uploads/2019/07/kim-jest-podolog2.jpg","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:57.223Z","timestamp":1790243937223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salonkosmetycznybialystok.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:52 GMT","end":"Mon, 26 Oct 2026 14:37:16 GMT"},"fingerprint":{"sha1":"C6:29:45:C0:C0:BC:B4:11:2A:F8:36:F1:AB:3C:99:3A:2E:8B:A1:6A","sha256":"0A:A3:A5:2B:B0:84:19:C6:22:7C:D0:C2:27:5D:57:C7:38:87:7D:0B:B9:93:C3:C7:CD:26:04:76:DD:73:3C:3C"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/kim-jest-podolog2.jpg HTTP/1.1\r\nHost: salonkosmetycznybialystok.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salonkosmetycznybialystok.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 09:58:57 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-encoding: zstd\r\ncf-ray: a400eeffaa9a1ae6-OSL\r\ncf-cache-status: BYPASS\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ck0Yg0yifoCBrmN7IxgW%2FqXZsAFwa1ESJtQpVEz5C5bPH5c3SBe4Ux1ScnCHcUWZrGseIDftUOduQUcGs%2Ba40AvOxD2v2k4w3jcr89IYa%2BYPyoCalTuBV8xuihzockHqQIfB2MPfxDhxvtgrMVFWRaQ%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":810,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"5290b8512262fffca20df1dbf2a674a4","sha1":"9c1add44d731073281ae82abbbb2b7687a93b1bb","sha256":"ab768623070128ccef048c88def86155dbe776c3d8db423cc8fa89432673d8a8","sha512":"c9e1331164ac3e50e576bae5470a5f575e1f3c47016a68d8639e54bbcf3448803294005cec80a7c4d06d04b109bfc21bbbb6eb857ac789ddf59dec9f31276b1c","ssdeep":"","tlshash":"51d0979fe1ae82084253b3c07ed127c0b402937a78c206cc9b86e043d0042fdc00904c","first_seen":"2025-12-13T12:55:08.223293Z","last_seen":"2026-09-24T11:34:04.864176Z","times_seen":1076,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"salonkosmetycznybialystok.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-131496492-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:56.591Z","timestamp":1790243936591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtag/js?id=UA-131496492-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salonkosmetycznybialystok.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 24 Sep 2026 09:58:56 GMT\r\nexpires: Thu, 24 Sep 2026 09:58:56 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 24 Sep 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 135042\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":382112,"size_decoded":135692,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5086)","md5":"47f5e742b7d7b42b1913d9871f833625","sha1":"83a99af459f0b22b9c6c3678ead4f155d4014092","sha256":"0bae97bc564ace9f8bef7014e8af76422ba0303ac204b6d61d98e70c9451637a","sha512":"c651d994c586b2336509362b57c52f5b4abb779e6090c5e7518b43f4b108d1ba5a506717a2a23b3d07842efc17da2b68779fc5e1b5c886acc24734ea8b114542","ssdeep":"6144:Cp1mivFwkl6ZRqsdcc1abxE/B3pd5ovLWrSH9G5m:RB46JoSrEJ","tlshash":"c38419ccb3d6702283a3b574903f018bb27a6d92b84cc898f286d9d42e7465a5177f7c","first_seen":"2026-09-24T09:57:48.442637Z","last_seen":"2026-09-24T09:59:50.324516Z","times_seen":2,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":62,"connect":16,"send":0,"wait":44,"receive":45,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/wp-content/uploads/2019/07/podologia-bg4.jpg","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:56.847Z","timestamp":1790243936847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salonkosmetycznybialystok.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:52 GMT","end":"Mon, 26 Oct 2026 14:37:16 GMT"},"fingerprint":{"sha1":"C6:29:45:C0:C0:BC:B4:11:2A:F8:36:F1:AB:3C:99:3A:2E:8B:A1:6A","sha256":"0A:A3:A5:2B:B0:84:19:C6:22:7C:D0:C2:27:5D:57:C7:38:87:7D:0B:B9:93:C3:C7:CD:26:04:76:DD:73:3C:3C"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/podologia-bg4.jpg HTTP/1.1\r\nHost: salonkosmetycznybialystok.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salonkosmetycznybialystok.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 09:58:57 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-encoding: zstd\r\ncf-ray: a400eefd4a571ae6-OSL\r\ncf-cache-status: BYPASS\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BTx%2FsDdjHf%2Fau75P4gLe%2F3D4cWJphoPuOe0AFrdikMxCo6uimwlulYD0Sa%2FPDX314JoHGtREq5w3HmOYMjPmC9GI2Cuhe07J5GE%2Fssw4RqDw8HMCGe3kBFJg1CWINsQZBb0fjNdT6nJcEn%2BBjpAt1%2BA%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":818,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"5290b8512262fffca20df1dbf2a674a4","sha1":"9c1add44d731073281ae82abbbb2b7687a93b1bb","sha256":"ab768623070128ccef048c88def86155dbe776c3d8db423cc8fa89432673d8a8","sha512":"c9e1331164ac3e50e576bae5470a5f575e1f3c47016a68d8639e54bbcf3448803294005cec80a7c4d06d04b109bfc21bbbb6eb857ac789ddf59dec9f31276b1c","ssdeep":"","tlshash":"51d0979fe1ae82084253b3c07ed127c0b402937a78c206cc9b86e043d0042fdc00904c","first_seen":"2025-12-13T12:55:08.223293Z","last_seen":"2026-09-24T11:34:04.864176Z","times_seen":1076,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"salonkosmetycznybialystok.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/wp-content/uploads/2019/07/pierwsza-wizyta.jpg","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:56.851Z","timestamp":1790243936851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salonkosmetycznybialystok.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:52 GMT","end":"Mon, 26 Oct 2026 14:37:16 GMT"},"fingerprint":{"sha1":"C6:29:45:C0:C0:BC:B4:11:2A:F8:36:F1:AB:3C:99:3A:2E:8B:A1:6A","sha256":"0A:A3:A5:2B:B0:84:19:C6:22:7C:D0:C2:27:5D:57:C7:38:87:7D:0B:B9:93:C3:C7:CD:26:04:76:DD:73:3C:3C"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/pierwsza-wizyta.jpg HTTP/1.1\r\nHost: salonkosmetycznybialystok.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salonkosmetycznybialystok.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 09:58:56 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-encoding: zstd\r\ncf-ray: a400eefd5a591ae6-OSL\r\ncf-cache-status: BYPASS\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hayN0RRGX7MUHprSl8XTsew%2BsR5lmay%2BI%2BcWhiSX%2FOpggj40q3k2IQ3g3tykGADO2cmJByQzhNzbn2ZFHJPO9uzDA0uy8o3ceEI7f92EvfKc%2FSeZIm5z1nDrvSelp65%2B1JuBf2XqsG1o6NhHex5Kv%2Fw%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":818,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"5290b8512262fffca20df1dbf2a674a4","sha1":"9c1add44d731073281ae82abbbb2b7687a93b1bb","sha256":"ab768623070128ccef048c88def86155dbe776c3d8db423cc8fa89432673d8a8","sha512":"c9e1331164ac3e50e576bae5470a5f575e1f3c47016a68d8639e54bbcf3448803294005cec80a7c4d06d04b109bfc21bbbb6eb857ac789ddf59dec9f31276b1c","ssdeep":"","tlshash":"51d0979fe1ae82084253b3c07ed127c0b402937a78c206cc9b86e043d0042fdc00904c","first_seen":"2025-12-13T12:55:08.223293Z","last_seen":"2026-09-24T11:34:04.864176Z","times_seen":1076,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"salonkosmetycznybialystok.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:56.879Z","timestamp":1790243936879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://salonkosmetycznybialystok.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:30 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nage: 237986\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":24393,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-09-24T12:29:27.239647Z","times_seen":269916,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":2,"connect":45,"send":0,"wait":31,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/wp-content/themes/Zephyr/fonts/fa-solid-900.woff2","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:56.885Z","timestamp":1790243936885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salonkosmetycznybialystok.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:52 GMT","end":"Mon, 26 Oct 2026 14:37:16 GMT"},"fingerprint":{"sha1":"C6:29:45:C0:C0:BC:B4:11:2A:F8:36:F1:AB:3C:99:3A:2E:8B:A1:6A","sha256":"0A:A3:A5:2B:B0:84:19:C6:22:7C:D0:C2:27:5D:57:C7:38:87:7D:0B:B9:93:C3:C7:CD:26:04:76:DD:73:3C:3C"}}},"request":{"raw":"GET /wp-content/themes/Zephyr/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: salonkosmetycznybialystok.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salonkosmetycznybialystok.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ndate: Thu, 24 Sep 2026 09:58:56 GMT\r\ncontent-type: application/x-font-woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a400eefd8a5c1ae6-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FBPnw7rCsMY%2B4eJb1MC2G1z04JvAl7SbrKRYM%2BEy7QPjAmX61a4%2Fvrfgh%2BIM8D4LotAjnRsd9dqvud9qUdiVurm5WFtZQtU4wMQ9TKw1oPHixok%2BumM8AnzNp9KlZhqBRwYc43DsDBVO8CHwWpLmaCU%3D\"}]}\r\nage: 123\r\ncache-control: max-age=31536000\r\netag: W/\"cec7a14-1226c-585c440df1800-gzip\"\r\npriority: u=3,i=?0\r\nexpires: Fri, 24 Sep 2027 09:56:52 GMT\r\nlast-modified: Fri, 05 Apr 2019 08:27:12 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74348,"size_decoded":75238,"mime_type":"application/x-font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74348, version 329.31064","md5":"462806316fea535a6a57651bc2b000b0","sha1":"80644191098f863f25be27841c0d92c452cf2327","sha256":"4f9ee3d8f6e621642979e6a8f7e75c57cb9da34918cc08a38abfe178dbae1dd2","sha512":"1765952f3490a3b063388c3258bf2ed0fce4854ed7fc6fc5937ec3d0cedb1368fa24a87ebd2dd62e4ba0f6244b648cbf47044381969252b62a2677a39c6b0b6f","ssdeep":"1536:gkdThXppBpYl2zoSgIfQGgAPlGqIfgCm86b2EGsX8wDT:gkzPYKoPI4lAPg9fg72ERT3","tlshash":"007312208918f9765bb7e0be5abd05a57cb1c4abc6af40343496abc46fcf93039c7550","first_seen":"2023-04-06T01:20:04Z","last_seen":"2026-09-24T09:59:50.326185Z","times_seen":5910,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"salonkosmetycznybialystok.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/wp-content/cache/autoptimize/js/autoptimize_c42c2d4bf6bc98e87e6e9e2ac4d420c1.js","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:56.603Z","timestamp":1790243936603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salonkosmetycznybialystok.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:52 GMT","end":"Mon, 26 Oct 2026 14:37:16 GMT"},"fingerprint":{"sha1":"C6:29:45:C0:C0:BC:B4:11:2A:F8:36:F1:AB:3C:99:3A:2E:8B:A1:6A","sha256":"0A:A3:A5:2B:B0:84:19:C6:22:7C:D0:C2:27:5D:57:C7:38:87:7D:0B:B9:93:C3:C7:CD:26:04:76:DD:73:3C:3C"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_c42c2d4bf6bc98e87e6e9e2ac4d420c1.js HTTP/1.1\r\nHost: salonkosmetycznybialystok.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salonkosmetycznybialystok.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 24 Sep 2026 09:58:56 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ws75qtRIqlcNx8GvJt9IIhcSuy%2B9jSum%2F0ZhUNfuaA8z6XWGd1y9%2BbI5Mtklw9K73GM5X5R%2B3fvraJhwZSmdAsy1fOEw8GLGizqgibyTc9b1e1tXVFalU12mXSKOMdLt7zXi8Hf4DHwN83Ob74Mu2Qo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a400eefbca431ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":642089,"size_decoded":170847,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"170ed5a523cb16244d5aabdb9aba0178","sha1":"66bb5f4942ca9aafd741e888ff18fee7272f6c29","sha256":"feae1ca6576c920f1a1af84cff695fdc57f069bfe8eb64cf7ef817a61c703b91","sha512":"4e5dc96b97d82bf79355658092c421d5549d30f9cfedfd91b23d1cb79a70cb98fe74cb7eca3d1a2f3248795295b3bc902089e75662dbe8e32527dcccb611768b","ssdeep":"12288:ykNI/shxhaaWxKVOtyGJ1Ws9qD4/+hESSBigKO:yII/shxhaaWxUO8G+hEvBig9","tlshash":"a4d42b4af20031a642fb61aa703f520eb237a576f502406cb17ad8f96d78d496237f7d","first_seen":"2026-09-24T09:57:48.443728Z","last_seen":"2026-09-24T09:59:50.326896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"salonkosmetycznybialystok.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/wp-content/uploads/2019/07/kim-jest-podolog2.jpg","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:56.850Z","timestamp":1790243936850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salonkosmetycznybialystok.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:52 GMT","end":"Mon, 26 Oct 2026 14:37:16 GMT"},"fingerprint":{"sha1":"C6:29:45:C0:C0:BC:B4:11:2A:F8:36:F1:AB:3C:99:3A:2E:8B:A1:6A","sha256":"0A:A3:A5:2B:B0:84:19:C6:22:7C:D0:C2:27:5D:57:C7:38:87:7D:0B:B9:93:C3:C7:CD:26:04:76:DD:73:3C:3C"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/kim-jest-podolog2.jpg HTTP/1.1\r\nHost: salonkosmetycznybialystok.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salonkosmetycznybialystok.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 09:58:57 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-encoding: zstd\r\ncf-ray: a400eefd4a581ae6-OSL\r\ncf-cache-status: BYPASS\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YLZx6Q0IKCXdNuVIQwpwhe95727ec%2FtWraySjBq9Ymwa5VzQmGiPTsXYb8uDL%2F5EncSNY8r8%2Fg64jd8MWDLJ3gVIVUHdz7P8iPR2L9W5jAlUI8Rny1p5QSxdDoZb4Bb2VZCk9NsdTUJx1bfB5%2FEEwx0%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":812,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"5290b8512262fffca20df1dbf2a674a4","sha1":"9c1add44d731073281ae82abbbb2b7687a93b1bb","sha256":"ab768623070128ccef048c88def86155dbe776c3d8db423cc8fa89432673d8a8","sha512":"c9e1331164ac3e50e576bae5470a5f575e1f3c47016a68d8639e54bbcf3448803294005cec80a7c4d06d04b109bfc21bbbb6eb857ac789ddf59dec9f31276b1c","ssdeep":"","tlshash":"51d0979fe1ae82084253b3c07ed127c0b402937a78c206cc9b86e043d0042fdc00904c","first_seen":"2025-12-13T12:55:08.223293Z","last_seen":"2026-09-24T11:34:04.864176Z","times_seen":1076,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"salonkosmetycznybialystok.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/wp-content/uploads/2017/09/profeet-standard.png","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:56.605Z","timestamp":1790243936605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salonkosmetycznybialystok.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:52 GMT","end":"Mon, 26 Oct 2026 14:37:16 GMT"},"fingerprint":{"sha1":"C6:29:45:C0:C0:BC:B4:11:2A:F8:36:F1:AB:3C:99:3A:2E:8B:A1:6A","sha256":"0A:A3:A5:2B:B0:84:19:C6:22:7C:D0:C2:27:5D:57:C7:38:87:7D:0B:B9:93:C3:C7:CD:26:04:76:DD:73:3C:3C"}}},"request":{"raw":"GET /wp-content/uploads/2017/09/profeet-standard.png HTTP/1.1\r\nHost: salonkosmetycznybialystok.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salonkosmetycznybialystok.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 09:58:56 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-encoding: zstd\r\ncf-ray: a400eefbca441ae6-OSL\r\ncf-cache-status: BYPASS\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lRoIf9oKLp3jD9Hf5U4F0DRO36dG9X8Vp6LGTMQlOGfE8nHXOTcIE0M5xTF%2BKv%2FbpnDG8MTp0qXbtYwcfWIX6xfxrof7fHsOQtwhnHRagWgWP5wKTkJb1mJsrancT%2FpC2pT5FOOhwyQsgSm%2FIdxtQVw%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":812,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"5290b8512262fffca20df1dbf2a674a4","sha1":"9c1add44d731073281ae82abbbb2b7687a93b1bb","sha256":"ab768623070128ccef048c88def86155dbe776c3d8db423cc8fa89432673d8a8","sha512":"c9e1331164ac3e50e576bae5470a5f575e1f3c47016a68d8639e54bbcf3448803294005cec80a7c4d06d04b109bfc21bbbb6eb857ac789ddf59dec9f31276b1c","ssdeep":"","tlshash":"51d0979fe1ae82084253b3c07ed127c0b402937a78c206cc9b86e043d0042fdc00904c","first_seen":"2025-12-13T12:55:08.223293Z","last_seen":"2026-09-24T11:34:04.864176Z","times_seen":1076,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"salonkosmetycznybialystok.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/wp-content/uploads/2019/07/logo-symbol1-min.png","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:56.606Z","timestamp":1790243936606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salonkosmetycznybialystok.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:52 GMT","end":"Mon, 26 Oct 2026 14:37:16 GMT"},"fingerprint":{"sha1":"C6:29:45:C0:C0:BC:B4:11:2A:F8:36:F1:AB:3C:99:3A:2E:8B:A1:6A","sha256":"0A:A3:A5:2B:B0:84:19:C6:22:7C:D0:C2:27:5D:57:C7:38:87:7D:0B:B9:93:C3:C7:CD:26:04:76:DD:73:3C:3C"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/logo-symbol1-min.png HTTP/1.1\r\nHost: salonkosmetycznybialystok.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salonkosmetycznybialystok.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 09:58:56 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-encoding: zstd\r\ncf-ray: a400eefbca451ae6-OSL\r\ncf-cache-status: BYPASS\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R%2Bd51TsPpkcjLXsGG1YlDBwrsIczw%2Fq1tvldAAXAvJPkvJuExp2W3fFVkK84giwK6TXKQ3J6tKA7psb53us0GkYhlTshgi%2BZBNwlBLbyjZtrSsVk4zrUmPrpoONA%2FiIuMGhgGrd1oeDvXwTAjm7Q3Y8%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":812,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"5290b8512262fffca20df1dbf2a674a4","sha1":"9c1add44d731073281ae82abbbb2b7687a93b1bb","sha256":"ab768623070128ccef048c88def86155dbe776c3d8db423cc8fa89432673d8a8","sha512":"c9e1331164ac3e50e576bae5470a5f575e1f3c47016a68d8639e54bbcf3448803294005cec80a7c4d06d04b109bfc21bbbb6eb857ac789ddf59dec9f31276b1c","ssdeep":"","tlshash":"51d0979fe1ae82084253b3c07ed127c0b402937a78c206cc9b86e043d0042fdc00904c","first_seen":"2025-12-13T12:55:08.223293Z","last_seen":"2026-09-24T11:34:04.864176Z","times_seen":1076,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"salonkosmetycznybialystok.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/wp-content/uploads/2020/12/profeet-favicon.png","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:57.122Z","timestamp":1790243937122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salonkosmetycznybialystok.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:52 GMT","end":"Mon, 26 Oct 2026 14:37:16 GMT"},"fingerprint":{"sha1":"C6:29:45:C0:C0:BC:B4:11:2A:F8:36:F1:AB:3C:99:3A:2E:8B:A1:6A","sha256":"0A:A3:A5:2B:B0:84:19:C6:22:7C:D0:C2:27:5D:57:C7:38:87:7D:0B:B9:93:C3:C7:CD:26:04:76:DD:73:3C:3C"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/profeet-favicon.png HTTP/1.1\r\nHost: salonkosmetycznybialystok.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salonkosmetycznybialystok.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 09:58:57 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-encoding: zstd\r\ncf-ray: a400eeff0a7b1ae6-OSL\r\ncf-cache-status: BYPASS\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IH%2BAXUm5cBrLvf6dmZvcMbkPQOR1OJj7BH6IGpJuqjGwBIiwBNEs%2Bh2AwjTQTwJ0DKuODH4tgl98LM43oP%2FrpeMehML%2BaMsDFCbKnr%2FLzX8Nj7UC2Cm6py0PsfGuBFzRGequqyQKm4IWa%2BQ0M%2BP%2FM%2Fc%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":825,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"5290b8512262fffca20df1dbf2a674a4","sha1":"9c1add44d731073281ae82abbbb2b7687a93b1bb","sha256":"ab768623070128ccef048c88def86155dbe776c3d8db423cc8fa89432673d8a8","sha512":"c9e1331164ac3e50e576bae5470a5f575e1f3c47016a68d8639e54bbcf3448803294005cec80a7c4d06d04b109bfc21bbbb6eb857ac789ddf59dec9f31276b1c","ssdeep":"","tlshash":"51d0979fe1ae82084253b3c07ed127c0b402937a78c206cc9b86e043d0042fdc00904c","first_seen":"2025-12-13T12:55:08.223293Z","last_seen":"2026-09-24T11:34:04.864176Z","times_seen":1076,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"salonkosmetycznybialystok.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salonkosmetycznybialystok.live/wp-content/uploads/2020/12/profeet-favicon.png","fqdn":"salonkosmetycznybialystok.live","domain":"salonkosmetycznybialystok.live","tld":"live"},"ip":{"addr":"104.21.57.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salonkosmetycznybialystok.live/","date":"2026-09-24T09:58:57.123Z","timestamp":1790243937123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salonkosmetycznybialystok.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:52 GMT","end":"Mon, 26 Oct 2026 14:37:16 GMT"},"fingerprint":{"sha1":"C6:29:45:C0:C0:BC:B4:11:2A:F8:36:F1:AB:3C:99:3A:2E:8B:A1:6A","sha256":"0A:A3:A5:2B:B0:84:19:C6:22:7C:D0:C2:27:5D:57:C7:38:87:7D:0B:B9:93:C3:C7:CD:26:04:76:DD:73:3C:3C"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/profeet-favicon.png HTTP/1.1\r\nHost: salonkosmetycznybialystok.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salonkosmetycznybialystok.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 24 Sep 2026 09:58:57 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-encoding: zstd\r\ncf-ray: a400eeff0a7c1ae6-OSL\r\ncf-cache-status: BYPASS\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LgOUws6oCKgURuemTRTGPlX%2BOLULmMTCekREzZ3OCAF2S4kIi%2BES5jie%2F5NtuLkn1mbXqE14HN0x61tYrCL4Uf7ELCP42IXLUiZsDNVh1gX71LMELrQy%2BBRnxeX44%2BHUo1EdE9if9CSTQfQXaeFhE4g%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":817,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"5290b8512262fffca20df1dbf2a674a4","sha1":"9c1add44d731073281ae82abbbb2b7687a93b1bb","sha256":"ab768623070128ccef048c88def86155dbe776c3d8db423cc8fa89432673d8a8","sha512":"c9e1331164ac3e50e576bae5470a5f575e1f3c47016a68d8639e54bbcf3448803294005cec80a7c4d06d04b109bfc21bbbb6eb857ac789ddf59dec9f31276b1c","ssdeep":"","tlshash":"51d0979fe1ae82084253b3c07ed127c0b402937a78c206cc9b86e043d0042fdc00904c","first_seen":"2025-12-13T12:55:08.223293Z","last_seen":"2026-09-24T11:34:04.864176Z","times_seen":1076,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-24","alert":"Phishing Block","trigger":"salonkosmetycznybialystok.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"salonkosmetycznybialystok.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}