{"report_id":"49f1cec9-13c9-4fa9-9185-1f3e853c1301","version":6,"status":"done","tags":[],"date":"2025-08-06T13:51:38Z","url":{"schema":"https","addr":"reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"http","addr":"reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"title":"reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response="},"submit":{"url":{"schema":"https","addr":"reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-10T13:51:38Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"reconodes.com","ip":{"addr":"104.21.94.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-06","domain_rank":0,"first_seen":"2025-07-26T22:54:07.578797Z","last_seen":"2025-07-26T22:54:30.465809Z","alert_count":0,"request_count":23,"received_data":17459,"sent_data":9358,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"reconodes.com/favicon.ico","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","date":"2025-08-06T13:51:18.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reconodes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 23:58:00 GMT","end":"Fri, 03 Oct 2025 00:56:18 GMT"},"fingerprint":{"sha1":"DA:6F:0F:D1:CF:92:54:AF:F5:02:04:E6:EB:3C:FA:19:B3:65:96:5C","sha256":"B3:46:38:C9:10:27:B8:ED:31:24:47:01:77:58:B3:62:C0:F0:7E:AB:62:4A:D3:6B:D2:32:48:EE:72:FC:D1:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reconodes.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Wed, 06 Aug 2025 13:51:18 GMT\r\ncontent-type: text/html\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KfUoxWoo9EEqT%2BCsj8kygAqqOnRQw1ElMJZVTaHYlmzJCmYIzirVvGIstiSI1trEfAXcPQw2V4SclstWOtUix1Ye%2Fvc5rU0GuzNawFtgTmQxyUX8f7E0HLuM1NYScRPV\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlocation: https://reconodes.com/favicon.ico\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 96af0219aa98568d-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3154\u0026min_rtt=1023\u0026rtt_var=2295\u0026sent=68\u0026recv=73\u0026lost=0\u0026retrans=0\u0026sent_bytes=17208\u0026recv_bytes=5856\u0026delivery_rate=851484\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=27975\u0026unsent_bytes=0\u0026cid=0a3cbae942da940d\u0026ts=493\u0026inflight_dur=111\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reconodes.com/favicon.ico","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","date":"2025-08-06T13:51:17.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reconodes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 23:58:00 GMT","end":"Fri, 03 Oct 2025 00:56:18 GMT"},"fingerprint":{"sha1":"DA:6F:0F:D1:CF:92:54:AF:F5:02:04:E6:EB:3C:FA:19:B3:65:96:5C","sha256":"B3:46:38:C9:10:27:B8:ED:31:24:47:01:77:58:B3:62:C0:F0:7E:AB:62:4A:D3:6B:D2:32:48:EE:72:FC:D1:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reconodes.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 06 Aug 2025 13:51:17 GMT\r\ncontent-type: text/html\r\nlocation: https://reconodes.com/favicon.ico\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GRa5Iy7PJXbiU6lxb6tA1H0%2F%2FGABKroSIbEyHfyLRCx4fSGnTCvJz4GV%2B44EeJNXfuERiElGpNEU%2FHxDnUsZoJJxDpThtwVm0vU%2B\"}]}\r\ncf-ray: 96af02171b9f56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reconodes.com/favicon.ico","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","date":"2025-08-06T13:51:17.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reconodes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 23:58:00 GMT","end":"Fri, 03 Oct 2025 00:56:18 GMT"},"fingerprint":{"sha1":"DA:6F:0F:D1:CF:92:54:AF:F5:02:04:E6:EB:3C:FA:19:B3:65:96:5C","sha256":"B3:46:38:C9:10:27:B8:ED:31:24:47:01:77:58:B3:62:C0:F0:7E:AB:62:4A:D3:6B:D2:32:48:EE:72:FC:D1:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reconodes.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 06 Aug 2025 13:51:17 GMT\r\ncontent-type: text/html\r\nlocation: https://reconodes.com/favicon.ico\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q5Eqzr4gWrLkYwm%2BBx3Fjc2%2BZpxTJoFtEJwoEY4%2BWfIQISiZzIwY5W7VHlmHMBWSLDmKrTvZyy0iosj1a8vvN0E2guD9uDH%2Fip6A\"}]}\r\ncf-ray: 96af02174bf456a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reconodes.com/favicon.ico","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","date":"2025-08-06T13:51:17.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reconodes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 23:58:00 GMT","end":"Fri, 03 Oct 2025 00:56:18 GMT"},"fingerprint":{"sha1":"DA:6F:0F:D1:CF:92:54:AF:F5:02:04:E6:EB:3C:FA:19:B3:65:96:5C","sha256":"B3:46:38:C9:10:27:B8:ED:31:24:47:01:77:58:B3:62:C0:F0:7E:AB:62:4A:D3:6B:D2:32:48:EE:72:FC:D1:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reconodes.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 06 Aug 2025 13:51:17 GMT\r\ncontent-type: text/html\r\nlocation: https://reconodes.com/favicon.ico\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QxEgLrFeDzGdUxDqAuEb%2BFEUk%2BIk5bK0n5%2Firri1%2F%2B%2Fc6sjvnzhAVybMWUaF1mv1pS8kiM%2FZ0nXz1G2x5AiidooIydJI%2BDYbPSfS\"}]}\r\ncf-ray: 96af02178c7956a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reconodes.com/favicon.ico","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","date":"2025-08-06T13:51:17.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reconodes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 23:58:00 GMT","end":"Fri, 03 Oct 2025 00:56:18 GMT"},"fingerprint":{"sha1":"DA:6F:0F:D1:CF:92:54:AF:F5:02:04:E6:EB:3C:FA:19:B3:65:96:5C","sha256":"B3:46:38:C9:10:27:B8:ED:31:24:47:01:77:58:B3:62:C0:F0:7E:AB:62:4A:D3:6B:D2:32:48:EE:72:FC:D1:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reconodes.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Wed, 06 Aug 2025 13:51:17 GMT\r\ncontent-type: text/html\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GLbZGy8ven0u2MuJ%2BbKV%2B7AcPUKqjdUMEO0yjpyy1H0QfsD8rnmyQvndtBN8FmgcHByur15QYYvzijGnSboX8HmR9oRLeU8rR8lLtqcPbqgMioOrl2QEZ%2Fla2EWRWARL\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlocation: https://reconodes.com/favicon.ico\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 96af0218fa88568d-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3774\u0026min_rtt=1023\u0026rtt_var=2262\u0026sent=57\u0026recv=65\u0026lost=0\u0026retrans=0\u0026sent_bytes=11440\u0026recv_bytes=4684\u0026delivery_rate=496659\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=22311\u0026unsent_bytes=0\u0026cid=0a3cbae942da940d\u0026ts=382\u0026inflight_dur=82\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reconodes.com/favicon.ico","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","date":"2025-08-06T13:51:17.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reconodes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 23:58:00 GMT","end":"Fri, 03 Oct 2025 00:56:18 GMT"},"fingerprint":{"sha1":"DA:6F:0F:D1:CF:92:54:AF:F5:02:04:E6:EB:3C:FA:19:B3:65:96:5C","sha256":"B3:46:38:C9:10:27:B8:ED:31:24:47:01:77:58:B3:62:C0:F0:7E:AB:62:4A:D3:6B:D2:32:48:EE:72:FC:D1:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reconodes.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Wed, 06 Aug 2025 13:51:17 GMT\r\ncontent-type: text/html\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8o9xsCr8sS%2FIsBU9r7UKfIN0R4IraBeDPsxxzu6K9NheTvyIXD0%2F%2FXKvuIUISod3yITAgCKCBs4PziC7M6uAvFSbj7F%2BKFuxzhfqkvuQhcIc42HAShYDmH2BRdM77vPK\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlocation: https://reconodes.com/favicon.ico\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 96af02195a95568d-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3722\u0026min_rtt=1023\u0026rtt_var=2342\u0026sent=62\u0026recv=69\u0026lost=0\u0026retrans=0\u0026sent_bytes=14312\u0026recv_bytes=5269\u0026delivery_rate=851484\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=25131\u0026unsent_bytes=0\u0026cid=0a3cbae942da940d\u0026ts=440\u0026inflight_dur=107\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-06T13:51:16.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reconodes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 23:58:00 GMT","end":"Fri, 03 Oct 2025 00:56:18 GMT"},"fingerprint":{"sha1":"DA:6F:0F:D1:CF:92:54:AF:F5:02:04:E6:EB:3C:FA:19:B3:65:96:5C","sha256":"B3:46:38:C9:10:27:B8:ED:31:24:47:01:77:58:B3:62:C0:F0:7E:AB:62:4A:D3:6B:D2:32:48:EE:72:FC:D1:8B"}}},"request":{"raw":"GET /cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response= HTTP/1.1\r\nHost: reconodes.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ndate: Wed, 06 Aug 2025 13:51:16 GMT\r\ncontent-length: 23\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mpDelRjkqL1GobxEvD1X4%2FPDjvcgxlkvULaXF2ORJbf8LFtSWwGMB83ET4%2BzCrXrUaYck85k1VCT3B2%2Bt064Kz1l%2FFLipi6un1j6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 96af02132eab56c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"1862a245f1f02bd4477a17e9432e3a25","sha1":"5e9e7ba669c7c6e7aa7aede335b0b22f0a08b88f","sha256":"e999e13afc2c76a9b3523daa037814a97f9ad5310ee32c4dfe3b5d006a0ed73b","sha512":"d9a8704b10b2897fa29358a36d8f8a180a97f1752ac745065c11ca1698055fd59415d32ac54e451a2237dc460d8a465ffacdbfc7009bf8e2f4fd885acc189e16","ssdeep":"","tlshash":"6b70000a0800320022000820002082a2af808080000000088ee2cce00808080a002220","first_seen":"2025-04-28T11:02:45.558882Z","last_seen":"2026-08-01T18:51:10.862384Z","times_seen":43309,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":116,"dns":68,"connect":3,"send":0,"wait":9,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reconodes.com/favicon.ico","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","date":"2025-08-06T13:51:17.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reconodes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 23:58:00 GMT","end":"Fri, 03 Oct 2025 00:56:18 GMT"},"fingerprint":{"sha1":"DA:6F:0F:D1:CF:92:54:AF:F5:02:04:E6:EB:3C:FA:19:B3:65:96:5C","sha256":"B3:46:38:C9:10:27:B8:ED:31:24:47:01:77:58:B3:62:C0:F0:7E:AB:62:4A:D3:6B:D2:32:48:EE:72:FC:D1:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reconodes.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 06 Aug 2025 13:51:17 GMT\r\ncontent-type: text/html\r\nlocation: https://reconodes.com/favicon.ico\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FqMEVrtZZo9fa5MR1fclXZRh5hHWEVVRcaljJOCDHav9u8Tcv%2FLkcuQ8FI%2FmX14sLhW%2FJ1PPccxaPiQjzkGzeNuj43Yb5QvBYXjd\"}]}\r\ncf-ray: 96af0216eb5756a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reconodes.com/favicon.ico","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","date":"2025-08-06T13:51:17.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reconodes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 23:58:00 GMT","end":"Fri, 03 Oct 2025 00:56:18 GMT"},"fingerprint":{"sha1":"DA:6F:0F:D1:CF:92:54:AF:F5:02:04:E6:EB:3C:FA:19:B3:65:96:5C","sha256":"B3:46:38:C9:10:27:B8:ED:31:24:47:01:77:58:B3:62:C0:F0:7E:AB:62:4A:D3:6B:D2:32:48:EE:72:FC:D1:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reconodes.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 06 Aug 2025 13:51:17 GMT\r\ncontent-type: text/html\r\nlocation: https://reconodes.com/favicon.ico\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WySWWxmcjQiRS3VMJkT0pT7XniqVWL%2FqsawzxiyfvS9GPW0x%2B9d7Kcaksk559zGIgL5GBVVnwYnW4Oe8TZuA20tfbM5VizwfR1PH\"}]}\r\ncf-ray: 96af0217ed3456a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reconodes.com/favicon.ico","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","date":"2025-08-06T13:51:17.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reconodes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 23:58:00 GMT","end":"Fri, 03 Oct 2025 00:56:18 GMT"},"fingerprint":{"sha1":"DA:6F:0F:D1:CF:92:54:AF:F5:02:04:E6:EB:3C:FA:19:B3:65:96:5C","sha256":"B3:46:38:C9:10:27:B8:ED:31:24:47:01:77:58:B3:62:C0:F0:7E:AB:62:4A:D3:6B:D2:32:48:EE:72:FC:D1:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reconodes.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Wed, 06 Aug 2025 13:51:17 GMT\r\ncontent-type: text/html\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zw7%2FfLowpL0L2ndlhQaoCXFB5ef195B4CocNzHpgqnMDCjnCDQ4sWLz17orXV3B7wTlnPTU8hKLE1%2BRtYCKWp1e7LOYr9mOqxdGnxlJGbA2hmuEMLJdZqru89U8s5zVi\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlocation: https://reconodes.com/favicon.ico\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 96af0218aa86568d-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3959\u0026min_rtt=1023\u0026rtt_var=2522\u0026sent=55\u0026recv=63\u0026lost=0\u0026retrans=0\u0026sent_bytes=10021\u0026recv_bytes=4391\u0026delivery_rate=496659\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=20918\u0026unsent_bytes=0\u0026cid=0a3cbae942da940d\u0026ts=330\u0026inflight_dur=59\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reconodes.com/favicon.ico","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","date":"2025-08-06T13:51:17.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reconodes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 23:58:00 GMT","end":"Fri, 03 Oct 2025 00:56:18 GMT"},"fingerprint":{"sha1":"DA:6F:0F:D1:CF:92:54:AF:F5:02:04:E6:EB:3C:FA:19:B3:65:96:5C","sha256":"B3:46:38:C9:10:27:B8:ED:31:24:47:01:77:58:B3:62:C0:F0:7E:AB:62:4A:D3:6B:D2:32:48:EE:72:FC:D1:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reconodes.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Wed, 06 Aug 2025 13:51:17 GMT\r\ncontent-type: text/html\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=S7bXcpp7y%2B%2BDN%2BS%2FmMFVrIjmJZl5a6OhvHW7uVIjU%2FLPIkaa9PB%2F2IITVrCXPcWmfEup1xE559k24SCmh3rUnRBFYjsjEw90kwQcDUIcnIuSvvfgSeWSJAZgU2Px3XO5\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlocation: https://reconodes.com/favicon.ico\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 96af02183a7f568d-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4278\u0026min_rtt=1023\u0026rtt_var=3305\u0026sent=50\u0026recv=59\u0026lost=0\u0026retrans=0\u0026sent_bytes=7108\u0026recv_bytes=3805\u0026delivery_rate=496659\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=18057\u0026unsent_bytes=0\u0026cid=0a3cbae942da940d\u0026ts=265\u0026inflight_dur=32\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reconodes.com/favicon.ico","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","date":"2025-08-06T13:51:17.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reconodes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 23:58:00 GMT","end":"Fri, 03 Oct 2025 00:56:18 GMT"},"fingerprint":{"sha1":"DA:6F:0F:D1:CF:92:54:AF:F5:02:04:E6:EB:3C:FA:19:B3:65:96:5C","sha256":"B3:46:38:C9:10:27:B8:ED:31:24:47:01:77:58:B3:62:C0:F0:7E:AB:62:4A:D3:6B:D2:32:48:EE:72:FC:D1:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reconodes.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Wed, 06 Aug 2025 13:51:17 GMT\r\ncontent-type: text/html\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VEGD1PTA3ldalOWzFx5xkmVU0rTlzoRU1FYXo3ij5vS4CKGFdkG4h0W8htvBiF4wz%2FkBk2u6%2BTAuv9TfDL5DdjWTk%2B52EWL4HNKOhweefXwdgTxzZlTAJfHV0Pvk%2F3Od\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlocation: https://reconodes.com/favicon.ico\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 96af02186a84568d-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3906\u0026min_rtt=1023\u0026rtt_var=3221\u0026sent=53\u0026recv=61\u0026lost=0\u0026retrans=0\u0026sent_bytes=8598\u0026recv_bytes=4098\u0026delivery_rate=496659\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=19521\u0026unsent_bytes=0\u0026cid=0a3cbae942da940d\u0026ts=292\u0026inflight_dur=35\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reconodes.com/favicon.ico","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","date":"2025-08-06T13:51:18.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reconodes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 23:58:00 GMT","end":"Fri, 03 Oct 2025 00:56:18 GMT"},"fingerprint":{"sha1":"DA:6F:0F:D1:CF:92:54:AF:F5:02:04:E6:EB:3C:FA:19:B3:65:96:5C","sha256":"B3:46:38:C9:10:27:B8:ED:31:24:47:01:77:58:B3:62:C0:F0:7E:AB:62:4A:D3:6B:D2:32:48:EE:72:FC:D1:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reconodes.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Wed, 06 Aug 2025 13:51:18 GMT\r\ncontent-type: text/html\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Y4Eb5JH426xujorZnckMaQ7BdaYZNYg9v5vn0AVZ93sIe8JmPX8WrexCDxraDZ9fsnT7wDo2mNcpfwo33gNr9qF9YirJqbvGya4jfmgq04e6JVnT1uZZ1vGlXpHt%2B8m0\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlocation: https://reconodes.com/favicon.ico\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 96af0219da9c568d-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3154\u0026min_rtt=1023\u0026rtt_var=2295\u0026sent=70\u0026recv=74\u0026lost=0\u0026retrans=0\u0026sent_bytes=18628\u0026recv_bytes=6105\u0026delivery_rate=851484\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=27975\u0026unsent_bytes=0\u0026cid=0a3cbae942da940d\u0026ts=514\u0026inflight_dur=111\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-06T13:51:17.144Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response= HTTP/1.1\r\nHost: reconodes.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Wed, 06 Aug 2025 13:51:17 GMT\r\nContent-Length: 23\r\nConnection: keep-alive\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReferrer-Policy: same-origin\r\nX-Frame-Options: SAMEORIGIN\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OuxfcqWjjcdQbN0QDlFl3kzA4YRYE5uUkEOdqKoPzRpgVg2HPtRL7xNZvbjgxiorlh7UWzEH3Hi%2FS705Aor85o%2BrFdzr5hMEl5L%2F\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 96af02142f41b512-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"1862a245f1f02bd4477a17e9432e3a25","sha1":"5e9e7ba669c7c6e7aa7aede335b0b22f0a08b88f","sha256":"e999e13afc2c76a9b3523daa037814a97f9ad5310ee32c4dfe3b5d006a0ed73b","sha512":"d9a8704b10b2897fa29358a36d8f8a180a97f1752ac745065c11ca1698055fd59415d32ac54e451a2237dc460d8a465ffacdbfc7009bf8e2f4fd885acc189e16","ssdeep":"","tlshash":"6b70000a0800320022000820002082a2af808080000000088ee2cce00808080a002220","first_seen":"2025-04-28T11:02:45.558882Z","last_seen":"2026-08-01T18:51:10.862384Z","times_seen":43309,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":24,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reconodes.com/favicon.ico","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","date":"2025-08-06T13:51:17.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reconodes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 23:58:00 GMT","end":"Fri, 03 Oct 2025 00:56:18 GMT"},"fingerprint":{"sha1":"DA:6F:0F:D1:CF:92:54:AF:F5:02:04:E6:EB:3C:FA:19:B3:65:96:5C","sha256":"B3:46:38:C9:10:27:B8:ED:31:24:47:01:77:58:B3:62:C0:F0:7E:AB:62:4A:D3:6B:D2:32:48:EE:72:FC:D1:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reconodes.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 06 Aug 2025 13:51:17 GMT\r\ncontent-type: text/html\r\nlocation: https://reconodes.com/favicon.ico\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pvUjbDYuAN4PexRufI2CoPc5UFjZ7BCbt5ACSH3OrkOdtJMQl7abcIkRyCNBR5wgx4CQzNJca8H0aPQ08vdvdBul%2BrmSlS71c%2Ft1\"}]}\r\ncf-ray: 96af02167a8056a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":24,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reconodes.com/favicon.ico","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","date":"2025-08-06T13:51:17.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reconodes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 23:58:00 GMT","end":"Fri, 03 Oct 2025 00:56:18 GMT"},"fingerprint":{"sha1":"DA:6F:0F:D1:CF:92:54:AF:F5:02:04:E6:EB:3C:FA:19:B3:65:96:5C","sha256":"B3:46:38:C9:10:27:B8:ED:31:24:47:01:77:58:B3:62:C0:F0:7E:AB:62:4A:D3:6B:D2:32:48:EE:72:FC:D1:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reconodes.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 06 Aug 2025 13:51:17 GMT\r\ncontent-type: text/html\r\nlocation: https://reconodes.com/favicon.ico\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=abAVOVCWhzcJUYEw67Cq9SpFmInR0uZam66UeDjxCa%2F1xJqWqGbIyR3ahtZyXQVLUUcEzlvb%2FOsz1esZeZIyOujDGlyROIxBptI%2B\"}]}\r\ncf-ray: 96af02176c3b56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reconodes.com/favicon.ico","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","date":"2025-08-06T13:51:17.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reconodes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 23:58:00 GMT","end":"Fri, 03 Oct 2025 00:56:18 GMT"},"fingerprint":{"sha1":"DA:6F:0F:D1:CF:92:54:AF:F5:02:04:E6:EB:3C:FA:19:B3:65:96:5C","sha256":"B3:46:38:C9:10:27:B8:ED:31:24:47:01:77:58:B3:62:C0:F0:7E:AB:62:4A:D3:6B:D2:32:48:EE:72:FC:D1:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reconodes.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 06 Aug 2025 13:51:17 GMT\r\ncontent-type: text/html\r\nlocation: https://reconodes.com/favicon.ico\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FyswwBZRjGef6fitea95bz5ujxtKB%2BcyANTLADDhbuQTYcND4gqycMaesUxnzUSN9Tsi1JjcdikFFCeY3Bb9WUNtH%2F%2FKJRkGwMfS\"}]}\r\ncf-ray: 96af02179cb856a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reconodes.com/favicon.ico","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","date":"2025-08-06T13:51:17.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reconodes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 23:58:00 GMT","end":"Fri, 03 Oct 2025 00:56:18 GMT"},"fingerprint":{"sha1":"DA:6F:0F:D1:CF:92:54:AF:F5:02:04:E6:EB:3C:FA:19:B3:65:96:5C","sha256":"B3:46:38:C9:10:27:B8:ED:31:24:47:01:77:58:B3:62:C0:F0:7E:AB:62:4A:D3:6B:D2:32:48:EE:72:FC:D1:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reconodes.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Wed, 06 Aug 2025 13:51:17 GMT\r\ncontent-type: text/html\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fV6FUyHxkB0wGi3mkwN9ZA%2BHgrEjNGflFl2R7Y7Qg7ocdCR%2FTYMyPkIT3qTL4DTCxiSlD4Q31jBgj2zgg%2BXrObh5lhOJeqGNQBczTPdyTEa44ouPBrn%2Bs%2Fnt0LWTwbHn\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlocation: https://reconodes.com/favicon.ico\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 96af02192a92568d-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4050\u0026min_rtt=1023\u0026rtt_var=2249\u0026sent=59\u0026recv=67\u0026lost=0\u0026retrans=0\u0026sent_bytes=12860\u0026recv_bytes=4977\u0026delivery_rate=496659\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=23705\u0026unsent_bytes=0\u0026cid=0a3cbae942da940d\u0026ts=409\u0026inflight_dur=105\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reconodes.com/favicon.ico","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","date":"2025-08-06T13:51:18.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reconodes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 23:58:00 GMT","end":"Fri, 03 Oct 2025 00:56:18 GMT"},"fingerprint":{"sha1":"DA:6F:0F:D1:CF:92:54:AF:F5:02:04:E6:EB:3C:FA:19:B3:65:96:5C","sha256":"B3:46:38:C9:10:27:B8:ED:31:24:47:01:77:58:B3:62:C0:F0:7E:AB:62:4A:D3:6B:D2:32:48:EE:72:FC:D1:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reconodes.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Wed, 06 Aug 2025 13:51:18 GMT\r\ncontent-type: text/html\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8dKRVtm8nmTRLgphvQIT1WBGkeUXuF5gePPKPCX3ERSYTouqt3pNqmlm7h1Jb1rukXSzLIqf7yLkrI1trrzTWwA8eMVWwEsK92%2B27iom6k6kZVScBbnv7hlSfTwLidPH\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlocation: https://reconodes.com/favicon.ico\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 96af02198a97568d-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3407\u0026min_rtt=1023\u0026rtt_var=2386\u0026sent=65\u0026recv=71\u0026lost=0\u0026retrans=0\u0026sent_bytes=15762\u0026recv_bytes=5562\u0026delivery_rate=851484\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=26555\u0026unsent_bytes=0\u0026cid=0a3cbae942da940d\u0026ts=462\u0026inflight_dur=109\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"reconodes.com/favicon.ico","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","date":"2025-08-06T13:51:17.355Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reconodes.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 06 Aug 2025 13:51:17 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\nLocation: https://reconodes.com/favicon.ico\r\nX-Turbo-Charged-By: LiteSpeed\r\nCache-Control: max-age=14400\r\nCf-Cache-Status: MISS\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j7pah8v0UR%2BUc7hLJjs5TkABhDsKk00D%2Blu6Trr2xEfPoV6NdBcHyWnAhprhQSQQJf%2FFNvSBYFcxb9%2F9nNcfYnmXYJ6c79%2BE4RgG\"}]}\r\nCF-RAY: 96af0215690db512-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reconodes.com/favicon.ico","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","date":"2025-08-06T13:51:17.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reconodes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 23:58:00 GMT","end":"Fri, 03 Oct 2025 00:56:18 GMT"},"fingerprint":{"sha1":"DA:6F:0F:D1:CF:92:54:AF:F5:02:04:E6:EB:3C:FA:19:B3:65:96:5C","sha256":"B3:46:38:C9:10:27:B8:ED:31:24:47:01:77:58:B3:62:C0:F0:7E:AB:62:4A:D3:6B:D2:32:48:EE:72:FC:D1:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reconodes.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 06 Aug 2025 13:51:17 GMT\r\ncontent-type: text/html\r\nlocation: https://reconodes.com/favicon.ico\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aQA%2BoNUlT7ukbLmcyNKrA6SZY5OUz%2B92UmnG3NsczfIbciYOfcXuaOrk%2B9DB34y%2F4sxigDodHr%2F8VaXpbq%2FFOzyZwtahx%2BX4n6FX\"}]}\r\ncf-ray: 96af0216bae956a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reconodes.com/favicon.ico","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","date":"2025-08-06T13:51:17.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reconodes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 23:58:00 GMT","end":"Fri, 03 Oct 2025 00:56:18 GMT"},"fingerprint":{"sha1":"DA:6F:0F:D1:CF:92:54:AF:F5:02:04:E6:EB:3C:FA:19:B3:65:96:5C","sha256":"B3:46:38:C9:10:27:B8:ED:31:24:47:01:77:58:B3:62:C0:F0:7E:AB:62:4A:D3:6B:D2:32:48:EE:72:FC:D1:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reconodes.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 06 Aug 2025 13:51:17 GMT\r\ncontent-type: text/html\r\nlocation: https://reconodes.com/favicon.ico\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yWF%2FFZZymUKDWcVtxxjNOx%2FHMmNKXuezkCYyE%2FjbpsRPffvU%2BzCbjfoyryiMyKF3bquoORconXEF60UZ22sekYACbA2w%2BRaAz%2Fvo\"}]}\r\ncf-ray: 96af0217ccf556a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reconodes.com/favicon.ico","fqdn":"reconodes.com","domain":"reconodes.com","tld":"com"},"ip":{"addr":"104.21.94.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://reconodes.com/cdn-cgi/phish-bypass?atok=FzAAQlNoLfl55EPPLcyYOuIDxVokvfyc7aY_3gTsBmo-1754443230.9292996-0.0.1.1-%2F\u0026original_path=%2F\u0026cf-turnstile-response=","date":"2025-08-06T13:51:17.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reconodes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Jul 2025 23:58:00 GMT","end":"Fri, 03 Oct 2025 00:56:18 GMT"},"fingerprint":{"sha1":"DA:6F:0F:D1:CF:92:54:AF:F5:02:04:E6:EB:3C:FA:19:B3:65:96:5C","sha256":"B3:46:38:C9:10:27:B8:ED:31:24:47:01:77:58:B3:62:C0:F0:7E:AB:62:4A:D3:6B:D2:32:48:EE:72:FC:D1:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reconodes.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 06 Aug 2025 13:51:17 GMT\r\ncontent-type: text/html\r\nlocation: https://reconodes.com/favicon.ico\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gtllr8OMLpXdfFbDX8Nxmol04pofYTwXYkG3RKFj6qVc3QKMPtCtOFt3hPxMGjNxfMZ7%2FlVqtwAdYXQ9yhokFV2SpM%2Bz9qDhfPZX\"}]}\r\ncf-ray: 96af02181d9c56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}