{"report_id":"57f7a61a-5c59-4f0f-ae28-33421b76bf1f","version":0,"status":"done","tags":[],"date":"2026-07-18T16:13:55Z","url":{"schema":"http","addr":"pehnavni.com","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":0,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"pehnavni.com/","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"title":"Pehnavni — Tradition with elegance...","dom":{"size":26314,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"791b1b27f269dc9c193bbf8cea4d5ce6","sha1":"258e8c961b98973ee7b3ddf6c6cfee642332773a","sha256":"80afb045e6e55247e64f247cca834205292c547ceb80a487e37f373cd7d9fcbf","sha512":"ce4a17b75c81079f50607f3e015a10c6f569eacea9c5bfbe9736af2e81b997aaaa3f6c4212e5c08fae6ba58c96f31b526b66d12b64d13b636856195cd4e83e1c","ssdeep":"384:GM90HeXWXjX6HIHLHdfFf8AXi/TnRXl/EX9P4PcPDX2/9XkXYv6XXJPsPD04B4AH:GM90CD04KEyEOT7mR","tlshash":"a9c29e10dcf0e03b069340e6aaa62f5abfe1a50bda7b555033fc4bd56f92f92d903509","dom_hash":"domhash07fcade6f802d4ba2736dadc898cd08d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pehnavni.com","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":0,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-22T16:13:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"pehnavni.com","ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"domain_registered":"2017-09-20","domain_rank":0,"first_seen":"2026-05-01T07:54:38.921305Z","last_seen":"2026-05-01T07:54:38.921305Z","alert_count":294,"request_count":49,"received_data":5705304,"sent_data":23728,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:1.11.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"Moment Timezone","description":"","website":"https://momentjs.com/timezone/","common_platform_enumeration":"","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-07-12T23:52:49.76326Z","alert_count":0,"request_count":1,"received_data":96427,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pehnavni.com/vendor/bootstrap/js/popper.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"426ce17eeabd071e85b0bb50e5a18c6c","sha1":"00e2321a61daaf93f57669a81f0484d75eca8158","sha256":"a93f37c5c32d030a1d831b5023b6b29bc93290f5423debaf47c83b6444528059","sha512":"d6caf3f84d60f0ee82475688f100c9e9488324f1c96fbd00dfab9eec8217333aa39bb08980fd521ce4c608a93fa9c97a1d091c508371db2790686254c662e556","ssdeep":"1536:Ymx6gfJhMUENMZq50kQz2F5gPvhe3G0rJj3zNqOljDvO:96gfJhMjMZqzD5gPvhe3G0tjj0SDW","tlshash":"5383c75a35d9b2f245ab91ab429fa24db2318136221bf41034dcd3a83fb1e3451ebdf5","size":81670,"data":"","first_seen":"2023-03-07T01:07:40Z","last_seen":"2026-07-18T16:19:42.349224Z","times_seen":1292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/vendor/bootstrap/js/bootstrap.min.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"baaadea4492b059f284187d75af46063","sha1":"7326bf5e023f871afcf6ebb18cb89109f81a7708","sha256":"0e25895d7caaf355a53d19c37c69a06198f668e5422b211d27597ed93983b80b","sha512":"b56367cd0554d9e5d12103e2be34e304433b898db5d78439a4e04845168e413d90875024e3c5583cde3ed8aa68989a5c7ab37aa51163e65fb72e7c50d1db587d","ssdeep":"768:bVCSRfsdjHVpcKc2v5dTq7gBaBIzySppHcWFcXPv1mAaCcE1dLPmdwGmo:bVDROhicBaBD0pHcWFcfv1mrCcws","tlshash":"d633970a725474a202df6475917f050bb33b285de60a90acb99e94fd1ebcd8c7267f38","size":51143,"data":"","first_seen":"2023-03-07T01:07:40Z","last_seen":"2026-07-18T16:19:42.311171Z","times_seen":4174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/vendor/countdowntime/moment.min.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ff1de69e6fd137a6dd511205ea7c49e","sha1":"91a29a02cca99f32598f7b5764c610ab3cc89fba","sha256":"001564a706fd2bd3f1b9bbd1ac732493ac2659c207504f5e0713592d7610f389","sha512":"419fa651f350826ebb4ef5f375352a504886638e1d1394ef5d18197ba45d8e48d12fc99596da7fbc7530ec23f6f46c81706c2743971724200da8f3f43c9af0a4","ssdeep":"768:RmEj5IyZrV7dmUJ8/HhbmINN3vhg+XVspjiCumS5vcAKR1DC:wKxrV7d3g8ixXVspCmcti1+","tlshash":"cc3393ca3646b112176622b5083f490bf33d5959680f0d1df508e9e93979c6e827bfbc","size":51599,"data":"","first_seen":"2023-03-07T01:07:40Z","last_seen":"2026-07-18T16:19:42.312451Z","times_seen":911,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/vendor/countdowntime/moment-timezone.min.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"815209b1a2020b5cf4ed070ef41a6540","sha1":"5f189bd893458547f396225485d19db609cc6378","sha256":"c2795fbf648c3d76b2f15cb04644622f9cf2b098709f663476eee98367e4a046","sha512":"2dfb5a3305e4e833e7a4c805d2a4d7c2822b9ee92d23eb57353d9a72733dd40b60a57c06de82ac97cb92a5aeb351ed5884513665f54b1dca5be1aab0239661af","ssdeep":"96:VfrfRNOZaUY4DctsLVEy42CtwRkTdUSNUG0TRBEkqebWf/FI5uQN0YTQEINk1mJE:ZrfRNaax4DEsL45wyZUojWDEkluIEC9n","tlshash":"dec1c59d33a0787a8b8792b4d1bf540bb67a75152a0cc024f92ab8d17c34ae54377e3c","size":6017,"data":"","first_seen":"2023-03-07T01:07:40Z","last_seen":"2026-07-18T16:19:42.319842Z","times_seen":237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc4eb70d4d7564b23cc08f3b6750aa1d","sha1":"325ac009e3b9dbdc6c7f1099fb7ad6dc24a9c0de","sha256":"77ad6b76e2dd3a4ffdbe48a238592384fa5f1f19e7bb4e4d58e3251afe00ebf5","sha512":"175729c0abc9780a07634b0c70705de30c6633047a82118614295037e2c6010fe31d50261a999bdf51cdc4d05d2754b60fdf30b2a97423c68c85373f85b01f9f","ssdeep":"","tlshash":"0ae06d9345a107a6cc9a98236356b3d67306d36e3fd0ac3c38b80a800fb950a38b57a5","size":380,"data":"","first_seen":"2026-07-18T16:14:04.23449Z","last_seen":"2026-07-18T16:19:42.353225Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d5e32c56eaf9afd788ca58fe4fc423f","sha1":"ccdac89bf373179f5e2ad191fa22b5a28430d1c2","sha256":"2681276cfb81a12b400259ce89fa91cf48a4b64fde803696b5af9e99b540d28e","sha512":"2b4d5345f772b63235062f69695c9fda470c560f66473acfdeb2ff9724befa64a6336dfe8a3a97185739e21f123f12f5ed737ad24e75ff3c88b690723d8efd36","ssdeep":"","tlshash":"c8900401c373034400111133c07c0501157fd0410ccd4c7d70dc44354f515011cc5d11","size":40,"data":"","first_seen":"2026-07-18T16:14:04.236222Z","last_seen":"2026-07-18T16:19:42.355401Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"98b79ed9fad72dd67b2d5bda65f215e7","sha1":"d7ba1a171862a8cac4bf0c55255a242c2a9f0c41","sha256":"b6497b270fd3022751bf5c0ece7dea989f8d6d3f332f04ec32e0cdc0095f1de0","sha512":"78d3821036da4e6768c5393702ca9edca35d4a60678eafdc3125ad0697943ae5f2d2e88f139929ad7b171323a30b1ba1f6ffa71f826072b3d77bd997cd178ae1","ssdeep":"","tlshash":"c8f0afad3255233002df7075e67f83d83635200b31976a067c2d8ae49f61e7a5461bdd","size":613,"data":"","first_seen":"2026-07-18T16:14:04.237957Z","last_seen":"2026-07-18T16:19:42.357113Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/js/mainCounter.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"addd4228ca696528b8e843d3c4b604ba","sha1":"fa70fa28da4002d1d53b919d5bd01b8006b39ad0","sha256":"3647671cd31b049c5ee523545f2b9d637bb82bb4a08e8c42dfb52a36fc3b6749","sha512":"2f3327ed9ddcf556f2df07f7c0e979c0e7d7ef52367df280c6696d2e1cb42aa7e066564a28c0c015fb73315f00dffc535bf5c59f51559b20bee40ba74082bce9","ssdeep":"","tlshash":"9b215b4c696285a84db337b9cedb8008ff6a051b84051a057d6c58912fb17545b3efed","size":1420,"data":"","first_seen":"2023-03-09T12:43:20Z","last_seen":"2026-07-18T16:19:42.299828Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/js/bootstrap.min.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb5fac582a82f296aeb74900b01a2fa3","sha1":"fffea98e12e63b66693d567315a2f32392b780b0","sha256":"c5a17d46976d471cf060c5a0e25749a323d6ab20cf0910f40afed81047ba21ef","sha512":"60ad4ccfd52266685b1735e031b9776cee3dc19efc5e3de1f13b5304b147100123501c6c11975777c225e5159b84f3b207ae776c64033551869f2da639166ae0","ssdeep":"768:u2Ybgh0G45THVmcmjWSLlynS/zZ/AcyUr4Y8yiKKkHPPm26RoLQH/nIr6:u2jh03Lo+SbZ/AfYqkm2KIr6","tlshash":"3433b90a725478a201df9466513f450bb73b389eaa0b816cf95d98ed1e7cd89312bf3c","size":50731,"data":"","first_seen":"2023-03-07T01:14:49Z","last_seen":"2026-07-18T23:05:11.834049Z","times_seen":3350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/vendor/jquery/jquery-3.2.1.min.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","size":86659,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-19T00:34:20.105653Z","times_seen":97596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/vendor/select2/select2.min.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e87ca4c3554f7b9e693605ce12d3a234","sha1":"fffd0bf48918d33bc612be1fefc120ee23b1a1ee","sha256":"fa659dfc6ebd4b8aad80fa304842c879502fefe16e2fcef55976a89605e7af04","sha512":"6e3f07135a4ac1c86860d8b3843e7b565e81f44c52db91f0db55b1a1013319aa4d3632d9d3e92044c127f4a4820fe8a06c4f7efdd24eef1e9984badd690e4fde","ssdeep":"768:6o14fnpUZnxyUsdSQmUFkrGBokOl/NxYTP1aFe7MMpQeznipGmZlnU0RNly:HeGnwUsdSNJkOZWfXLEGAzNY","tlshash":"ae53b748b9537235427f20f6656f040e2136bb7eb00a5aa8b458cde85ebdd14326bf3d","size":66664,"data":"","first_seen":"2023-03-07T01:06:24Z","last_seen":"2026-07-18T23:49:10.022258Z","times_seen":3637,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/vendor/countdowntime/countdowntime.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f7c1f781d72385623259882bbfcf6c2","sha1":"94f04b927588dc2362dfac9a66add708e6cddf40","sha256":"680d7dccae0057987af6da8d83e6a49dbbd0d66ffe173471c47d3ac3caa8f71a","sha512":"bfc0c9b11ac693d14bdfcbf340744f45dee3052b454fae97ae67c5ea6a2d1a00e5c009efc841bc68f297653e71d985dba094111495069d0d7120a2085e882c84","ssdeep":"","tlshash":"1651ac2489530590adfa77a78f6e0299e364932315cbc65974bdeac01fb0944e48effc","size":2841,"data":"","first_seen":"2023-03-07T01:07:40Z","last_seen":"2026-07-18T16:19:42.301806Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/vendor/tilt/tilt.jquery.min.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"034d38aaa44f4ac1723c041d215eb146","sha1":"6dccde4d78b77b035d9da0396385ade6141864cb","sha256":"6951eec0a8c0c9b2eab72c4f579765e0f190165822919ddc791bb391096fd7c0","sha512":"bb52fb0e9dc12943f78228e0491a0c4cdc660e5ff9a3e5ce1eea70c1aee3b08d6b3331eb96548b2ac18e7ea8d897cbeb106fbc8219d13cd03f48296d989099a5","ssdeep":"96:H9HqJXyrg9U0S2VcjOB/MjvENOtnUz3FbyTXTyVyURCD3jgupRc:dH8yrbTIMjLtnUziXkRCYr","tlshash":"a7c140847111711e59cbe324d18b0e06a23ae0155c22a87d75fdc9edadbaccd127bfb8","size":5640,"data":"","first_seen":"2023-03-07T01:07:40Z","last_seen":"2026-07-18T22:51:45.136242Z","times_seen":2409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/js/scripts-all.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2efea6ffffe458e9a528f66abfeae11","sha1":"acd630faf150e7aa556390aa2e08bcdbc12cb667","sha256":"86443d28aeebec73cc4e5c1533437bd858bb2a15852c7b2054674523091bdb1d","sha512":"8d2b90c4b52d104294e0207e7f9c538ff12a1188562200b3ed923291446efe335fa6aa9a3e31b03edb72ec777b43929e79fa6fd4210b0fc2ae7e0b1bacf6d6e5","ssdeep":"3072:+4J+OlfOhWppCW6G9a98Hrdn4UULVwuYqtq5oPPLN9LCwU6M:MOFpqG9a98HrZ4N9bUd","tlshash":"f2240889b390746287ab60b5517f020bb23b689db409846cf569d4ed3e78d8d213bf7c","size":225411,"data":"","first_seen":"2026-05-01T07:54:46.140589Z","last_seen":"2026-07-18T16:19:42.338696Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/js/main.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5dc56e78dc86b2b1d57e320d46cf0b","sha1":"c8d45f555c49e3e40bdee20b068f4ce413f44122","sha256":"06b0d58ced5b99341ce3c7e9bb603e7442e8617de676d9c00cb5f1174ea3916b","sha512":"466a5ea655f9f5432de48c28e3ef9f54235aacddf68e85b7aafff7d7c97a7c6adb3d17b7d541cee5a45b77bfafca2a4359c31a3625a926c166c1a1f81a7f550c","ssdeep":"","tlshash":"7e41234630f16925107b90ba4bff91851b2cd113db4dd902b8ad16d05f4a25c72b37db","size":2269,"data":"","first_seen":"2026-05-01T07:54:46.202896Z","last_seen":"2026-07-18T16:19:42.300841Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/vendor/countdowntime/moment-timezone-with-data.min.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e151e6df5d3a88137025e187789d6dec","sha1":"56beca5d01b162efc76849bf97344281ba89946e","sha256":"14964e10b8309df411746f0a65449609882e7040837f8c3991f41d41219b5692","sha512":"9f30d590508106e2ec94c3de1a8ff4f7dd0e9841626221d3ac6685191b0f3acdedc2e0c748f8990709bc28db2ce41487947f32d0910a2259996df94913d9ee82","ssdeep":"3072:CLeUl6liDD/DCD/DCDMYq+nrHrrULekrlbupnDDDUDDeouSe0Wfor0o/khXGo56:6e1+xy20Wfk","tlshash":"7f048d281617bb44e459c08bfa3739c0caa9d18a944b54d24f7d4bb75fa37e2de98c03","size":184353,"data":"","first_seen":"2023-03-07T01:07:40Z","last_seen":"2026-07-18T16:19:42.298875Z","times_seen":282,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.11.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","size":95786,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-07-19T01:13:21.925604Z","times_seen":54636,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"","filename":"https://pehnavni.com/vendor/countdowntime/countdowntime.js","line_number":23,"column_number":46}]},"http":[{"url":{"schema":"https","addr":"pehnavni.com/css/bootstrap.min.css","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.511Z","timestamp":1784391206511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19609\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":157503,"size_decoded":20018,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"f0ce8c58b4ed844efd680c9f97d12abe","sha1":"4233305ce166e24929eb401b3d09beb259b19172","sha256":"7b53f3e9ffcc84fe691fc7904033c960f17c677e2862b36f5d63162a8432a18a","sha512":"716f13f94bd1ac780c15d3fd093b6ee93f110ba71cc22a77dab58e9fa172523c303886cf708800acda052a5c19ec95b84283a71d86a8ac401e378a38ad915bb9","ssdeep":"1536:70UrDPcPmZ6ldZW7a7E5K82ZcKGEj5NGK0pBENM6HN26N:oU0PwBK2BENM6HN26N","tlshash":"08f38567f590322ca457ca1c52c1bafe466f8165d6221bfbf4277730878a6c60ab3d0d","first_seen":"2026-05-01T07:54:46.145383Z","last_seen":"2026-07-18T16:19:42.321257Z","times_seen":3,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/css/owl.carousel.min.css","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.517Z","timestamp":1784391206517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /css/owl.carousel.min.css HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 901\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3277,"size_decoded":1130,"mime_type":"text/css","magic":"ASCII text, with very long lines (3110)","md5":"80da9171594bd715c0dcd24c38d164b1","sha1":"a45fa20d4d6b94f01cd4246c5cc1234eaa66405a","sha256":"7b146fb079f83fae9b1bbe2889f1d24a77e567e26f5631f517c3a2c82a145030","sha512":"66eb97e18412c25a5ef9ad7ff7127d00456cbc78ab9930e3d7c19980ce6c62bd313716605cb8e2039f59e6e50abf36f0b7fd51b774603a0f3328cca5baf7bc1e","ssdeep":"","tlshash":"7a61cbe5314a225f480f83221dd85e87393dcc52d8660a9a92bbd314879ae2d113ffcf","first_seen":"2025-07-06T08:33:38.09553Z","last_seen":"2026-07-18T16:19:42.33714Z","times_seen":17,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/css/animsition.min.css","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.520Z","timestamp":1784391206520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /css/animsition.min.css HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2063\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27478,"size_decoded":2293,"mime_type":"text/css","magic":"ASCII text, with very long lines (27282)","md5":"312fbe26010f14f41068f8969c11d86e","sha1":"d4590c32c95ee463b1cdde3677243539cc817185","sha256":"14020e649186932b88a7f815ad52ff939db3e2ba4228cad195831d1825acb54a","sha512":"49a80cd4f1f1b799960f258045563a50e76133903c27e47552a2167067e2c0e77e6deeee1d06a007e2503a67d5645f238c942a6f2b96cf0fca5df6f8caa8c191","ssdeep":"96:xhObdqt27Q0K0tXC0f0JWQ0f0Wcc040C/i0s0Pdu0D0bqcSixHSixbxySSxySGfg:xhOf77XaW1c2/xdCqwYKLge23D","tlshash":"4bc2fbab48d1168640260e5297cc5f64472ddbf77ab12dde3385388ec342bed23ca65b","first_seen":"2023-04-05T15:19:41Z","last_seen":"2026-07-19T00:50:20.446515Z","times_seen":1687,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/css/main.css","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.735Z","timestamp":1784391206735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Thu, 18 Apr 2024 09:10:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2026\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12787,"size_decoded":2256,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"0b23daabc9cd0f15b282004bf41905f5","sha1":"86f439da6e32b2e64e5a47546ca110e77dc2c102","sha256":"cfc4fe1c6993d542b770e12cf4e7fa9d115b73c38862dae4ca48577ea897dda2","sha512":"1c6467e49da08264900d346253945308e2dff0402828cf89fece9b0bc2615ba91a5a179f507eefd20435d5f2ad6d6f5219cce9701ca5a15728ad40ac16d06ec1","ssdeep":"96:HCIO8xEFw1UD0lLoQL8HlslIOy4NuOYiE6kL/vsavYa2VKrMb1qEsJ8IE2hGCGif:hQw1UsjLOSu4kL/vsavY+gv6","tlshash":"1a4240144e573108a33bd6f6f7d32a65efba2406c30215d6baa07646ca82779083cfdd","first_seen":"2026-05-01T07:54:46.154945Z","last_seen":"2026-07-18T16:19:42.290394Z","times_seen":3,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/images/design/Fashionweek/f12.jpg","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.783Z","timestamp":1784391206783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /images/design/Fashionweek/f12.jpg HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Nov 2023 13:23:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 240942\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":240942,"size_decoded":241131,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=11, manufacturer=NIKON CORPORATION, model=NIKON D7200, orientation=upper-left, xresolution=176, yresolution=184, resolutionunit=2, software=Adobe Photoshop Lightroom 6.1 (Macintosh), datetime=2016:11:28 19:54:53], baseline, precision 8, 640x960, components 3","md5":"017689075317fba8651ea97126005d6e","sha1":"b554334bc38e1fefcf2275e5e19729857c1d4c44","sha256":"ade3608891b01f969c2ded1034111419d54a24cc45f8a0b5d96811cf6bd3d3d5","sha512":"6689f0fb8fe9bcd38b84edc92d33af2ba905297fba914f880d8b976861dd566cbab98dba8bfacbdfeb730285f7bf94aa7019d21b42c0a65feb06e74f348f95ea","ssdeep":"6144:UA1ybJ9wzJ0zUFMUIynETTR7+x7ONB1uC6lcY8bEi1:UV/s+AFBr+TS7ONuK","tlshash":"4034123cfea43b11c794e03299f681d647baa8b2151a5013b5be5f31b771c85adcb0ac","first_seen":"2026-05-01T07:54:46.110614Z","last_seen":"2026-07-18T16:19:42.30582Z","times_seen":3,"resource_available":false,"data":null}},"time_used":945,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":873,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/images/design/Weddingseries/w4.jpg","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.788Z","timestamp":1784391206788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /images/design/Weddingseries/w4.jpg HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Nov 2023 13:23:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 200636\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":200636,"size_decoded":200825,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=8, manufacturer=Canon, model=Canon EOS 5D Mark II, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, datetime=2017:11:05 18:08:46], baseline, precision 8, 640x960, components 3","md5":"98b3e1e0bc99279cc4dd1209849e1ab8","sha1":"f5f8916e4c8671494d7c8e792a38c0a28cbbdc3f","sha256":"ab2efce066490a6d4e62f4eb55566325d376fa3906a17eb70a9b90f1dc12bd4d","sha512":"01c0bc1391fed05c3220c1c1d6544b02e4f19f7b90461c4d6e8fcd099bb772556197021046eb3ed77f78afb8f162a6d4f45c22531436d29d4f9cfdf31fc38798","ssdeep":"3072:mhY60agrx2H/8RdM8S7KmvyNXc5r5eVZfMlq+aijZWZW14kmV/QZa2T9B7OPpiP:m7qVm/uM8tQSXcJ5cZ0iZAkEt/7S2","tlshash":"421412539b2c5911f681f9323af2c43e0b25c97863f6f665754d83d8bb402039e1a6ee","first_seen":"2026-05-01T07:54:46.135164Z","last_seen":"2026-07-18T16:19:42.314463Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1138,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/css/footer-distributed-with-address-and-phones.css","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.524Z","timestamp":1784391206524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /css/footer-distributed-with-address-and-phones.css HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 732\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2804,"size_decoded":961,"mime_type":"text/css","magic":"ASCII text","md5":"bf1266e44c9604835ecd7a08e9a7c7ca","sha1":"511143145a1022d86dedfb40d1cbf8385f1b1630","sha256":"fe54a0c929e4d486292174e4bd604cafe8dc36388bb05f53e685ab212893eb97","sha512":"7a88a6ffc1895b127b3a5b61f7777cd7daee375288421992e8798f11e2ba9f37f232a6048573a6c98fcf9d1578d275a39400c684da69b8c296788b8ff2ec1273","ssdeep":"","tlshash":"f851383a7d363f17ba464cd8f7408e41667ec0527a8e4e76b4aceb2c914f0922e71b45","first_seen":"2026-05-01T07:54:46.10554Z","last_seen":"2026-07-18T16:19:42.350698Z","times_seen":3,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.11.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.726Z","timestamp":1784391206726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-1.11.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-1762a\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nage: 3479878\r\nx-served-by: cache-lga21922-LGA, cache-bma-essb1270072-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 25682, 26334\r\nx-timer: S1784391207.757833,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 33202\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95786,"size_decoded":33843,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32086)","md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-07-19T01:13:21.925604Z","times_seen":54636,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":9,"receive":4,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/vendor/animate/animate.css","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.731Z","timestamp":1784391206731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /vendor/animate/animate.css HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2770\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23848,"size_decoded":3000,"mime_type":"text/css","magic":"ASCII text","md5":"57db4a2811f951ff841fb4f77220d95b","sha1":"b6fd60d18ef742ea5f6979df0cddb35791c4fbe5","sha256":"80aa5497ff31b2c001474d9432f0853c11d200a67ea4f9852ab2f7ee2fedd9c2","sha512":"39175b63c0e82fc090bf557701394136544bae7145463f84c4c3743bc56594e812de221b51c1549f15cd540a2995183ce1221cd74416cf8afcbb91feed160e4b","ssdeep":"192:Bhb8bQqxlZoVzeH7kEUsdUu3EMR5GbXghVE4LGBZGJR6Jpd2fLHPJ3UKCj+CIP4u:B4BEm0tdtMCLK3BM5TdzG","tlshash":"07b25a5c39e014448767437e46ef9e28167ce4971c2f9dbfb3c2058b9f846b8a78a607","first_seen":"2023-04-05T05:06:34Z","last_seen":"2026-07-19T00:50:20.456438Z","times_seen":3659,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/css/util.css","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.733Z","timestamp":1784391206733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /css/util.css HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6827\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":84275,"size_decoded":7057,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"774613c363cd95b9450e637892b0254a","sha1":"4aca72434b7f7e5a537d612e9724e85265f55e6f","sha256":"b10556aa8bedcd5c5ceea9b9dd40771ec29dc67486613973a3811d3e44695666","sha512":"ce8557a73288c80757e3cf44cf38b995a49cd74f230c79507c60f9f40e6ab06d1479ffae43dff9ac3d929ef9ed890d10f30efd8a53ccc4543e002bbe00ed2099","ssdeep":"1536:e/TuOtylZDCDHW8IbewCDqHy2P3EHuAor7EDHD:6aO2A","tlshash":"308307516e212418925ed7e7c4a3b6a4ff4f3443c162b1d7a0923c25cecb6bb05bb62d","first_seen":"2026-05-01T07:54:46.108106Z","last_seen":"2026-07-18T16:19:42.297904Z","times_seen":3,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/js/scripts-all.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.739Z","timestamp":1784391206739,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /js/scripts-all.js HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 67501\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":225411,"size_decoded":67746,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"b2efea6ffffe458e9a528f66abfeae11","sha1":"acd630faf150e7aa556390aa2e08bcdbc12cb667","sha256":"86443d28aeebec73cc4e5c1533437bd858bb2a15852c7b2054674523091bdb1d","sha512":"8d2b90c4b52d104294e0207e7f9c538ff12a1188562200b3ed923291446efe335fa6aa9a3e31b03edb72ec777b43929e79fa6fd4210b0fc2ae7e0b1bacf6d6e5","ssdeep":"3072:+4J+OlfOhWppCW6G9a98Hrdn4UULVwuYqtq5oPPLN9LCwU6M:MOFpqG9a98HrZ4N9bUd","tlshash":"f2240889b390746287ab60b5517f020bb23b689db409846cf569d4ed3e78d8d213bf7c","first_seen":"2026-05-01T07:54:46.140589Z","last_seen":"2026-07-18T16:19:42.338696Z","times_seen":3,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/vendor/bootstrap/js/popper.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.742Z","timestamp":1784391206742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /vendor/bootstrap/js/popper.js HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20358\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":81670,"size_decoded":20603,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (337)","md5":"426ce17eeabd071e85b0bb50e5a18c6c","sha1":"00e2321a61daaf93f57669a81f0484d75eca8158","sha256":"a93f37c5c32d030a1d831b5023b6b29bc93290f5423debaf47c83b6444528059","sha512":"d6caf3f84d60f0ee82475688f100c9e9488324f1c96fbd00dfab9eec8217333aa39bb08980fd521ce4c608a93fa9c97a1d091c508371db2790686254c662e556","ssdeep":"1536:Ymx6gfJhMUENMZq50kQz2F5gPvhe3G0rJj3zNqOljDvO:96gfJhMjMZqzD5gPvhe3G0tjj0SDW","tlshash":"5383c75a35d9b2f245ab91ab429fa24db2318136221bf41034dcd3a83fb1e3451ebdf5","first_seen":"2023-03-07T01:07:40Z","last_seen":"2026-07-18T16:19:42.349224Z","times_seen":1292,"resource_available":true,"data":null}},"time_used":550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":481,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/js/mainCounter.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.755Z","timestamp":1784391206755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /js/mainCounter.js HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 440\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1420,"size_decoded":683,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"addd4228ca696528b8e843d3c4b604ba","sha1":"fa70fa28da4002d1d53b919d5bd01b8006b39ad0","sha256":"3647671cd31b049c5ee523545f2b9d637bb82bb4a08e8c42dfb52a36fc3b6749","sha512":"2f3327ed9ddcf556f2df07f7c0e979c0e7d7ef52367df280c6696d2e1cb42aa7e066564a28c0c015fb73315f00dffc535bf5c59f51559b20bee40ba74082bce9","ssdeep":"","tlshash":"9b215b4c696285a84db337b9cedb8008ff6a051b84051a057d6c58912fb17545b3efed","first_seen":"2023-03-09T12:43:20Z","last_seen":"2026-07-18T16:19:42.299828Z","times_seen":100,"resource_available":true,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/images/design/Fashionweek/f11.jpg","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.784Z","timestamp":1784391206784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /images/design/Fashionweek/f11.jpg HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Nov 2023 13:23:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 209994\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":209994,"size_decoded":210183,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=11, manufacturer=NIKON CORPORATION, model=NIKON D7200, orientation=upper-left, xresolution=176, yresolution=184, resolutionunit=2, software=Adobe Photoshop Lightroom 6.1 (Macintosh), datetime=2016:11:28 19:53:10], baseline, precision 8, 640x960, components 3","md5":"157609a6c88d90bfb1d9448d358c8e2f","sha1":"e6cd592df45b961e38b84dbe75f22c1d2fbafbe4","sha256":"b09ef2e907028743d9ac8f4d2b11db4a4f1beee1fe8506bfbc45d5e1b737a9f2","sha512":"308eb9131294ef725118f1d5767300748574847b9d688b86fed6a1900b06fcaca6f33e81d04e9f31593276640489a6cab8a897a1a61d281d522c5330c6432b85","ssdeep":"6144:cSKDuO769PtzZe87wJXqxl2TVfIrxX05dDSZ4:cSKKO741zjwMWTStk5dDSZ4","tlshash":"ca241238bb474821cae99a73ddddeb0553a7a3a07a4a4003712f9c3b7372df1ad85191","first_seen":"2026-05-01T07:54:46.163394Z","last_seen":"2026-07-18T16:19:42.333214Z","times_seen":3,"resource_available":false,"data":null}},"time_used":987,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":944,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-18T16:13:25.387Z","timestamp":1784391205387,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Thu, 18 Apr 2024 09:07:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3268\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:1.11.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"Moment Timezone","description":"","website":"https://momentjs.com/timezone/","common_platform_enumeration":"","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":25657,"size_decoded":3697,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"2c19f58e5aacc8c5c586a665db7604e4","sha1":"32dec2aa27dd4df3187936a60d5ae5d0910c831d","sha256":"5092ccdab2a89e06e319dfd02f88a2631ee78a5257b9277688fe9281462483bf","sha512":"3e138161c3ebc152f0326a84f0949ff530886891920a2269357f07e6f86da4f440ea3f926fe0963933b7a92f0eb1242a4e573dc30b73948afd803b20130a5ffe","ssdeep":"384:0M6TO+XrXEXbHTH0HdfFf8AXi/TnRXl/EXIPJPRPSX1/+XPXDv1XXOPHPH4b4Axp:0M6T024EEyEOTLmv","tlshash":"59b28820dcf4e13b058240a6aaa61f5abfa1e507d97b655033fc4be16fa3f92dd03509","first_seen":"2026-05-01T07:54:46.124283Z","last_seen":"2026-07-18T16:19:42.332159Z","times_seen":3,"resource_available":true,"data":null}},"time_used":906,"timings":{"blocked":-1,"dns":178,"connect":180,"send":0,"wait":182,"receive":0,"ssl":365},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/vendor/bootstrap/css/bootstrap.min.css","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.728Z","timestamp":1784391206728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /vendor/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16859\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":124962,"size_decoded":17090,"mime_type":"text/css","magic":"ASCII text, with very long lines (65320)","md5":"3ffbab350748e841d3768b5d1ca48933","sha1":"262e04cab3c1a51024d4f3960c72ebd3968476a7","sha256":"9bf87f7140c085febf881462c536ee73cf9183670811342d3dc1fd0f7a762a0d","sha512":"a19c8f4a6a0a19fb0bac451aa3fb5f8cf6afa3ef53164033cef8bdbfffd74462ed1647b4b05d93ac0c77a79b1469548fbaf9a3ecd89d82a433395d657d4e71fa","ssdeep":"1536:bcEBu1SoWXcwQ7c6DEBi8aNcuSE0mjVyzAqhqczDsIltSQV81IA1C8rkFnM5SXfI:bcEB2i0yzAqhqczDsIsalOEMH2UtV","tlshash":"f7c340a3f5a0215de197c65950d0bffd092f8185d7221ffab82777b44b896cb0a63a0c","first_seen":"2023-04-05T15:19:41Z","last_seen":"2026-07-19T00:50:20.455979Z","times_seen":2215,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/vendor/select2/select2.min.css","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.732Z","timestamp":1784391206732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /vendor/select2/select2.min.css HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1790\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15196,"size_decoded":2020,"mime_type":"text/css","magic":"ASCII text, with very long lines (15195)","md5":"d44571114a90b9226cd654d3c7d9442c","sha1":"83b595db66fbf173436fbca475b8b695ef48eb8e","sha256":"c493991dfa712d1fee861d41c18152e5f8663807484506a23ae97917f6fbbf7b","sha512":"d8bd1d12320dfc30264d5e69b87ae2108b9053f20bdc2a0f9bfe1ec99a776ccf1d9da5eb8ba94af2ee830b92fde9bf984acf5fdcb7bcd5d0d1654498797e1071","ssdeep":"192:pL5u/nTfc3aqWJCeQ9CPjOtWlUJKLJcH9tPOF:3u/TfX1TQ9htWGSJcdwF","tlshash":"8362aa29bacc2235b0bf8e7f6cf274946739dd5fc4111b9ab8e9e554c8e04540a8b60f","first_seen":"2023-04-05T15:19:41Z","last_seen":"2026-07-19T00:50:20.449545Z","times_seen":8206,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/vendor/countdowntime/moment-timezone-with-data.min.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.751Z","timestamp":1784391206751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /vendor/countdowntime/moment-timezone-with-data.min.js HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 24425\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":184353,"size_decoded":24670,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e151e6df5d3a88137025e187789d6dec","sha1":"56beca5d01b162efc76849bf97344281ba89946e","sha256":"14964e10b8309df411746f0a65449609882e7040837f8c3991f41d41219b5692","sha512":"9f30d590508106e2ec94c3de1a8ff4f7dd0e9841626221d3ac6685191b0f3acdedc2e0c748f8990709bc28db2ce41487947f32d0910a2259996df94913d9ee82","ssdeep":"3072:CLeUl6liDD/DCD/DCDMYq+nrHrrULekrlbupnDDDUDDeouSe0Wfor0o/khXGo56:6e1+xy20Wfk","tlshash":"7f048d281617bb44e459c08bfa3739c0caa9d18a944b54d24f7d4bb75fa37e2de98c03","first_seen":"2023-03-07T01:07:40Z","last_seen":"2026-07-18T16:19:42.298875Z","times_seen":282,"resource_available":true,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":592,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/images/design/Fashionweek/f6.jpg","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.784Z","timestamp":1784391206784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /images/design/Fashionweek/f6.jpg HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Nov 2023 13:23:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 240553\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":240553,"size_decoded":240742,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 640x962, components 3","md5":"d615317e5465dd52c98eb850a277278b","sha1":"b69c7f2f26bed5c72b478feae3e98b83cf664f56","sha256":"536ed6e71f3146cf08e8671b0bfe32f4f30851f4e29065e388d0791d0be10a24","sha512":"cd2c1f020a5e476c5328e2cc7d3fe1580e4c3db3d6ea6829c070bacb0cda03e7a674b9a362308fdec55078ea6c2c61ce09c3188af25806a474deec577991ea73","ssdeep":"6144:SZV8kct2C8hnPrAli4pb5XYNoZfE5zzz88/:SD8Zt2C8RA9TXQpzzz88/","tlshash":"c634234c339e29a7d794f690f6d53d2e9a81de000346857cc33966e3c7e986f8d9980e","first_seen":"2026-05-01T07:54:46.183129Z","last_seen":"2026-07-18T16:19:42.324503Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1045,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":986,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/images/design/Weddingseries/w2.jpg","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.785Z","timestamp":1784391206785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /images/design/Weddingseries/w2.jpg HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Nov 2023 13:23:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 240078\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":240078,"size_decoded":240267,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=8, manufacturer=Canon, model=Canon EOS 5D Mark II, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, datetime=2017:11:05 16:27:00], baseline, precision 8, 639x959, components 3","md5":"98e8381dcd0d85a209cc382fa85fba41","sha1":"35ce0b6efaf9a4ecba4145d0e29028b03f09bc89","sha256":"748de9e16bc301e7a4d33800d0055a731144a19f6c37b1d131a7bc9abd69dd36","sha512":"fa9c536af0aa5eb8c93216de3524005076d120465b24b6dd147a7f46a38be3eb15897f93daaa0e3385c1a375cb583bf118245b72f95d5882522c12dadb82f0de","ssdeep":"3072:sUmVznxmWgQOAps3XgUAjIMroOKD6IIjRG57g5GjsjK7loxLXVI3TqkEkA0KOl/b:sVV9mQOA4XgUFOhS7YrjDO3A0fX2KeuP","tlshash":"fd3422c0f4ab2d8aeb853fb0087240aae061a6900347ad52fa7fe54417bb54e31571ef","first_seen":"2026-05-01T07:54:46.207581Z","last_seen":"2026-07-18T16:19:42.307981Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1087,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1044,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/images/design/Weddingseries/w13.jpg","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.790Z","timestamp":1784391206790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /images/design/Weddingseries/w13.jpg HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Nov 2023 13:23:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 214206\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":214206,"size_decoded":214395,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=8, manufacturer=Canon, model=Canon EOS 7D, orientation=upper-left, xresolution=130, yresolution=138, resolutionunit=2, datetime=2016:10:16 19:55:38], baseline, precision 8, 640x988, components 3","md5":"5912091937f03ae31670e72e2ff115f7","sha1":"72a50c5c24d1e188e4dff3247114b844e343601c","sha256":"2c52084ddfa3c7b6aa86d42a2c7b66c4a89e9a0fbb94bb92aae90e73551bbab7","sha512":"a522f9068e17fcde78dd3cd1d3a6985b7354df588d49c3cecf6fbe3c9ffa25daa7a8997f62d0d930cdf991141f86716d9cd5d3801a0904f7bdd44626af52a121","ssdeep":"6144:5rtBaxxwbgcninfS8z3H7Jjvv+S/IuhlD+Ekq7:ptBLkS8z37JjvvB/rLyU","tlshash":"fa242328f3340d61c453e53ca8ea1aa03ab127be9f5f5e88fbcc8f7727684406d44995","first_seen":"2026-05-01T07:54:46.168104Z","last_seen":"2026-07-18T16:19:42.31851Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1186,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/css/hamburgers/hamburgers.min.css","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.515Z","timestamp":1784391206515,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /css/hamburgers/hamburgers.min.css HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 687\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4129,"size_decoded":916,"mime_type":"text/css","magic":"ASCII text, with very long lines (3948)","md5":"5af11d8514ca1f6a75b354eb5577de38","sha1":"2817a1f628163e972c17d962e5a612437cbc297c","sha256":"820d8ee6c13f0039ad643db0fa0d4d00c925df7e6d9ff3c38c80467aa004ed18","sha512":"0dc545684c749d43d8be41ed58404eafaddf261d28e809e77d557021fa91b795ac734babf15a644127d65c408fe9cecedffec8c80bbee33cc827a878beebba42","ssdeep":"24:BljmahuXUOPxOPEOP0gYgxgf4JhHP8FqzRRsOOPxOPEOPNA3ODOTqOEN6+UOjYjI:HjsagfPFwUOsZGo6fuueMl7cv8","tlshash":"fc812bd4da403b64853bcf44d7ca9a50c23cc652bdf124cee3469987aa2351d6233f5b","first_seen":"2026-05-01T07:54:46.17486Z","last_seen":"2026-07-18T16:19:42.293752Z","times_seen":3,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/fonts/icomoon/style.css","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.519Z","timestamp":1784391206519,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /fonts/icomoon/style.css HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Nov 2023 13:23:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 567\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1992,"size_decoded":796,"mime_type":"text/css","magic":"ASCII text","md5":"50e6e9a11279b21477578323456c085d","sha1":"b404f1b6b8d9536f6cdce49940fc77fc319bdc9d","sha256":"9f916cfe54153ba0c78ec7f749dd54d5c401a4d3c75cab4f8b83cb59cd92a23f","sha512":"e5f556fcb8c60049ca2a33c666fdff8c8cac4dea3565dc05e9eb2269520fe0581b141b06c01f75849b405d2d1733a8d6183894ba3c87ad8cf927fd6700980c65","ssdeep":"","tlshash":"90416de0adbc18915311e4c462537620ff1ca2199c8b6c5ae6a3788cbbf2715c1d27ec","first_seen":"2026-05-01T07:54:46.148023Z","last_seen":"2026-07-18T16:19:42.322879Z","times_seen":3,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/vendor/select2/select2.min.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.745Z","timestamp":1784391206745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /vendor/select2/select2.min.js HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17604\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":66664,"size_decoded":17849,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32091)","md5":"e87ca4c3554f7b9e693605ce12d3a234","sha1":"fffd0bf48918d33bc612be1fefc120ee23b1a1ee","sha256":"fa659dfc6ebd4b8aad80fa304842c879502fefe16e2fcef55976a89605e7af04","sha512":"6e3f07135a4ac1c86860d8b3843e7b565e81f44c52db91f0db55b1a1013319aa4d3632d9d3e92044c127f4a4820fe8a06c4f7efdd24eef1e9984badd690e4fde","ssdeep":"768:6o14fnpUZnxyUsdSQmUFkrGBokOl/NxYTP1aFe7MMpQeznipGmZlnU0RNly:HeGnwUsdSNJkOZWfXLEGAzNY","tlshash":"ae53b748b9537235427f20f6656f040e2136bb7eb00a5aa8b458cde85ebdd14326bf3d","first_seen":"2023-03-07T01:06:24Z","last_seen":"2026-07-18T23:49:10.022258Z","times_seen":3637,"resource_available":true,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":565,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/images/design/Weddingseries/w7.jpg","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.791Z","timestamp":1784391206791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /images/design/Weddingseries/w7.jpg HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Nov 2023 13:23:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 284009\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":284009,"size_decoded":284198,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, manufacturer=Canon, model=Canon EOS 5D Mark II, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Adobe Photoshop CS4 Macintosh, datetime=2018:01:14 18:28:01, GPS-Data], baseline, precision 8, 640x960, components 3","md5":"83606778a46bcdd7eac46743bbeb72e2","sha1":"d4dedad6e3a991162b1ac5a09b13e344fddf8730","sha256":"369282d52c2b31782e8fd9bda9bbae26163dacd67e03d1380c39e60a4869a7c1","sha512":"db109ad4567f203eb8ce4e2572e5245aca2cdc9e3ea68384618f22a8d3acac0bb51cc625fa99245edb0619ecd38ebfd654b03a52a2375827a9df8aa6f39cdee0","ssdeep":"6144:jYL07rA8p+bW1GEYlMbQy1yHqdaegodc63ENwA5Su:jYL0vjpUWXYlSFwHcaydc63ETIu","tlshash":"6e54133ad8ecc9e3c6ded83458e542739b52976425f533aa357de8be770c2c40a08a4d","first_seen":"2026-05-01T07:54:46.160161Z","last_seen":"2026-07-18T16:19:42.334226Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1204,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/images/design/Weddingseries/w9.jpg","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.794Z","timestamp":1784391206794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /images/design/Weddingseries/w9.jpg HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Nov 2023 13:23:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 265590\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":265590,"size_decoded":265779,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, manufacturer=Canon, model=Canon EOS 5D Mark II, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Adobe Photoshop CS4 Macintosh, datetime=2018:01:14 18:09:38, GPS-Data], baseline, precision 8, 640x960, components 3","md5":"612c1775aba7508e674f79e2fc50a36a","sha1":"f94f16033be38c608840b5bda2be478dfa260f76","sha256":"540cd0da8d541a1cbbd4002383c030c300b283a70bf2cfa14c3d45db3ff07eb4","sha512":"9ecf28bbf7177ae58e3418bd16204aa238f9860316cba82f236b87bcf1af2ffffa90c78659ced5b9a6349167177a01a11e8794b604ba8edef78cf6eaa2bd5342","ssdeep":"6144:Wdq93FDYVVW4AQXuT4ZeL33eouj/OdGE416:Wg93UoWXuT1LeDbOdnw6","tlshash":"e24412f4ff44a87ec66900f338827020176649216f4fb74e30ad2907ef9e56a896e65d","first_seen":"2026-05-01T07:54:46.170563Z","last_seen":"2026-07-18T16:19:42.328031Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1242,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/images/design/Accessories/a1.jpg","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.795Z","timestamp":1784391206795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /images/design/Accessories/a1.jpg HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Nov 2023 13:23:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 218319\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":218319,"size_decoded":218508,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, manufacturer=Apple, model=iPhone X, orientation=upper-left, xresolution=150, yresolution=158, resolutionunit=2, software=11.2.5, datetime=2018:04:16 09:39:00, GPS-Data], baseline, precision 8, 640x853, components 3","md5":"36576da0e3c38b761b4b5b1e683ec30b","sha1":"af764358a21890f3a6d577604778b36ede70d180","sha256":"092ec0bb4d356b3d34f21043c3b59d5e8d1150b5e5f83794b04c42b405cb5e74","sha512":"bba5d70f7527d7d2f4ecc1333cb28665f304eb2de14e39ce1cec98935fdf17022aa01d33b220acafc67aeed87eb86bd4eacfd1ce9ffcd44d988ac47128231f53","ssdeep":"6144:6oLkK11PAC+M6bBN7GG9fHB+b3QpeBoffKu6aeKam:6oLkK11KRV9Dh+zQwBApZam","tlshash":"4f241226ed4b1972f6f2abf458874587f21813527edf1c54328cc9a77f11215b208ade","first_seen":"2026-05-01T07:54:46.200519Z","last_seen":"2026-07-18T16:19:42.329465Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1280,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/images/whitelogo.png","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.796Z","timestamp":1784391206796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /images/whitelogo.png HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Thu, 16 Nov 2023 13:23:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 454281\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":454281,"size_decoded":454469,"mime_type":"image/png","magic":"PNG image data, 5400 x 2392, 8-bit/color RGBA, non-interlaced","md5":"53a5a2eec3a7981ad9092f014b1d289f","sha1":"83d4325be765591c4026a1aad7c5f7600ba53db1","sha256":"9ea68e4ec07dff808098da2980fd5033514684f63161542c161e6b882407ddb3","sha512":"20ce775fae21defe93768e00f4964320a4d052ef2a468f8d8cf20d5af6ad1eee2c2f4adab2db4383680a2b45135a33f5f8f9491c23888e6bab274a9c0545aedd","ssdeep":"12288:dKloO/cEbKs20IAD0E+JWbR9T2Qm/FKCCYkFN:dKloCbKR0IAqW/kKY4N","tlshash":"05a4129baca7ca84ec8e7374d9b50f5e3b3e555e41e12761f3fca8a5dfc0a015909820","first_seen":"2026-05-01T07:54:46.21317Z","last_seen":"2026-07-18T16:19:42.335126Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1315,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/fonts/font-awesome-4.7.0/css/font-awesome.min.css","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.729Z","timestamp":1784391206729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /fonts/font-awesome-4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Nov 2023 13:23:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6658\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31000,"size_decoded":6888,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-07-19T01:16:54.554219Z","times_seen":299552,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/vendor/jquery/jquery-3.2.1.min.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.741Z","timestamp":1784391206741,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /vendor/jquery/jquery-3.2.1.min.js HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29485\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":86659,"size_decoded":29730,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32058)","md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-19T00:34:20.105653Z","times_seen":97596,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/vendor/countdowntime/countdowntime.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.752Z","timestamp":1784391206752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /vendor/countdowntime/countdowntime.js HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 730\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2841,"size_decoded":973,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"9f7c1f781d72385623259882bbfcf6c2","sha1":"94f04b927588dc2362dfac9a66add708e6cddf40","sha256":"680d7dccae0057987af6da8d83e6a49dbbd0d66ffe173471c47d3ac3caa8f71a","sha512":"bfc0c9b11ac693d14bdfcbf340744f45dee3052b454fae97ae67c5ea6a2d1a00e5c009efc841bc68f297653e71d985dba094111495069d0d7120a2085e882c84","ssdeep":"","tlshash":"1651ac2489530590adfa77a78f6e0299e364932315cbc65974bdeac01fb0944e48effc","first_seen":"2023-03-07T01:07:40Z","last_seen":"2026-07-18T16:19:42.301806Z","times_seen":152,"resource_available":true,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":613,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/images/logo.png","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.779Z","timestamp":1784391206779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Thu, 16 Nov 2023 13:23:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 58598\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":58598,"size_decoded":58785,"mime_type":"image/png","magic":"PNG image data, 300 x 133, 8-bit/color RGBA, non-interlaced","md5":"6c1a4e6488fa566771c08400c0c27da9","sha1":"8028f0e8aa5ae91a724d3c1c9132394f1d6d9057","sha256":"30a5851edb540b4422f15ba35ce5c2290afa1ad09308df0470118a2aeb8951f0","sha512":"af0de29158b9d88002cedd199d5e675b80acc380960585a37cfecbb7012f2bd95959f0dd9eabbe851fa63312bcd9300b29afd781405a2b006e0049489ab2d186","ssdeep":"768:Qte9z6RodQiflQfI/MrXeDFEuGfUb/4EVpklP5vc4A28AzJG8FvSCxxOsszdxU5h:Q3GdQiKI/eXeMULKxvIEAU3OsszdxU5h","tlshash":"0543e1044ef577dc502f583537b206ea887516d3f3a1ed80728d8c26df15baa2c3a598","first_seen":"2026-05-01T07:54:46.129108Z","last_seen":"2026-07-18T16:19:42.303753Z","times_seen":3,"resource_available":false,"data":null}},"time_used":636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/fonts/font-awesome-4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:27.062Z","timestamp":1784391207062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /fonts/font-awesome-4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/fonts/font-awesome-4.7.0/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\nlast-modified: Thu, 16 Nov 2023 13:23:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 77160\r\ndate: Sat, 18 Jul 2026 16:13:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77160,"size_decoded":77348,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-07-19T01:19:41.664991Z","times_seen":517810,"resource_available":false,"data":null}},"time_used":1079,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":180,"receive":899,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/js/main.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.740Z","timestamp":1784391206740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 750\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2269,"size_decoded":993,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0d5dc56e78dc86b2b1d57e320d46cf0b","sha1":"c8d45f555c49e3e40bdee20b068f4ce413f44122","sha256":"06b0d58ced5b99341ce3c7e9bb603e7442e8617de676d9c00cb5f1174ea3916b","sha512":"466a5ea655f9f5432de48c28e3ef9f54235aacddf68e85b7aafff7d7c97a7c6adb3d17b7d541cee5a45b77bfafca2a4359c31a3625a926c166c1a1f81a7f550c","ssdeep":"","tlshash":"7e41234630f16925107b90ba4bff91851b2cd113db4dd902b8ad16d05f4a25c72b37db","first_seen":"2026-05-01T07:54:46.202896Z","last_seen":"2026-07-18T16:19:42.300841Z","times_seen":3,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/vendor/countdowntime/moment.min.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.746Z","timestamp":1784391206746,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /vendor/countdowntime/moment.min.js HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16407\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":51599,"size_decoded":16652,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (51599), with no line terminators","md5":"5ff1de69e6fd137a6dd511205ea7c49e","sha1":"91a29a02cca99f32598f7b5764c610ab3cc89fba","sha256":"001564a706fd2bd3f1b9bbd1ac732493ac2659c207504f5e0713592d7610f389","sha512":"419fa651f350826ebb4ef5f375352a504886638e1d1394ef5d18197ba45d8e48d12fc99596da7fbc7530ec23f6f46c81706c2743971724200da8f3f43c9af0a4","ssdeep":"768:RmEj5IyZrV7dmUJ8/HhbmINN3vhg+XVspjiCumS5vcAKR1DC:wKxrV7d3g8ixXVspCmcti1+","tlshash":"cc3393ca3646b112176622b5083f490bf33d5959680f0d1df508e9e93979c6e827bfbc","first_seen":"2023-03-07T01:07:40Z","last_seen":"2026-07-18T16:19:42.312451Z","times_seen":911,"resource_available":true,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/vendor/tilt/tilt.jquery.min.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.754Z","timestamp":1784391206754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /vendor/tilt/tilt.jquery.min.js HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1681\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5640,"size_decoded":1925,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5640), with no line terminators","md5":"034d38aaa44f4ac1723c041d215eb146","sha1":"6dccde4d78b77b035d9da0396385ade6141864cb","sha256":"6951eec0a8c0c9b2eab72c4f579765e0f190165822919ddc791bb391096fd7c0","sha512":"bb52fb0e9dc12943f78228e0491a0c4cdc660e5ff9a3e5ce1eea70c1aee3b08d6b3331eb96548b2ac18e7ea8d897cbeb106fbc8219d13cd03f48296d989099a5","ssdeep":"96:H9HqJXyrg9U0S2VcjOB/MjvENOtnUz3FbyTXTyVyURCD3jgupRc:dH8yrbTIMjLtnUziXkRCYr","tlshash":"a7c140847111711e59cbe324d18b0e06a23ae0155c22a87d75fdc9edadbaccd127bfb8","first_seen":"2023-03-07T01:07:40Z","last_seen":"2026-07-18T22:51:45.136242Z","times_seen":2409,"resource_available":true,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/images/design/Fashionweek/f5.jpg","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.780Z","timestamp":1784391206780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /images/design/Fashionweek/f5.jpg HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Nov 2023 13:23:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 178033\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":178033,"size_decoded":178222,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 640x962, components 3","md5":"809829dcf9ce9b1007d8c8ef9a2c756f","sha1":"f98eded715caa0e2ce4004630faa0000cb7ec340","sha256":"5832a5a24f3e498458be892bb22e281012a4b1df631cc01145c3bcaf9793f1d5","sha512":"9b4a0a26757a30097a2cafe3d7ed9166e5333bed1bb3b3b211c7ceecfba9e612f699c0ccb9d7edf6c28b83b9df18dd24ada652a68d1146fec3e99b426d45a0c9","ssdeep":"3072:/dSHZ8vndCPiVwCBzko9rS0aXnto1bygdFBjp:gkIPiBgoRaXnDgdFRp","tlshash":"8c042375db0db5e093b435ce22b6df2a576a414ae70213b0e408b8b1be73f52d12b51e","first_seen":"2026-05-01T07:54:46.157528Z","last_seen":"2026-07-18T16:19:42.34696Z","times_seen":3,"resource_available":false,"data":null}},"time_used":747,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":635,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/images/design/Fashionweek/f2.jpg","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.781Z","timestamp":1784391206781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /images/design/Fashionweek/f2.jpg HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Nov 2023 13:23:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 177672\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":177672,"size_decoded":177861,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 640x962, components 3","md5":"b5124ec6a4367a69312671e8fa395979","sha1":"b37a73c375c93b36b4302f67ad4c2926f701f8eb","sha256":"5c73320f9d366c7f9bf0797a6bbf0bd8a60feb327965bfe675718fa89f55bf42","sha512":"f035c8aae9aef356378f265464f4be6c81253525b7b81eccd2c4d1147c5b54be3a39011bb7b04554f86d5580a90ac0f862e8c0aaeda5070e7e6b818c4a597020","ssdeep":"3072:uRtacywQWvzefBuNqOvqdbNEKoVDWyYBwITl3EvPUmqA7zxoMMm8:uRtlJRyZ4qOvqtC3Mx3EvPbaMMd","tlshash":"29041230c4e01ececa93ed9e07dadfcdc0eb83f850d739050a26557a69dd7690912769","first_seen":"2026-05-01T07:54:46.131833Z","last_seen":"2026-07-18T16:19:42.304711Z","times_seen":3,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":746,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/images/design/Weddingseries/w1.jpg","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.793Z","timestamp":1784391206793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /images/design/Weddingseries/w1.jpg HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Nov 2023 13:23:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 184607\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":184607,"size_decoded":184796,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9, manufacturer=Canon, model=Canon EOS 7D, orientation=upper-left, xresolution=142, yresolution=150, resolutionunit=2, software=Adobe Photoshop Lightroom 5.3 (Windows), datetime=2016:10:23 11:21:24], baseline, precision 8, 640x962, components 3","md5":"0d607fac1a231588e0092e2e39e149cc","sha1":"0869409167ee77a8d69ed3ced709d9aff5f15b46","sha256":"5afd763bfe476a8d5746fc62a4d5edcf3c71d77e9142159920a0be7e6c12709b","sha512":"f61057fec8afb34ebfb7a00d1cd649e8c4d90a2c2f2ee7c8073a027ca6c5a7eb3352f20543772e4ddd242caa323b9f4dff60eddd30dfc79751978be082875d10","ssdeep":"3072:6E7NWoBC7H1o38SDUVPiBN50qtTo0C8FtKcNiLhkFdXYjDJ6qHKa10G:3Aog7H1u8SDUNQnG0dFtnznXYjpKnG","tlshash":"1604125cfa66264dc0492c3afbe647c61af9c643ec10205ff26d18b59371cc89e672b6","first_seen":"2026-05-01T07:54:46.1379Z","last_seen":"2026-07-18T16:19:42.326213Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1226,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/css/aos.min.css","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.513Z","timestamp":1784391206513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /css/aos.min.css HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1561\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25983,"size_decoded":1791,"mime_type":"text/css","magic":"ASCII text, with very long lines (25948)","md5":"1691966fad1799cece5fedf5bbd55bfc","sha1":"24f1b72abaaaad1671e09dc6ff2bec00fdf6e8a1","sha256":"4f60551109a5502a1fb601b2b16872fef5232e7f92bac1c3b779a75e819d3f16","sha512":"7dd9561e625a8ac545302a54958249d18682808b9e088065d98670ba79fe512a4d1f99bb6ab4a9eeb4c5ab6b2c77e0f835167f100f374ebe7a1fdd5bd7870db5","ssdeep":"768:uIpCZYCU56uu98e8lSKyxwC0hSmWdMmc16KC5YRgZsk8Fs2MTck4hUSYjscsd8uI:uIpCZYCU56uu98e8lSKyxwC0hSmWdMml","tlshash":"1ec269497e4c9200af879b13629f2a0c5a35b549e530580abf3e36c52cc5ce77973fa5","first_seen":"2023-04-06T16:22:12Z","last_seen":"2026-07-18T16:19:42.292714Z","times_seen":1097,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/css/style.css","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.522Z","timestamp":1784391206522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5772\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35714,"size_decoded":6002,"mime_type":"text/css","magic":"ASCII text, with very long lines (886)","md5":"aef943ff7dd79c5e3b739f645737d317","sha1":"e76bbccd1c7701b8354130a3f4402b8c17f5a794","sha256":"ee318f004c860afbb34d71b2c876af9e66898ae207a6701cce595ef855537131","sha512":"3a70243190adcda9ec9858d8db6ac7c9503e96c11f4d3ae54f5f3f16706bbdc8f6bb12ffc266ee200db23ff4424e8b2b2e6f355167c84a61b777a533ceb5f0e7","ssdeep":"768:oTtU8qihst/d/ErxL1jwIFaOhmPGEAF+F2FVD0:WU8qiqO7NwMXA","tlshash":"89f29549931a3514b31791bcbbd78bac6b3a901bd60904fc74b69580cf5e78c923bf86","first_seen":"2026-05-01T07:54:46.091656Z","last_seen":"2026-07-18T16:19:42.349991Z","times_seen":3,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/js/bootstrap.min.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.724Z","timestamp":1784391206724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13378\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50731,"size_decoded":13623,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (50450)","md5":"eb5fac582a82f296aeb74900b01a2fa3","sha1":"fffea98e12e63b66693d567315a2f32392b780b0","sha256":"c5a17d46976d471cf060c5a0e25749a323d6ab20cf0910f40afed81047ba21ef","sha512":"60ad4ccfd52266685b1735e031b9776cee3dc19efc5e3de1f13b5304b147100123501c6c11975777c225e5159b84f3b207ae776c64033551869f2da639166ae0","ssdeep":"768:u2Ybgh0G45THVmcmjWSLlynS/zZ/AcyUr4Y8yiKKkHPPm26RoLQH/nIr6:u2jh03Lo+SbZ/AfYqkm2KIr6","tlshash":"3433b90a725478a201df9466513f450bb73b389eaa0b816cf95d98ed1e7cd89312bf3c","first_seen":"2023-03-07T01:14:49Z","last_seen":"2026-07-18T23:05:11.834049Z","times_seen":3350,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/images/design/Fashionweek/f3.jpg","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.782Z","timestamp":1784391206782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /images/design/Fashionweek/f3.jpg HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Nov 2023 13:23:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 135398\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":135398,"size_decoded":135587,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 640x962, components 3","md5":"2c4f0952c857b93662bf30deb630be9b","sha1":"d7b693c23545ce9c028ed78091cdae9f675af294","sha256":"f41f2a956ec5364e42fad245f74666930b1fc9def386c88ec277aeabbee86bd1","sha512":"610b258e560a12c694f10cb95fa48981a2304b255f3fd30cbb5655eda4650384b5f782fcc6cc6dde257dba67ac665b26d70a2f46caf8e123f2c33e3959876f17","ssdeep":"3072:SJacSaeDm7Qs7pQhzEgBLlqaxj2leYPuqW4zI6hmLDaX2KT+jLYj:Ea7ZIG5hBqaLGvI6h3a+","tlshash":"c9d3129918347fc6bb4cdc0e005880d1a2f01ab7d298ba2766b376d4b2dd2c45fb4db9","first_seen":"2026-05-01T07:54:46.195556Z","last_seen":"2026-07-18T16:19:42.313431Z","times_seen":3,"resource_available":false,"data":null}},"time_used":873,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/images/design/Weddingseries/w5.jpg","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.789Z","timestamp":1784391206789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /images/design/Weddingseries/w5.jpg HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Nov 2023 13:23:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 257157\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":257157,"size_decoded":257346,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, manufacturer=Canon, model=Canon EOS 5D Mark II, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Adobe Photoshop CS4 Macintosh, datetime=2018:02:18 16:31:30, GPS-Data], baseline, precision 8, 640x960, components 3","md5":"6af493131ebb2c4387a5d8fd1b3644e1","sha1":"ffe5794e228120125d99d7d86730376c155b552e","sha256":"70f78745329df4bfb476e4792d940947aba9417d2a48380e6068be4d6f6b8924","sha512":"d78ec33e90c3ab7d02dd3ae0df6423d03562afe6b787d148feefced667acc98c5b74728c72209df3bd0713e202766f8860881959eedc9f38ff18daf4328f0a7e","ssdeep":"6144:RqWgdLT5sniR8oeXBla+k4Ir3AXi029IRYvU6j7f1upVwq:RUd/UXBla+HIrwXi07qvUQ794","tlshash":"4f4423b4abb31de3c71f4b386ff06b14e0838a54d989a150b0ee752b5b0a552ed81297","first_seen":"2026-05-01T07:54:46.165752Z","last_seen":"2026-07-18T16:19:42.316823Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1160,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/images/icons/favicon.ico","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:28.148Z","timestamp":1784391208148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /images/icons/favicon.ico HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/x-icon\r\nlast-modified: Thu, 16 Nov 2023 13:23:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 32038\r\ndate: Sat, 18 Jul 2026 16:13:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32038,"size_decoded":32228,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 48x48, 32 bits/pixel","md5":"7d4140c76bf7648531683bfa4f7f8c22","sha1":"c072bf985086c9a05c7ecede6eedaa02f76a840c","sha256":"4d663e7a6b4e495a7261593d9d5e66489adbf75e029604ff6e65c4f0fcd97cd0","sha512":"8012a5d8fadefa58cc95c88398799b64c2588be2297b333fe8904e6850793b442451b4d89a11e841309d4cd5439c11ada9ba4c943852c1ea438eb6cbf01e9cd9","ssdeep":"192:mGsS23i205gseXXXXXn3nnHCC41BUAkfiDE2o/VPkoMKp:mGsS23iHLLCYkdFkoxp","tlshash":"b9e2981566e35f03ca06833c0f85d2741f33ed4d9536c3135ae1beab7abda936804669","first_seen":"2023-04-12T08:48:30Z","last_seen":"2026-07-19T00:50:20.457536Z","times_seen":493,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":180,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/vendor/bootstrap/js/bootstrap.min.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.744Z","timestamp":1784391206744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /vendor/bootstrap/js/bootstrap.min.js HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12421\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":51143,"size_decoded":12666,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (50904)","md5":"baaadea4492b059f284187d75af46063","sha1":"7326bf5e023f871afcf6ebb18cb89109f81a7708","sha256":"0e25895d7caaf355a53d19c37c69a06198f668e5422b211d27597ed93983b80b","sha512":"b56367cd0554d9e5d12103e2be34e304433b898db5d78439a4e04845168e413d90875024e3c5583cde3ed8aa68989a5c7ab37aa51163e65fb72e7c50d1db587d","ssdeep":"768:bVCSRfsdjHVpcKc2v5dTq7gBaBIzySppHcWFcXPv1mAaCcE1dLPmdwGmo:bVDROhicBaBD0pHcWFcfv1mrCcws","tlshash":"d633970a725474a202df6475917f050bb33b285de60a90acb99e94fd1ebcd8c7267f38","first_seen":"2023-03-07T01:07:40Z","last_seen":"2026-07-18T16:19:42.311171Z","times_seen":4174,"resource_available":true,"data":null}},"time_used":566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/vendor/countdowntime/moment-timezone.min.js","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.747Z","timestamp":1784391206747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /vendor/countdowntime/moment-timezone.min.js HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Nov 2023 13:23:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2512\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6017,"size_decoded":2756,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6017), with no line terminators","md5":"815209b1a2020b5cf4ed070ef41a6540","sha1":"5f189bd893458547f396225485d19db609cc6378","sha256":"c2795fbf648c3d76b2f15cb04644622f9cf2b098709f663476eee98367e4a046","sha512":"2dfb5a3305e4e833e7a4c805d2a4d7c2822b9ee92d23eb57353d9a72733dd40b60a57c06de82ac97cb92a5aeb351ed5884513665f54b1dca5be1aab0239661af","ssdeep":"96:VfrfRNOZaUY4DctsLVEy42CtwRkTdUSNUG0TRBEkqebWf/FI5uQN0YTQEINk1mJE:ZrfRNaax4DEsL45wyZUojWDEkluIEC9n","tlshash":"dec1c59d33a0787a8b8792b4d1bf540bb67a75152a0cc024f92ab8d17c34ae54377e3c","first_seen":"2023-03-07T01:07:40Z","last_seen":"2026-07-18T16:19:42.319842Z","times_seen":237,"resource_available":true,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/images/design/Weddingseries/w10.jpg","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.786Z","timestamp":1784391206786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /images/design/Weddingseries/w10.jpg HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Nov 2023 13:23:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 146981\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":146981,"size_decoded":147170,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, manufacturer=Canon, model=Canon EOS 5D Mark II, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Adobe Photoshop CS4 Macintosh, datetime=2018:01:10 12:17:33, GPS-Data], baseline, precision 8, 640x519, components 3","md5":"dcddd3cee78e6b35cbe8b8c928403f6a","sha1":"7da4ce9f290fa21f7746dd2a47701f497d025290","sha256":"b592f15d948d5c358ebfba26d8f4d3b62bb4ed863bddaa152cc974ef613ccc31","sha512":"953b95b9d599ec2b5f0d277a52326d5d68ea05b9bd5b2810a694e4ac40bf232fd0976f7b23f7130551fcb7b2f7b7af7a432cdd4d0efd28f4fe09e02c498697d8","ssdeep":"3072:qttF2SGBLM3puIM0Dcb1ULT31yD5KAX61W2esG0dfaSf91Tf9KLMF:gaBipuL0Dcb1UL5zO61WzsGOLTFTF","tlshash":"ece3120c5a821512eac496b82f409e988d67f51571d33bd8b8ec8ed5afcc3c01d5fa97","first_seen":"2026-05-01T07:54:46.198062Z","last_seen":"2026-07-18T16:19:42.291608Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1097,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1087,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/images/design/Weddingseries/w12.jpg","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.787Z","timestamp":1784391206787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /images/design/Weddingseries/w12.jpg HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Nov 2023 13:23:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 272337\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":272337,"size_decoded":272526,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, manufacturer=Canon, model=Canon EOS 5D Mark II, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Adobe Photoshop CS4 Macintosh, datetime=2018:01:14 16:29:13, GPS-Data], baseline, precision 8, 640x960, components 3","md5":"6030c48126fd1273a83e2766b2817a8d","sha1":"db1d36a8326e8e15e6cc70b35492ae01716c9d8b","sha256":"cfabc77671752aab44c3575be8bd23dfb65ae97fef1f9faf7169ba502a251a64","sha512":"aca94a97d2e5a9d9c28556e300ffd2b305ecb48c7e1ea17697f23d3fc590e2841ad10ffaafff2b0993bddb61a7b46505dcf5b5f6f2cdf610b5c69c4588c521a9","ssdeep":"6144:3jNfgmBbiPnpMSTdlBg4dD2xCnptpWDDlJ0UMiavifcWrWatN5YnkxstG5g:3jOmBbiPnpMKdlBNdDjptpWlKUMiaviA","tlshash":"614422b6df43d6ace70fda3cd0d6da0113da2a00b5db5193353e1d6bb38a368029845e","first_seen":"2026-05-01T07:54:46.210073Z","last_seen":"2026-07-18T16:19:42.309114Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1096,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pehnavni.com/images/design/Accessories/a2.jpg","fqdn":"pehnavni.com","domain":"pehnavni.com","tld":"com"},"ip":{"addr":"103.20.234.45","port":443,"asn":395092,"as":"SHOCK-1","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pehnavni.com/","date":"2026-07-18T16:13:26.795Z","timestamp":1784391206795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pehnavni.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 11:44:30 GMT","end":"Mon, 17 Aug 2026 11:44:29 GMT"},"fingerprint":{"sha1":"CA:05:2B:54:11:AE:45:F9:4A:A5:48:CC:01:F5:5B:E3:E1:A1:5B:95","sha256":"4E:62:CD:C6:F4:89:BD:BE:F4:46:34:BF:C4:FE:0B:F5:7E:96:FB:FD:48:07:40:EE:AE:10:F3:F3:C5:A1:5A:AA"}}},"request":{"raw":"GET /images/design/Accessories/a2.jpg HTTP/1.1\r\nHost: pehnavni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pehnavni.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 16 Nov 2023 13:23:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 212725\r\ndate: Sat, 18 Jul 2026 16:13:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":212725,"size_decoded":212914,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9, manufacturer=Apple, model=iPhone 6 Plus, orientation=upper-left, xresolution=142, yresolution=150, resolutionunit=2, software=11.2.6, datetime=2018:03:15 13:42:14], baseline, precision 8, 640x853, components 3","md5":"9f18507e4f5b634ceaebe8cd4d7e59a6","sha1":"712bfaf9e3a24d6c7701cc3c685323d32aff03c9","sha256":"a0245a5a100700a1ecdfea16c5c1fadc1e0809a06e7a661436dcf3d9980de9d0","sha512":"2e17958b71f02d3e11521c494a621b5736f98ac76760a614cf4299bdd77b0eaee0594d4d066364ea64866e0f46172d16ee24952ea2a15d2bcb0ae80686988a01","ssdeep":"3072:dlB/cqeDKFM0stj8NveFEZPRl2U9fiP+nVD/zlWW9A9wGM3ORebq9/pba:dwRj8ZeFclLliPaVDkJ9wf2pa","tlshash":"33241249f5291557dc449e383fc3c6e953b6e8a5f7822e7c326d811b2f4b18b8d882e4","first_seen":"2026-05-01T07:54:46.100558Z","last_seen":"2026-07-18T16:19:42.330971Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1293,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"pehnavni.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"pehnavni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}