{"report_id":"5ad124c0-7741-4179-a49a-ac8127774853","version":6,"status":"done","tags":[],"date":"2026-02-14T09:52:27Z","url":{"schema":"https","addr":"phase2-stable.app/","fqdn":"phase2-stable.app","domain":"phase2-stable.app","tld":""},"ip":{"addr":"172.67.218.212","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"activator-kmspico.com/","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"title":"KMSPico Tool | All-in-One Windows \u0026 Office Activator 2025","dom":{"size":122230,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12201)","md5":"467f330aa0a4b454a3a805ca769a11f6","sha1":"f2151aac3b3b2875820a503866975705088bb9cb","sha256":"655a8a8d2b0c5a232b2cd11f8391bf8f9795d00d7fdace588912fdd53600efa6","sha512":"ec01985369b8ab48ba43fdb97e856c20feb2d8ebc17c10f0e73d41edbd0ebc26bedb1e50ffeb05cd43c242280f38c88168dd50da73ec1c8c82e9be2c5a38f8e9","ssdeep":"1536:fQOypLqQe6gscR5SYmJpwxUS/kN+scOU3Wzx/+4DrWmZ040gp5Q+e610z6:fQnPBY/mQksgp5Q+70z6","tlshash":"66c3a523788d683a336f16cb80167b4db09aaeb9ea15c9d4f5f7401496f1cd233d3296","dom_hash":"domhash52125d04b71085d1afc449fbb4c0bc7f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"phase2-stable.app/","fqdn":"phase2-stable.app","domain":"phase2-stable.app","tld":""},"ip":{"addr":"172.67.218.212","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T09:52:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":6,"received_data":269498,"sent_data":3372,"comment":"","tags":null,"fingerprints":null},{"fqdn":"phase2-stable.app","ip":{"addr":"172.67.218.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-13T03:33:09.090676Z","last_seen":"2026-02-13T03:33:09.090676Z","alert_count":0,"request_count":1,"received_data":121892,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"activator-kmspico.com","ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"domain_registered":"2024-10-11","domain_rank":0,"first_seen":"2025-12-02T06:54:26.318744Z","last_seen":"2026-02-13T03:28:35.238949Z","alert_count":66,"request_count":33,"received_data":1180076,"sent_data":16299,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Yoast SEO:26.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:3.33.2","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":3,"received_data":140391,"sent_data":1745,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"activator-kmspico.com/elementor-frontend-js-before","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"30ef9f6040b123c3fdecc2797d47d0df","sha1":"4d8d5c279d41e7e21e0a624e1fd94d95770a8421","sha256":"65186dee51401761f875768f553e6107616dcf0e9dbe29099c2de9b69d7350e2","sha512":"402e37b7dba205d4ff55290bb158746de92c55b3872da3eec19de0372d63a6b8e889ff6012fc05fbc90536f737173f0650f0a80db64762b2613bbf7eccd410a9","ssdeep":"","tlshash":"b7818221f9456a3e83d39bb03917fa17586c0625c040b9a6f4ed486c14f2da9220bd9b","size":4022,"data":"","first_seen":"2026-02-14T09:52:29.958715Z","last_seen":"2026-02-14T11:32:01.867515Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.33.2","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"fdeda1afe7cf052ccfb845fd7a87faea","sha1":"791eb3bb4e6cd26741d80a461f3ee7efebed7f3c","sha256":"2e2fca448a762f1f61a4cd6a735d8a5ec25614db1fe7a29576e28103307e4b5d","sha512":"a9621e81522e5937d99eb54bb8a3424a90de8206c49d10a05803f7f4b3f948b3e40c94bc5080db8dac9d14f5fa44fe104026e681c37d2e74eaff950b51572452","ssdeep":"1536:SWxmDuqHrrUb3yQ5RSSYeAjA6c9CSTon2cI83Fi1mq9G4cR8+KAiA2gf6XSs8fay:E2ptE2rGAu","tlshash":"7373f8953152f8b60bfb41db902b4106f32619b8b41da498bff9dce19474d8a133bb39","size":79196,"data":"","first_seen":"2025-11-23T14:11:38.667752Z","last_seen":"2026-06-08T09:39:22.89165Z","times_seen":11055,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.33.2","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"ceb183b138eac316a5cb0741ec23696a","sha1":"c9fcfc71c8f7229d96289ba702eeffc7827bd7e9","sha256":"2464e81935f8e354704bfd7c9dc5b722b7c2c3456f325be881556bf351f762e0","sha512":"7fc177991c5640b9b0113881747c7af234e6c7cfdcd5ef6d4cb4e3e9b6823499183071a398c7e505b8796028200107ec83fe3194512cd6ba1809d4fa33ec7cfd","ssdeep":"768:D1c+6idHZRdPM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5Glr:ZcURdPMMBOBjmFatJR8RjD8/xHVlEEnV","tlshash":"61e208523296e866069f48a3f0231119f3765dd9b80bf0d5b2bcdce6a471e877362b34","size":31880,"data":"","first_seen":"2025-10-21T21:24:49.242369Z","last_seen":"2026-06-08T20:09:54.772203Z","times_seen":68138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.33.2","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"531a4c05fa30060b0f4ccc8cc0378af6","sha1":"5e1af547846d7b5caa8171f92637c06989177d1e","sha256":"1030dee6b293cd2f1331f5355130a5db48929f961ba7409a4d4ce83c73caefdd","sha512":"98a55db935daeda4a81fd735baf03e432f70921b48b31a0f2cc37af6562ddec1b9642ce1edac2fcf6547b174551e0a931cbbfee551290c027a8286eaa965beac","ssdeep":"","tlshash":"875103d37645d91f078370b2714b76a8d3130419a9cbd096c2a0fe621fb45eb723e619","size":2752,"data":"","first_seen":"2024-03-13T16:10:58Z","last_seen":"2026-06-08T19:26:03.888406Z","times_seen":32235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.33.2","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"4913f164c19428cc6084ea9cd544892a","sha1":"651110f7a0047c49a4a1b5862f2d2f3a2bf467dc","sha256":"a31567b34498e4680f7b5cf5fe2d13bd9f7c30b79089c3533ee7aa1586290723","sha512":"f7c74091f8698537479ebe785fef83a61523b828f805047466acc61b3d48db39bbd098395f784f349eb392f6b8c514921a90dd6989905dfba914d5ed1b4e3fb7","ssdeep":"96:+6sN0Z9Z4JfrjqoiNDmEl8OWZp5dfL0mAleNzwVeLUVU2j2KBKGarNcl8/2:JsNGyrjpiN4594mf0IQ9v7G/2","tlshash":"75c152941694fd2b31e139d8e01b9734652ec0337c1af981fa32dced64e4ed183aa532","size":5667,"data":"","first_seen":"2025-10-21T21:24:49.261004Z","last_seen":"2026-06-08T09:39:22.956983Z","times_seen":18942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-08T19:35:11.340355Z","times_seen":895864,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-08T19:35:30.278031Z","times_seen":825703,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/plugins/elementor/assets/js/lightbox.d1799e507b570f6b0496.bundle.min.js","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"73dc8543ce3305731518159b8ddd7258","sha1":"06feda490c856652a25a97cfb56b095874644743","sha256":"51f8e0773e52127041508b32644604f46a12e1c3fa7f0c21ae55840326ff0224","sha512":"06ac5f61db3bf629bd5d3298979913cb4bdb1aec90df2c1fa27dc36edde4e68485ec8833de0e8ddc6af68c22f17a442859018a7342e8b6dc4e5d5934878ae9b9","ssdeep":"768:Jtls5HuA61T3CdXuqFVOMalV7btPmPG5Wn5gvc/+87igKScBNFmnkT8vtZPpL/02:n25Hq5qrkMalV7btPmPG5Wn5gvTgKScO","tlshash":"a8d219a87002d07602ff0ddf7413c19c72999b96ea00e62db5b98c9744f1e85b73ab75","size":28829,"data":"","first_seen":"2025-11-03T01:57:16.43395Z","last_seen":"2026-06-08T17:05:53.306691Z","times_seen":7452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","size":8481,"data":"","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-06-08T19:44:13.354388Z","times_seen":124182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e434b0b4f43ec7216073eed1f3ffb51","sha1":"8d8a4ab1ed63889095bdf38ba646319b639feabc","sha256":"dd0ec57abf154d52c161fae92db6014f042417d9660679097ae55287041ec52e","sha512":"20978b9f1afc586c91351ef67791224fb5469004a1ebb5af608a05f643103a358e605d2c54cdba2174bc35c266ec963690d5d1fc3f80a045f4c33fc5f67b9ab7","ssdeep":"","tlshash":"6d110cf3b3dd907fbaae6d66193402cd6a1c90735c100a5bfeac3575cc8042538b1d40","size":922,"data":"","first_seen":"2024-04-08T18:49:14Z","last_seen":"2026-06-08T15:09:03.469239Z","times_seen":217137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-06-08T19:40:00.480331Z","times_seen":299076,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.3","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7c95a7a15037d6d426efc06ae6e0c81","sha1":"2ea08bc0eee97c4dd4d96fbcae022fd132ee3a11","sha256":"30770e96ca66d9f13e483db507cef243b0602cbd356bc98a0b5aebf89717bcd2","sha512":"50900d7d694920e757a4cd7ebbf0872bbc12c5dbf8ec68e43a9a6c9836fd2c4551f6975ce16ad301b05d4e1ab82c5632dacdce70973bec6fdb32408bf3cddb5c","ssdeep":"192:X4QA3vFKhXb66GBXiWV+tcqqLm1tlY2hI7a2pK1y6VTEZ+K0IGiwZ2uSneq1m+np:KE56BX9+tjqLm1tu2hlbJVT6bXk2u3qV","tlshash":"2b3295c5f185395647ff7034722f220a2337589ce4466d58bc29c4e169f8e8e12b6fba","size":11622,"data":"","first_seen":"2025-05-21T22:47:05.823896Z","last_seen":"2026-06-08T19:26:03.918553Z","times_seen":57415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","size":1348,"data":"","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-06-08T19:44:13.35932Z","times_seen":105957,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/csco-scripts-js-extra","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"477857728a10204777899766033ed1cc","sha1":"e7d97d177feeafb2915ed79f019ed3b1954d892f","sha256":"b8b5759795874685bdf41f7a64dd6b9ef19cb06560a08aa08c41645041d48a83","sha512":"9c8984022e6e3b01182fe8414f2075962d0e4de7be91842fb5ca0ac07e798382a0cdf563a1c5e1ea9fb4a5bc0c8f324656d4aa5e5cd69fccae69b5e14a94a264","ssdeep":"","tlshash":"95312b69de562beb31cfb931acbf0e5631ec38d0d1115206e4c8c01001a478dcc57908","size":1565,"data":"","first_seen":"2026-02-05T13:21:49.594188Z","last_seen":"2026-05-08T13:15:57.580625Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/themes/intro/assets/js/scripts.js?ver=1.0.4","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3de8f0bd624ab806de3d3cafc9ea2d4","sha1":"c4464ac5c443a3712a414d00251012f25115c33d","sha256":"b4392ab65dbe52515a602f5cc28421c7a6f6db56052005166dcc1f38a1ed4b99","sha512":"4380a3ad12b4d196fe1f6f8efdac537ef97f0df80687cac8416105dcffb42c336b07d451e9832ec0dd303daa5635cf011653224df34193bf24b5b2d822459ebf","ssdeep":"1536:PvYjtFIFMB1OsYKAiXs2rordMNb2kaVScv:sns","tlshash":"d643d664bf7c2d7341fbe09b868a46c9f23c50537041545a3d9ca9ac1fccda852adee1","size":60321,"data":"","first_seen":"2025-10-11T19:18:33.070486Z","last_seen":"2026-05-10T20:45:47.579734Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/plugins/elementor/assets/css/conditionals/lightbox.min.css?ver=3.33.2","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/conditionals/lightbox.min.css?ver=3.33.2 HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:52:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 23 Nov 2025 13:23:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1752\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11291,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11291), with no line terminators","md5":"34ebd61331a3a545c36f71e6946402e2","sha1":"5ec84226a24b89d8050e0d9520fb1036fb4c16c6","sha256":"89df2f778fd46d002df26b689abb4ce9169a17f46c19875bd0a32cf0a9dff785","sha512":"21ef5ca6be1f1d85a31bb82801591d32c136de5169ccccdc66ad169fa279019330fb6bdf3605d0872e6a01377faf09c16a55ac3ec065ec759db936b2872556fb","ssdeep":"192:4ia50WwyVeQ0Idf4cbO34LbOMVuu4L5UdcAeFAwMqu+YTFCgY0vyoEu:xWwyVeQ0IdfLbO3ubOMZ","tlshash":"213244127f435c2ab1af057b6853d3fd134899c89e41baa2f5a5800b90f6df2771ea80","first_seen":"2025-01-21T15:42:59.003033Z","last_seen":"2026-06-08T17:05:53.313027Z","times_seen":14877,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 09:52:06 GMT\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100764,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"c1a689e52451e6a409deb9d792dbac30","sha1":"d51f6f8ea1dfdf5fb4c0dcaf3c7978ce4d8eed75","sha256":"55960525d6ce04943c6bde176b9ab7c92f4a27666c7105e5b0d32a336ab1c0b2","sha512":"5839e22aaa92cf2407b1717f337de537822b89e5745d60a1db18ba779cbe19fbdc4266d89a73adba84f7005bc176eaa0d9294903992cf04e1be63072b6f7e675","ssdeep":"768:yDcDaDvDcDzBDFKDeDODO/Re/zUFhl114KF4zLFa+OgN7wNzaFLXnnGE3GzhFUQS:zO3YRSrslIxerANy3El","tlshash":"efa3eda1041b5040ab834ce223cfbe34fe1f92507151d0b9abfd9b6baddbd66526835c","first_seen":"2025-11-19T00:01:22.142754Z","last_seen":"2026-05-31T09:48:00.748269Z","times_seen":5838,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":83,"dns":1,"connect":9,"send":0,"wait":18,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 09:52:06 GMT\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22365,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"63c1df95a2b11b7542db5b48c56125f1","sha1":"b4116959b5ecbc00779addd320d98d8863692210","sha256":"7ead28f8032c788137532c3a88e9a7bda1411143e54ed4c066271c29f90340b7","sha512":"a5e42a035be607f6a98d7f73a26c37ad2e03a81dd0b54f2cc7bc5dc94a41b3b80af855ce9604e2b2283a7936df9008f068a8285c4cd8e4e960ab411c9c687d4f","ssdeep":"384:bvWLvKvXvUwvzv+vLWaZOUPSVsWJqtUghWVWInkUBALWWXYjUyvsHWm1iUz+54WD:bv0vKvXv3vzv+vLrZOuSVsMqtNhWV1nR","tlshash":"66a2bdd6486ba405ab870cc163dfbfa2ad9e5151a081c4becbfd2cb86cd6d32136075d","first_seen":"2025-09-17T18:46:03.2743Z","last_seen":"2026-06-08T19:36:19.291497Z","times_seen":16868,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":66,"dns":0,"connect":9,"send":0,"wait":18,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://activator-kmspico.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 00:51:52 GMT\r\nexpires: Sat, 13 Feb 2027 00:51:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 118814\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T19:38:09.432053Z","times_seen":206372,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":136,"dns":2,"connect":20,"send":0,"wait":8,"receive":2,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/uploads/2025/11/cropped-logotype-1-32x32.webp","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/cropped-logotype-1-32x32.webp HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:52:06 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 20 Nov 2025 10:45:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 456\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":456,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6453b87fe30e3845cfc0250dfce04231","sha1":"ec7f02d3d1531e28a9f7c2ef64fe4200b4c182ae","sha256":"4e63336474f3fc7731b1cae654d6be8b818d093cf3d8b44e4846505db262f938","sha512":"8953b06392b1559eceb975da1cee279e76df1fba28545393b6d6d69db95a0e92ff871caefff95a6f58e0abde2d767d53e9252518cd2a787b062dae5a84347330","ssdeep":"","tlshash":"3bf0237eb710848db29014ae50f5b7c0f1da85a5f83081ccb5e6542d020301be800344","first_seen":"2025-12-02T06:54:33.893804Z","last_seen":"2026-05-08T13:15:57.574455Z","times_seen":37,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/uploads/elementor/css/post-5082.css?ver=1770974756","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-5082.css?ver=1770974756 HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:52:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 13 Feb 2026 09:25:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1793\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33950,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (33950), with no line terminators","md5":"9482e2f69781479fd088b81159ce0e9d","sha1":"02c88170d60691dc52dcf9df698e50b837fc8b44","sha256":"a623127000f68d93548284990a68694dceed0fde36e47f5902bb981099236329","sha512":"ed4a6dd2a8573d5d4f8777260ba23f70237ee9b3fde1e6c7d74128fa5950dc64af045d58d4feecdf32fe37a086367a8132560b7eb9ff336d60df129c31e27ae2","ssdeep":"384:oJbJMJaKJp+bJeqEsb3UsTQJeFJXJ02cjLIZ5WcynjpI5xxWSpbqJZJ9J9JacQCs:q1WJQ1UU5pcQy9eBNsnTTaJ","tlshash":"52e26c643d8357a471af612fa403f68c2270dcd9c53d26daecb59013f5b5ca133eaa4a","first_seen":"2026-02-13T10:13:50.998219Z","last_seen":"2026-05-08T13:15:57.564949Z","times_seen":15,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.3","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.3 HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 23 Nov 2025 13:23:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3593\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11622,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11409)","md5":"b7c95a7a15037d6d426efc06ae6e0c81","sha1":"2ea08bc0eee97c4dd4d96fbcae022fd132ee3a11","sha256":"30770e96ca66d9f13e483db507cef243b0602cbd356bc98a0b5aebf89717bcd2","sha512":"50900d7d694920e757a4cd7ebbf0872bbc12c5dbf8ec68e43a9a6c9836fd2c4551f6975ce16ad301b05d4e1ab82c5632dacdce70973bec6fdb32408bf3cddb5c","ssdeep":"192:X4QA3vFKhXb66GBXiWV+tcqqLm1tlY2hI7a2pK1y6VTEZ+K0IGiwZ2uSneq1m+np:KE56BX9+tjqLm1tu2hlbJVT6bXk2u3qV","tlshash":"2b3295c5f185395647ff7034722f220a2337589ce4466d58bc29c4e169f8e8e12b6fba","first_seen":"2025-05-21T22:47:05.823896Z","last_seen":"2026-06-08T19:26:03.918553Z","times_seen":57415,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T09:52:05.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 14 Feb 2026 09:52:05 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Yoast SEO:26.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:3.33.2","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}],"data":{"size":121210,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12201)","md5":"d74f3a3752a2a6cfbca5133654f9a84f","sha1":"256f93ce1462f5e3df854a247ad79f901fb130b3","sha256":"1230b9ed9b861e93ecc449311a1cbfd2c1f4ccaa9c86b3bccdabbcdd6e230afe","sha512":"6aab60ad3433c6cbbfb9a89612110c3f9439e8db4cc2ccad5d90dd182a234105c538046f9b7dfbfca438d9ff67d60929bd48b6b47a1bc95aca5449ca93bcb64d","ssdeep":"1536:56Qyp3qde47990dYS2pw38gf2McKcOU3Wzx/+4YBlmZJN0gpnQ+e610zh:56RITIKSFL8gpnQ+70zh","tlshash":"3cc39523788d683a336f16cb80167b4db09aaeb9ea15c9d4f5f7401496f1cd233d3296","first_seen":"2026-02-14T09:52:29.941377Z","last_seen":"2026-02-14T11:32:01.844059Z","times_seen":2,"resource_available":false,"data":null}},"time_used":889,"timings":{"blocked":154,"dns":72,"connect":36,"send":0,"wait":580,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/plugins/elementor/assets/css/widget-spacer.min.css?ver=3.33.2","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-spacer.min.css?ver=3.33.2 HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:52:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 23 Nov 2025 13:23:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 287\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1793,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1793), with no line terminators","md5":"c329a1f8486b82d9b9c7cb4d7060f346","sha1":"85b874b1c09c4f163738d439cacd53e6141f4f2b","sha256":"808a659eb4e85607c6efe022bff149c3076853c5570a322bd35e5e8cb9458904","sha512":"414974a35c9d401df85422ca92e886a3e0b57c6cd071023dd97d2987157fc9976d777d7b44c0c8d4a8caac81b0c1b862828bdaa67e5b05345894964a1dbe81a4","ssdeep":"","tlshash":"3731f650bd07662c787fa60f8413129c658494dee581ccc6dba1f60aa2fcde33336935","first_seen":"2025-04-08T12:29:44.439106Z","last_seen":"2026-06-08T19:53:34.377705Z","times_seen":32729,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.33.2","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.33.2 HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:52:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 23 Nov 2025 13:23:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 126\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":560,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (560), with no line terminators","md5":"c3be9e612baf8fc4af612de8af4c0864","sha1":"f6b1366e30a459deefca035c5563f1c929c8ed10","sha256":"f68e889145cb0e47b7b190b2fdf087a9213a264ad33951512880c9f8bb6d0cd8","sha512":"aee455fe10d8126deb4d1015b6b4450ace4851e5b32890505af619f7863469c56b788b5d822849986759aa85efde260da77ed12bbb236ce2bf6629bf6759f4ca","ssdeep":"","tlshash":"f2f0c0237e4b94aa383f1d571083337c74944ec893a0a8d8e9fa91435cf4cb27330622","first_seen":"2023-10-14T23:00:09Z","last_seen":"2026-06-08T19:44:13.369379Z","times_seen":99438,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Inter%3A400%2C400i%2C700%2C700i%2C600%2C500\u0026subset=latin%2Clatin-ext%2Ccyrillic%2Ccyrillic-ext%2Cvietnamese\u0026display=swap\u0026ver=1.0.4","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css?family=Inter%3A400%2C400i%2C700%2C700i%2C600%2C500\u0026subset=latin%2Clatin-ext%2Ccyrillic%2Ccyrillic-ext%2Cvietnamese\u0026display=swap\u0026ver=1.0.4 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 09:52:06 GMT\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15204,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a96398ece685c33dbf3254c61c6c5053","sha1":"42fa120801ee5bfef42a51754d24b8012b096a6e","sha256":"41e2bfe95d2301870a43ef8f90d5e2be4ba344dc80748614bcf59dbaee1c7ff2","sha512":"0863671529ad287acd5dd3f23fc67655dea16cdf31311ee8b8f1e4811bf72eeb24e76151d825d7250a27b547b157f75fd044e72989a7b630ae0aefeb3adf0ca2","ssdeep":"192:vORfO3OyO53gOaODVOfrRfr3ryr53grarDVrNNNIxO34OxDENOPCO3/Nx8NNryfT:vofefygBu0Nfbm1gelTXuM0p2+4","tlshash":"4a62cb92002be500ab931dc233cf7e3aaece10996486d1b95ffd0dc96cdad66436875d","first_seen":"2025-10-19T14:48:49.143736Z","last_seen":"2026-05-10T20:45:47.56945Z","times_seen":44,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":120,"dns":0,"connect":8,"send":0,"wait":19,"receive":0,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://activator-kmspico.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 00:51:52 GMT\r\nexpires: Sat, 13 Feb 2027 00:51:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 118814\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T19:38:09.432053Z","times_seen":206372,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":93,"dns":3,"connect":7,"send":0,"wait":11,"receive":2,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://activator-kmspico.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18720\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 00:46:30 GMT\r\nexpires: Sat, 13 Feb 2027 00:46:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:30:42 GMT\r\ncontent-type: font/woff2\r\nage: 119136\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18720,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18720, version 1.0","md5":"2c753ee2983cf76ffeefa20db25a70c3","sha1":"13e20767faf339db1eb3b75b329e00f6d1b483fe","sha256":"28d124cbfadb7765f74a5688577c956ea3dd70f585b4645b2dc132742cd4c319","sha512":"0c9d6b356984e0f502a4a7ed99aef38621a53a580ceab2f1cb3f4f8d923f295891db0aac9eb2563541369a517e53def5b883a846eac8e138c169cd913044c8d7","ssdeep":"384:bNd6oCG7QqLLDPkev3w0zjoO9ETU1yZHG+2EuEn3iQ4:ZwozcqLLDM8Xf9ETU1yIzEuE3il","tlshash":"8982d0c11485e23c8e7c9ebb6a54f2b3acdb1238fed4371437127796504845b947a8bb","first_seen":"2025-09-10T18:13:11.027375Z","last_seen":"2026-06-08T20:06:19.576148Z","times_seen":9824,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":34,"dns":1,"connect":7,"send":0,"wait":14,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/uploads/2025/11/office-40x40.webp","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/office-40x40.webp HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:52:06 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 20 Nov 2025 03:31:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 720\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":720,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"af1c673ba2f5886c017301c55d06f656","sha1":"cb8a41a7b41db515aff2819fb062527a0ffbdbca","sha256":"3fc886d14ea6670dc4c7d9de66cff7e8daa8d8ff17e4c32dd0c83ae9561b4826","sha512":"d109dbd4a428689853232fb19d96f55bd1acc4512dacca6b27d2a4f561c75ae3548762322631b077f3ebed468017b0034366bdacaccdb1f62dedff9776590b19","ssdeep":"","tlshash":"6d01605c89de201acd146b08a174b59cc06a31e64810b14213f2d5b3b4b58a22cbf8ac","first_seen":"2025-12-02T06:54:33.8911Z","last_seen":"2026-05-08T13:15:57.568265Z","times_seen":36,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/themes/intro/assets/static/fonts/Satoshi-600.woff2","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/themes/intro/assets/static/fonts/Satoshi-600.woff2 HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:52:06 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 20 Nov 2025 00:11:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 42588\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42588, version 1.0","md5":"70880e42f07b0386e261974cd14820a1","sha1":"2d34d398b398a7fd88d21fae7642cdca908bf3ee","sha256":"e739aff9b4d02c264341d6d4872edcda28e79373aeda936f659566a1cd3eb47f","sha512":"6a5cb0cbee5f49a4b96df82bc37f3f2aa7abbc8fdb304962a3f492c7f63772b81e753a86e01da2a7a74785cf3196795408065e0bf30695166311e324d813d83c","ssdeep":"768:LRuvvUK4d5TnqQ8Wd3PDjhbDERazTlYv2zypgb0Sj0a7OpBUroBTy1gvK2jbx:9ukK4rzn3PPeRElO6ZVj0a7O/3g1IZx","tlshash":"d313013c8972d7b2bddb203b7cc0b6652494576962b0b2bec096093c80a467db18f733","first_seen":"2023-06-27T05:49:32Z","last_seen":"2026-06-08T15:05:40.633046Z","times_seen":2130,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/uploads/elementor/css/post-14.css?ver=1770655100","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-14.css?ver=1770655100 HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:52:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Feb 2026 16:38:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 325\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1167,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1167), with no line terminators","md5":"1ac584d06e5c21ee46cab81b07df3d09","sha1":"9eae77ef828544cb0de546d77d4531b43d0a877f","sha256":"23eaa3849e2484ccbcda76de1b0a6ddb81001135436fe28bfbe5c4e7a33e324c","sha512":"b79d7495b36bc2154f48c33fa11740b01dbb5cdbc5aaae606e5963a217422970a120852531ecd6bb4fd11721f7d75890bd2943f5d43011567402d889b5110505","ssdeep":"","tlshash":"4e2145457a23d435917b093f91d3b02c012cd45fa25fcddff41d8249f9bea0a6228647","first_seen":"2025-12-02T06:54:33.878612Z","last_seen":"2026-05-08T13:15:57.561227Z","times_seen":36,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 09 Feb 2026 16:32:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29744\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-08T19:35:11.340355Z","times_seen":895864,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/themes/intro/assets/js/scripts.js?ver=1.0.4","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/themes/intro/assets/js/scripts.js?ver=1.0.4 HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 09 Feb 2026 16:32:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11894\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60321,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"e3de8f0bd624ab806de3d3cafc9ea2d4","sha1":"c4464ac5c443a3712a414d00251012f25115c33d","sha256":"b4392ab65dbe52515a602f5cc28421c7a6f6db56052005166dcc1f38a1ed4b99","sha512":"4380a3ad12b4d196fe1f6f8efdac537ef97f0df80687cac8416105dcffb42c336b07d451e9832ec0dd303daa5635cf011653224df34193bf24b5b2d822459ebf","ssdeep":"1536:PvYjtFIFMB1OsYKAiXs2rordMNb2kaVScv:sns","tlshash":"d643d664bf7c2d7341fbe09b868a46c9f23c50537041545a3d9ca9ac1fccda852adee1","first_seen":"2025-10-11T19:18:33.070486Z","last_seen":"2026-05-10T20:45:47.579734Z","times_seen":51,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/uploads/2025/11/windows-40x40.webp","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/windows-40x40.webp HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:52:06 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 20 Nov 2025 03:30:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 514\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":514,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ff2be751003ad59a53337fa5a293f0d8","sha1":"816d7c0bf9cc820491d7f8f2e34bf098cb289e76","sha256":"99b364c3e0abdb9770370173f44ae736e5f450203292016a3a98a954b8000843","sha512":"3cf26cd800aa104a74ef38ff86ee613a216a531ceb73b9fd59f6cd3bc3e34543aee7e14b4d5b0c081c0e8174f9e35e372bc398f8ee06daf61037eecd19ab75a8","ssdeep":"","tlshash":"13f07e80a2ba1ccdde417e3cc1383fa8e1368ca0c3e030f0641c012705c6a7386c21eb","first_seen":"2025-12-02T06:54:33.886516Z","last_seen":"2026-05-08T13:15:57.553385Z","times_seen":36,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 23 Nov 2025 13:23:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2511\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8481,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8481), with no line terminators","md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-06-08T19:44:13.354388Z","times_seen":124182,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-stable.app/","fqdn":"phase2-stable.app","domain":"phase2-stable.app","tld":"app"},"ip":{"addr":"172.67.218.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T09:52:04.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-stable.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 12:39:36 GMT","end":"Sat, 28 Mar 2026 13:37:15 GMT"},"fingerprint":{"sha1":"5F:E0:8B:92:C6:30:67:35:D1:31:D1:5D:BD:0C:C7:E7:1A:0F:86:83","sha256":"53:13:91:06:6E:7E:A8:67:78:99:83:C7:4C:DA:23:6A:C4:56:37:D4:E3:9B:6E:CC:08:49:1B:A8:A5:86:83:0A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: phase2-stable.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 14 Feb 2026 09:52:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://activator-kmspico.com/\r\nx-redirect-by: WordPress\r\nserver: cloudflare\r\ncontent-security-policy: frame-ancestors 'self'\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FOEH7aBXMtk1aEKlyFFHe0jPx%2FlmFAdWd1IxhSdW1vzQaoBpEdrDprfSZsKprkywwSQkCpdV78sETd0D9SP%2BPyg7Kn2nx%2FgY5rXxNWKJBdWv\"}]}\r\ncf-ray: 9cdbabac7b97527d-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":121210,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":639,"timings":{"blocked":76,"dns":48,"connect":8,"send":0,"wait":480,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/themes/intro/style.css?ver=1.0.4","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/themes/intro/style.css?ver=1.0.4 HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:52:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Nov 2025 09:48:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 46759\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":461097,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (426)","md5":"2757041e6bce55ce263301ede200bf6f","sha1":"cfaa40e2333577d65db4d119b88f27112d92f5e8","sha256":"644d4a85c5e8b551303690b4217df08ad9be0f36c2ed9b0f83a4556f5b6cca30","sha512":"0f33a920a31aae6cae1d7795577e51978405acdcb59b18845cab5692f1b1d0f826b0eb35a55cd29cb0cb3e33d33dc6f4ddb4474ccd791f131d03dd5ac0c9ee0f","ssdeep":"12288:Ug3lwQoO1L44YJb28jqJ20wrOZ3EeQdQ4WoTkAmGJnCi0Mc8Zqtb0hW9emZnX:H","tlshash":"cca4b601ff319df06937e3156b8d9f58f74c5442be1a1edab692d06882c82fd068e74a","first_seen":"2025-12-02T06:54:33.88088Z","last_seen":"2026-05-08T13:15:57.545418Z","times_seen":36,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 09 Feb 2026 16:44:31 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6812\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-06-08T19:40:00.480331Z","times_seen":299076,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://activator-kmspico.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 00:51:52 GMT\r\nexpires: Sat, 13 Feb 2027 00:51:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 118814\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T19:38:09.432053Z","times_seen":206372,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":79,"dns":1,"connect":7,"send":0,"wait":9,"receive":11,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.33.2","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.33.2 HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 23 Nov 2025 13:23:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1072\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2752,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2751)","md5":"531a4c05fa30060b0f4ccc8cc0378af6","sha1":"5e1af547846d7b5caa8171f92637c06989177d1e","sha256":"1030dee6b293cd2f1331f5355130a5db48929f961ba7409a4d4ce83c73caefdd","sha512":"98a55db935daeda4a81fd735baf03e432f70921b48b31a0f2cc37af6562ddec1b9642ce1edac2fcf6547b174551e0a931cbbfee551290c027a8286eaa965beac","ssdeep":"","tlshash":"875103d37645d91f078370b2714b76a8d3130419a9cbd096c2a0fe621fb45eb723e619","first_seen":"2024-03-13T16:10:58Z","last_seen":"2026-06-08T19:26:03.888406Z","times_seen":32235,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/uploads/2025/11/cropped-logotype-1-192x192.webp","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/cropped-logotype-1-192x192.webp HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:52:06 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 20 Nov 2025 10:45:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2088\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2088,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9cdfdc5e2ef83bb41c4a52c71d0ffe04","sha1":"86c0ef4be350daba44fc28b8705bf3e20e75bd89","sha256":"13e4d2c72f09189036af2a5fb1ae61b1ff705f45d64e5dcc606be5bba61ff3b7","sha512":"7754ccef7765ea84f5b7318aa29cb08dacf87ff6aa6917c98cd2d6023009559b12e8997ac87445d4e3025160643264256b249e3aaa0ce1f51426032e51e22e75","ssdeep":"","tlshash":"e9411a6585d2ce6bff61989c87f22558f4d4eba107249e55f74c0e8d81968fc5c33070","first_seen":"2025-12-02T06:54:33.901591Z","last_seen":"2026-05-08T13:15:57.543336Z","times_seen":37,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.33.2","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.33.2 HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:52:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 23 Nov 2025 13:23:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6536\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53644,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53644), with no line terminators","md5":"c4cab6ce02bfe39b6ca982696e560b67","sha1":"87b0108f3629c4c414c85de97cfb75317ad6adfb","sha256":"06e84209875d1e31571804879630569f122b42777432c1d13f4f5e582b350858","sha512":"d3998663072fc34aba7ae27f4d01887d398f5953dfd4c8cdebfb0b5646fedad182b28b4e90d6cf9de5743254b9295793819858d003583f62e01e15de69d370e6","ssdeep":"384:5srJS/vmyeUaEMoZ0qk0e/RmRC5Cz9TfikvmGkvmCFldlRaE2ks05ArOk:HLRdL2t7RllNX7s05Xk","tlshash":"9933fb623d13b269226f442b82d7364c526495c1ee4376d9fa04c5239afece63b36c1b","first_seen":"2025-10-21T21:24:49.20435Z","last_seen":"2026-06-08T19:24:07.132676Z","times_seen":23402,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/uploads/2025/11/banner_mstoolkit.webp","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/banner_mstoolkit.webp HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:52:06 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 21 Nov 2025 04:19:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5544\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5544,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3b5258a3147733ff2497e4cb2e93e7d8","sha1":"aac8af5f8c0d21ff794364633a533d01c4b2ab80","sha256":"9dd74bcd006df1179260bd9ff07c9dce75fbf56c22a4cea79304302766ae93f9","sha512":"e2e8251f5ad0e6bf0837d472c9d63146d84cb1728555322ba3ffc571a701905428e7a48a03ebf74f19c9d2f8f09b0b8081b7b14316cab170dac21a3c2048228e","ssdeep":"96:t6PAUfl6mWI2sBeKlqNxuvOFCJj/EmiiP+JdwBjSlUCiJ8e54IQNWrD:g4UcmWI92xv4J7EmivajvV8eeI02D","tlshash":"73b19e9233311632af98b4360aa0da64695e125f7b62314b1467c870f61fcd2dd4ac50","first_seen":"2025-12-02T06:54:33.874911Z","last_seen":"2026-05-08T13:15:57.577867Z","times_seen":36,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/uploads/2025/11/logo-black.webp","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/logo-black.webp HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:52:06 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 20 Nov 2025 01:42:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 904\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":904,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c676af5f803af8ae6e511d94a6aea9d3","sha1":"ed65adb6cbd032007e45e13489b3ef42fd59a3e5","sha256":"f2a0c1223f6fa75df8657981ae627473d8365f6e38cb0df2ecbc0a87fe92902c","sha512":"969b8b5dba8ac2f52423b4593641d8376ff36e8df5e90e7280446bdc568a33e629cd5a4966cb7a6ef4c8310f1fd4c5a0271660269df07349def5dba18f14dbc9","ssdeep":"","tlshash":"d61196ffa2a9ee05ec4ebbb2e41e8a588c10547c9ff81e4a0c940e0132b030d699ca44","first_seen":"2025-12-02T06:54:33.885004Z","last_seen":"2026-05-08T13:15:57.555863Z","times_seen":36,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.33.2","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.33.2 HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 23 Nov 2025 13:23:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10035\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31880,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31880), with no line terminators","md5":"ceb183b138eac316a5cb0741ec23696a","sha1":"c9fcfc71c8f7229d96289ba702eeffc7827bd7e9","sha256":"2464e81935f8e354704bfd7c9dc5b722b7c2c3456f325be881556bf351f762e0","sha512":"7fc177991c5640b9b0113881747c7af234e6c7cfdcd5ef6d4cb4e3e9b6823499183071a398c7e505b8796028200107ec83fe3194512cd6ba1809d4fa33ec7cfd","ssdeep":"768:D1c+6idHZRdPM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5Glr:ZcURdPMMBOBjmFatJR8RjD8/xHVlEEnV","tlshash":"61e208523296e866069f48a3f0231119f3765dd9b80bf0d5b2bcdce6a471e877362b34","first_seen":"2025-10-21T21:24:49.242369Z","last_seen":"2026-06-08T20:09:54.772203Z","times_seen":68138,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/themes/intro/assets/static/icon-fonts/icons.ttf","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/themes/intro/assets/static/icon-fonts/icons.ttf HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/wp-content/themes/intro/style.css?ver=1.0.4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:52:06 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Thu, 20 Nov 2025 00:11:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9171\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15136,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icons      ","md5":"fb9ec093c7bb04d4861c4c7d13106a29","sha1":"206af68c876b79ae13534605d62c3b7199ffea5c","sha256":"c74dbf478fa9f40aebfe4b1b8c0f0ed5ee2fa9e8c7f8c6d88d8f8310542274b0","sha512":"b48136900b660bbb125a56c8a25b35555c3febe1984f5dd4d1912b978fae2e31a96d56807f9d636b10c47fa983577f9d19abf2a7bd5e95f7dbde52239f85a9d5","ssdeep":"192:xRfFlJSSKP+Ai9+PGda5UI+XuYoYaGzLvEnLb7woobnBV2vR9o9U6F+VvkkPxxx+:vfHJSSK9io2a575pEaMLS16gEt","tlshash":"e0620707579aef8bd962b2761c42a1234ee6ed018b3bd743244a8d81a1155fc0d3cfaf","first_seen":"2025-10-11T19:18:33.100549Z","last_seen":"2026-05-11T21:17:43.406021Z","times_seen":55,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://activator-kmspico.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 00:51:52 GMT\r\nexpires: Sat, 13 Feb 2027 00:51:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 118814\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T19:38:09.432053Z","times_seen":206372,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":37,"dns":1,"connect":7,"send":0,"wait":8,"receive":6,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/uploads/2025/11/KMS-GUI-ELDI.webp","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/KMS-GUI-ELDI.webp HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:52:06 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 25 Nov 2025 13:05:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23538\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23538,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f6cd71c3cc8bd4dc8a70a6154f5dbef2","sha1":"32c5c2c4d3d5f9b9e6cc17462906bb9d1ff7889d","sha256":"d242067961903f84fb5af28233f4487ddf6c58daeb1999c6647322ffccbcb81a","sha512":"16927a3734de4493a73268d320030186c2d6c0f322d19fc7b1a58a1437246f7dd41e309c702bf4ce692c7fddfbcd965d169c3077d9639af40a1fe321fc1e0f2a","ssdeep":"384:bpKaVcZmMmtZKzenMGyX2X22GBiatVjHk0WmILSydoZ7RBk3O3vPfWMRyhLUT6cG:bYbADKzeMD2mvk0jEbF+tRv3vWMmLUTa","tlshash":"a0b2d19cadc7a8d9d7b146f8230d16082151f2e159cad170f25ac76baa10bc92fc728e","first_seen":"2025-12-02T06:54:33.891894Z","last_seen":"2026-05-08T13:15:57.540777Z","times_seen":36,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/plugins/elementor/assets/js/lightbox.d1799e507b570f6b0496.bundle.min.js","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/lightbox.d1799e507b570f6b0496.bundle.min.js HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 23 Nov 2025 13:23:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8943\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28829,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (28829), with no line terminators","md5":"73dc8543ce3305731518159b8ddd7258","sha1":"06feda490c856652a25a97cfb56b095874644743","sha256":"51f8e0773e52127041508b32644604f46a12e1c3fa7f0c21ae55840326ff0224","sha512":"06ac5f61db3bf629bd5d3298979913cb4bdb1aec90df2c1fa27dc36edde4e68485ec8833de0e8ddc6af68c22f17a442859018a7342e8b6dc4e5d5934878ae9b9","ssdeep":"768:Jtls5HuA61T3CdXuqFVOMalV7btPmPG5Wn5gvc/+87igKScBNFmnkT8vtZPpL/02:n25Hq5qrkMalV7btPmPG5Wn5gvTgKScO","tlshash":"a8d219a87002d07602ff0ddf7413c19c72999b96ea00e62db5b98c9744f1e85b73ab75","first_seen":"2025-11-03T01:57:16.43395Z","last_seen":"2026-06-08T17:05:53.306691Z","times_seen":7452,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.33.2","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.33.2 HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:52:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 23 Nov 2025 13:23:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 96\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":214,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"12045858d487a8ae56337b554a5ee03c","sha1":"f002d465c77cc210b1a049da21d2d8dfb4bba080","sha256":"fb8690e594b2f9b841585895d811e8cb839667a1a63963d1a1cdea11e2aa2abb","sha512":"2d50371adad63f2b9b384b10b87546b85344fe46560b65f9321100515c257e6a147e1353946f8ef5c4300827a41ce6641c3cedc82c9f63847874c3aae39485ac","ssdeep":"","tlshash":"b2d0c901792783c6302f896926ab669e39d01dddf246db90aca166165abecc82772160","first_seen":"2025-01-03T10:53:39.937643Z","last_seen":"2026-06-08T19:44:13.364635Z","times_seen":96092,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/uploads/2025/11/banner_kmsauto.webp","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/banner_kmsauto.webp HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:52:06 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 21 Nov 2025 04:05:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7124\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7124,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4597b5d11599d99989b39e6c6103810e","sha1":"b8bb5068cff63367b2ff29a01d2b20726bef3f70","sha256":"7098815a05a89b81b2fee63fc44b4c41f7476cf8b7004fdcd20a0fe8c0817a58","sha512":"8456fbc17f3b2ab39f78f47e3f25c3cb8277f07ecedea293adef9d81b69cb08c5f58728608d490c56d8df42b24aacbe411333ad2e77dc754b2fedeb19e81bf35","ssdeep":"192:bQANLwlC8AAc+i397XLVk0EPgMBgzeTHw:bQAqxfc+i9ZUIMBgzeTHw","tlshash":"25e1af9cff5233d8b24d6871ec12b594f213540dfbb49a813621ccfc74b22a888434e4","first_seen":"2025-12-02T06:54:33.884158Z","last_seen":"2026-05-08T13:15:57.533813Z","times_seen":36,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.33.2","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.33.2 HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 23 Nov 2025 13:23:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2251\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5667,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5667), with no line terminators","md5":"4913f164c19428cc6084ea9cd544892a","sha1":"651110f7a0047c49a4a1b5862f2d2f3a2bf467dc","sha256":"a31567b34498e4680f7b5cf5fe2d13bd9f7c30b79089c3533ee7aa1586290723","sha512":"f7c74091f8698537479ebe785fef83a61523b828f805047466acc61b3d48db39bbd098395f784f349eb392f6b8c514921a90dd6989905dfba914d5ed1b4e3fb7","ssdeep":"96:+6sN0Z9Z4JfrjqoiNDmEl8OWZp5dfL0mAleNzwVeLUVU2j2KBKGarNcl8/2:JsNGyrjpiN4594mf0IQ9v7G/2","tlshash":"75c152941694fd2b31e139d8e01b9734652ec0337c1af981fa32dced64e4ed183aa532","first_seen":"2025-10-21T21:24:49.261004Z","last_seen":"2026-06-08T09:39:22.956983Z","times_seen":18942,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC53FwrK3iLTcvneQg7Ca725JhhKnNqk6L5UUMbm9wUkHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC53FwrK3iLTcvneQg7Ca725JhhKnNqk6L5UUMbm9wUkHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://activator-kmspico.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 51640\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 01:04:32 GMT\r\nexpires: Sat, 13 Feb 2027 01:04:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:15 GMT\r\ncontent-type: font/woff2\r\nage: 118054\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51640,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51640, version 1.0","md5":"4a1dec4fe55af205131962c81c7d9e43","sha1":"00dae6552691229718117b97f7bfcf5f932acb9f","sha256":"4a2b0c886b2ea2e178108084a03404fe2d66db2baf7f5815e9067b96810d5827","sha512":"07b19c81887797b349f76dd091ac52fb9ba9706f037fc4793f044d43b88152ccf1717b60f00de0136275ae568060bdef7b300b95398c5bcdb802bfa46dace300","ssdeep":"768:ch5FogfQO8LcFb1nCp2TfvacieFgTghN7skf4NMGBP33QcNBbYJmSLK8bVE1KBai:czFoCmmbxAGbingrExPQcNCJ/dKo3l","tlshash":"42330235d30d2c5eb982acb01e6b32fde01493552e1aab36ac45759682858e5fe3e4c3","first_seen":"2025-05-29T18:38:05.678236Z","last_seen":"2026-06-08T17:28:46.009703Z","times_seen":4380,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/plugins/elementor/assets/css/conditionals/dialog.min.css?ver=3.33.2","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/conditionals/dialog.min.css?ver=3.33.2 HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:52:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 23 Nov 2025 13:23:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1430\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16528,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16528), with no line terminators","md5":"99d75b837b3b3bc9434c6d476d7efa38","sha1":"7383e13dd3b7ff05dd6640484679b36564488524","sha256":"81c20d5a8c7b7c0d6c9d4c74540252e5531c003d4881bf847bafe54d0270dfce","sha512":"e134bcc4d01de406080d84ed933a5da42362aa06f448c39adadda14c9d1064ee3779505b74f00fbe7952dee77b3bcacc197f5a08f018a5a10400ca8a2a7071ce","ssdeep":"192:sJPmFI11JxDGNlfCYlKV+H4anWBnEOQKWSW:Lnf","tlshash":"df7273c7686d2649db0f4b3e4c0ea8c9e6d451d2d902af9f14c7e0db03e9465ba5b133","first_seen":"2025-05-21T22:47:05.65382Z","last_seen":"2026-06-08T17:05:53.330202Z","times_seen":14872,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5 HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:52:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 23 Nov 2025 13:23:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4248\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16471,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16214)","md5":"a2431bc290cf34e330e11ec4cfce1247","sha1":"32a53342901fef5f4f4dbb26a555e730f84437a4","sha256":"c57e64fcb72bddafa9c38de574441c3e69ac6c961df96b0cad34da83658bd196","sha512":"87aef045472db25020faead697ec02813ba38d4e313caf437b4ca5cadbb7a7495805ac0b74e5de60cd84ccecab290b76d003eb1fadfcdaa70e650a597658ada9","ssdeep":"192:IbgmUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:IdUbeTMbHZ+Vnh2AVfHfA4XYz","tlshash":"fa7234681340282753274f374b71cbb9d9b444d24b93896e91c0ee88d7b6cbd236f6e9","first_seen":"2023-04-05T10:48:11Z","last_seen":"2026-06-08T19:38:18.734581Z","times_seen":125536,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 23 Nov 2025 13:23:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 592\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1348,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1348), with no line terminators","md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-06-08T19:44:13.35932Z","times_seen":105957,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 09 Feb 2026 16:33:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4678\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-08T19:35:30.278031Z","times_seen":825703,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"activator-kmspico.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.33.2","fqdn":"activator-kmspico.com","domain":"activator-kmspico.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://activator-kmspico.com/","date":"2026-02-14T09:52:06.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activator-kmspico.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 15:57:49 GMT","end":"Sun, 12 Apr 2026 15:57:48 GMT"},"fingerprint":{"sha1":"09:31:FE:2B:B2:F1:8F:41:A5:50:4F:36:98:2F:6E:E5:1B:22:15:BE","sha256":"B2:B0:07:2F:DA:35:16:B5:45:86:0D:6F:70:F8:72:DA:04:F2:4B:7D:D1:C9:CC:09:22:F5:55:A0:26:EB:5D:31"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.33.2 HTTP/1.1\r\nHost: activator-kmspico.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://activator-kmspico.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 23 Nov 2025 13:23:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22744\r\ndate: Sat, 14 Feb 2026 09:52:06 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: frame-ancestors 'self'\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79196,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"fdeda1afe7cf052ccfb845fd7a87faea","sha1":"791eb3bb4e6cd26741d80a461f3ee7efebed7f3c","sha256":"2e2fca448a762f1f61a4cd6a735d8a5ec25614db1fe7a29576e28103307e4b5d","sha512":"a9621e81522e5937d99eb54bb8a3424a90de8206c49d10a05803f7f4b3f948b3e40c94bc5080db8dac9d14f5fa44fe104026e681c37d2e74eaff950b51572452","ssdeep":"1536:SWxmDuqHrrUb3yQ5RSSYeAjA6c9CSTon2cI83Fi1mq9G4cR8+KAiA2gf6XSs8fay:E2ptE2rGAu","tlshash":"7373f8953152f8b60bfb41db902b4106f32619b8b41da498bff9dce19474d8a133bb39","first_seen":"2025-11-23T14:11:38.667752Z","last_seen":"2026-06-08T09:39:22.89165Z","times_seen":11055,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"activator-kmspico.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}