{"report_id":"5e8687fb-3de5-4ffb-a9ad-80162ce404ec","version":0,"status":"done","tags":[],"date":"2026-09-14T19:18:16Z","url":{"schema":"http","addr":"konikstudio.live/","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"konikstudio.live/","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"title":"Konik Studio - Fotograf ślubny, okolicznościowy Konin, Koło, Turek i okolice","dom":{"size":48227,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9139)","md5":"302e7f9ffd615ab3e5b9ecd0d61f5b5c","sha1":"f9e9256a75eafcf06a330930d40bbb93de8f4429","sha256":"1285d87a20d908c0d2f554e7aaed477a424092873bc1df177f3198292c5b6389","sha512":"d29fbf05058f656363152e4c5c4d4a9198a3dd67cd9d4be0a065caaf4fd682e53f8ea7ae9b401151c6116b3149dc60a7c07debb6a40d21b3a8686baca5f1223f","ssdeep":"768:yjjZdyp6+Rp3eNswoBLqwgcr9AdHXUGmgQn6jZ8Xnl06AUD0J+b0vLBRT:6jypJRFeNx2gcr9AHXUGm1n6jZ8Xnl0J","tlshash":"e5233b33ec5828bb6b4a4bd5b46e331cb6b9d409c7029a79b1fca16c97d4af104b350d","dom_hash":"domhash84cc0fff4ae719a35cc59be1d8f289ee","first_seen":"2026-09-14T19:18:21.790886Z","last_seen":"2026-09-14T19:18:21.790886Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"konikstudio.live/","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-19T19:18:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2026-09-14T12:10:39.376734Z","alert_count":0,"request_count":1,"received_data":1036,"sent_data":560,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"konikstudio.live","ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-14T18:42:34.03946Z","last_seen":"2026-09-14T18:42:34.03946Z","alert_count":135,"request_count":27,"received_data":2128587,"sent_data":14269,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WP Fastest Cache","description":"WP Fastest Cache is one of a number of plugins for WordPress designed to accelerate the performance of your website.","website":"https://www.wpfastestcache.com","common_platform_enumeration":"","icon":"WP Fastest Cache.png","categories":["WordPress plugins","Performance"]},{"name":"Yoast SEO:28.2","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Elementor:4.2.2","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Contact Form 7:6.1.6","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"UltimatelySocial","description":"Ultimately Social (Share Buttons \u0026 Sharing Icons) is a plugin that allows you to place fancy social media icons and buttons on your WordPress website.","website":"https://www.ultimatelysocial.com","common_platform_enumeration":"","icon":"UltimatelySocial.png","categories":["WordPress plugins"]},{"name":"Site Kit:1.184.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":6,"received_data":253825,"sent_data":3448,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-09-14T00:01:55.00998Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":805,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":23656,"sent_data":639,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-13T22:44:45.310895Z","alert_count":0,"request_count":1,"received_data":496571,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"konikstudio.live/cookie-notice-front-js-before","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8cc8daa017ed0e812b7329ade91be55e","sha1":"cf7364536f54145ae267a66691cc6cc08d4c69f1","sha256":"bc1275c9adc2b4890af9b3372fd05ff7063b031cd4fe65ce5e77b743b518a721","sha512":"b733b13fddfd9a161791d9993de8629ca212fba50572b34e4c93184518eb641369288e953876b5e2a347d80673e0235099700142edb542a2fc2fd4365ca8d0a0","ssdeep":"","tlshash":"e3f0e51cf79d1a5d92d14bf5855a2b92c2282135faa4ac88c44fa97839e78e3b85a403","size":503,"data":"","first_seen":"2026-09-14T18:42:42.774754Z","last_seen":"2026-09-14T19:18:21.814037Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/google_gtagjs-js-after","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"04949d4c8bd0b4e49376bca6f48f8ee4","sha1":"f5713b5a3dafa6145e0965cb863279064a447ce2","sha256":"600d2628865ad11c15faf40b628c7ff64e35bc3c96d12c3707feeab76fe6b1ea","sha512":"6742d2610c478fcf5a24ec13a997c9a0104a9ee525bb7d55e51cd119533ce5a2260553a2c1d9bf3cc5bd06dd9abd427505838acc5f6c2ff84525c3afe1eb60ee","ssdeep":"","tlshash":"d9e02b68e0a36db505fb18306b5b7b5572527305d16158208cde5345113fd4759a5c85","size":360,"data":"","first_seen":"2026-09-14T18:42:42.791333Z","last_seen":"2026-09-14T19:18:21.814708Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/contact-form-7-js-translations","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd3f86c14fcc1b3a88cf89ec42dc30dc","sha1":"99d7a3ed664017586cd908b42626e6659af861ec","sha256":"ed952502188e9eedda0880850bf431369def7a88b4ab9774e9ca185de23464c2","sha512":"3a313b2c45c69e806ac63cbbd4dd75b57a17491aedb8f10e0d34e4c965bc4aa92768b0b0514e0131bee4a5b211dc58472883dfb4a05d25a717fc86156718d65b","ssdeep":"","tlshash":"43212b85dca88925848292b9b86a770ab0a8fc50d32b1c02b21f00492b617ac8ae360c","size":1132,"data":"","first_seen":"2026-09-14T18:42:42.792532Z","last_seen":"2026-09-14T19:18:21.823831Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/contact-form-7-js-before","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"16d5b35f87e54aaa3a9e18d9c83cf890","sha1":"b637390860a36b19a5a11a2914d1b6cb16723f16","sha256":"adb99cf8ba4083eb2ca3667947381c9c24d97ab99f01a6d64ebcf2aa9172dc29","sha512":"57aebeb0f6eccaf46331f64929e1a3263cdcdcb3970cc12f67beb6edb31afe53856a373f9913b721a3fee772773f340d150034a4d85b913d2034903c0edd2ac4","ssdeep":"","tlshash":"e0f08c9adc48284b66d1ca751a7c3310b226a919c72b4b09924a404452f44b8a808486","size":501,"data":"","first_seen":"2026-09-14T18:42:42.789982Z","last_seen":"2026-09-14T19:18:21.824849Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-10-14T23:38:20.301567Z","times_seen":355129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/plugins/ultimate-social-media-icons/js/shuffle/jquery.shuffle.min.js?ver=5b87f4bbb620920693bc9e41f3cd2945","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b01351f36285d266938cfb15ae487a4","sha1":"643579a331557dedc16ed0bceb1c7780368b9a52","sha256":"4c5e10b3496ff844faf3e2d032e243d4a366a5cbc95ad7bef5dd924322e31b3a","sha512":"5f6d293d1e89fbaa2eb6a317201652fc948b04d36f413f95bc934ff7ebf6cd6aba1e9435a18fc8aef35995a3f97c0c56df1a986cb26bfebbb60a664ffd8b4599","ssdeep":"192:j6WqNTY8eI+qgPnTv2o0OTuTPko3SBgv6WJ+df:jrq2HIMOYyTXCB+Qx","tlshash":"b732a34e31907156a2a3f16144ff250b203a68397a13815c747fdedede6e84e207beb9","size":11484,"data":"","first_seen":"2023-03-07T12:06:17Z","last_seen":"2026-10-14T20:53:44.512408Z","times_seen":4356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/eael-general-js-extra","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"30c38dd44499a64213bf5ea7c644f717","sha1":"8f619a4408a63a648948c6abf61496678dd59e0a","sha256":"1a1c4f1e5cc6b36f076888570f0191fc31729d70b9185bc9770dc76f693656f2","sha512":"e9f07748ea8a9a9f2aa9ece9d6f8d38969725d2d0b6fdc62caba6b06d1b7226bb4fb4f419409beac0a9a05b28c549771fd94230026bd52ecc4a00cbb0c9687af","ssdeep":"","tlshash":"e231fe21f1d6abf74853eff1395b7453b0694824f045bdfde868cde42caa4341a0ac09","size":1520,"data":"","first_seen":"2026-09-14T18:42:42.797069Z","last_seen":"2026-09-14T19:18:21.826414Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.7.2","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"528aeec7791fb55273294ce47d047eed","sha1":"fefcee27584e760c149a07ec0f5642dead81e7f7","sha256":"120255c10e9d3dcf6fcb86b77761401414036d9f83e957104afccba8546751ba","sha512":"cd9e6b2477ff85d894c45826eb6a87db7eedc9af4f58c299a46206983dbeb29e54ba083a6a36b934beb08eff24d515264b2cbfd8d3e37835de22c3ead35e3dfa","ssdeep":"192:4v6LbN3SLFNjilRm5ReHKj2H8gH+gwnmMQwco/0MbYrdpb9pPkx:4v6LbNiVii2KnpcLpb9p8x","tlshash":"7232e988378776f056b36025947f761ab136ab74741c8850a21ad8e06db9d8fe073f3e","size":11619,"data":"","first_seen":"2026-07-17T12:56:12.232628Z","last_seen":"2026-10-14T18:37:13.215602Z","times_seen":2480,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"712d97633d9af3759ff810532f2d3527","sha1":"dd9a0059f02b2d517b4a86fc93c94a5bcb8c85cf","sha256":"0e45cff169e4408fb657800aa21fa253e2ec8a1933601a70f63d7b646d273461","sha512":"a0970784adf7426ff72a9116164983064728ac80ef5cc8984b3750b12f2e61c459bb2cc32fbe6052260c3d3e2abe681d4652dd7832b17d3aace9cf2128fc8ee5","ssdeep":"","tlshash":"a5e02b1cb79d1e5d92d14bc5c1562bd2c2382135bab4ac88c44f797839e7ce3bc56403","size":433,"data":"","first_seen":"2026-09-14T18:42:42.775742Z","last_seen":"2026-09-14T19:18:21.828164Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"da681cfae9e1057280b4b7d0ec86ad79","sha1":"18c8fc629ff2a2dc2d39c053c23923ea3f15c3e0","sha256":"940c527790be0a67c7b73af8c93297eca7bbbe3e9881f8c1c12a7a09caa48824","sha512":"407b30d33311b30b0e64f641fcc3c0598fc3a584310a518d18e83871b3623c1e2642cd457ad13fce2ea9aba10a054784cc0521d59a9a2c067e7e9fbab530a516","ssdeep":"","tlshash":"4ad0956c20d36db505f718007f5f77557252730591715c208cdf5345113fd4755a5cc5","size":276,"data":"","first_seen":"2026-09-14T18:42:42.776921Z","last_seen":"2026-09-14T19:18:21.829629Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8fe49d6dc77568c618be5983d06706a","sha1":"c6bf1b3bde4e258ec2b8c80953ca47b10c1038e0","sha256":"24c9a8b4ff320d43c066b3f56bb6b29a780a41e5bce85ab1896d59cd82cdd7db","sha512":"ea2083a6ddf047119475eff3054327ca1ebda72f773f59f7f4f4eff2d856eac0bb594a1a29d3b3233c65338fdb11ee52d21cb77f4ea82f587590af91b1c84c2f","ssdeep":"","tlshash":"a2c09b1d7915ee3414536568537f711c293517d551004f401c6070d86d751ad2837e99","size":130,"data":"","first_seen":"2024-08-20T16:13:57.067676Z","last_seen":"2026-09-14T19:18:21.83102Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"be26cf9dadac1d3b5f8e7854e23a1b5f","sha1":"7687437c90df89cfd32ff2845b662737fad9eee6","sha256":"8dbdfbd4d807982d63ba14c282e1b1b2ff0c2ad40a8b6524578f45416cd5282d","sha512":"5271e1de617858e7827aa1e22bca1eea80b7168116a9ceedc88de4e39d9122ee6047c32f4d937e64e8a0bb274df0e238406410c53f13c02f3ac1d43043795043","ssdeep":"","tlshash":"71d02b8f2c91b4180ff9157b5a2545ac719d1e481a11484a8dcec07daa30fe4499eba8","size":291,"data":"","first_seen":"2026-03-18T06:39:29.638991Z","last_seen":"2026-09-14T19:18:21.83193Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"733b8a96e861a67e99e50660fb28b8d7","sha1":"6f58fb3a5343cdad993683733206a4c7000d79e7","sha256":"e96faa2d7bad037537fcaeded8b3a298032a105cbf709c9f00445d76a51038fe","sha512":"981be3eba1a0c01dc702fd8a7e3deda47df1bdccae3f4ee26f4ed8d18c3a18cfd818a86cb5e895a21cf247209484bc4e6596ad3f100ebb06902d90db1656a7b8","ssdeep":"","tlshash":"79c0801abc4ea5267533b030614f74083d3757c523118442321085d49d73b1c5c33e9e","size":186,"data":"","first_seen":"2024-08-20T16:13:57.070312Z","last_seen":"2026-09-30T18:19:48.831797Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"382196467269a6827e68bb005ef3a6cd","sha1":"88ec960dac30459eda8925fef53fbb394f8ea1f9","sha256":"217ada14b9b3f4a92e2134cea6e22e3edf4673e9cf5b7a14eee5092a9c482de3","sha512":"fe11884166010cccb83e8103530789d509b8fc9162d8ce2896aae2a83c6a0b298fa925c9c3feb2a5a36dee1811182f594b432a5bf12bdc30d05d381eabb47038","ssdeep":"","tlshash":"4611428994cabc9104302497e9de2a5c3eedcbaa550ef005081dc4b83cb102ab65605c","size":1042,"data":"","first_seen":"2026-09-14T18:42:42.781488Z","last_seen":"2026-09-14T19:18:21.833627Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2b61983639c9aebd00f6d9b71d4c12f9","sha1":"1bd4226423232b3a0616e7ad14ae601b0c25c656","sha256":"9cc79145328ed06b1005abc3ae9eba6bfcf0c8e8d7ac421ab3956bb291689f57","sha512":"a2d935eae3d44aba693d469ea66a214b1935ebff2b3fb00e9d743852e3847766e1e53f4d7711c0cdbe7ca22e9b013ce28b13e64db029afd84dafaecdfd74c8c3","ssdeep":"","tlshash":"270122e332e1907efaaf9d665630020e8b1ca082ac410707cabc356add8043138b2d84","size":797,"data":"","first_seen":"2026-07-23T00:35:21.807047Z","last_seen":"2026-10-14T23:38:21.044071Z","times_seen":232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-10-14T23:38:21.044554Z","times_seen":78112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a3693bc33d274d1ba7c8a0000c7135b1","sha1":"18fc403d7c7b8e30969a427404af035512a2e611","sha256":"7c8c0cf6db17635383e11204aa21dfd37f7d3aff9998e7e3aec9a3e0c003a867","sha512":"4610acd69acdfaef0a10cbc2099f802451e6d21f138aea7736f667f52a3ee0d0d67750926ed2b21bb2bc9fd4dcfe0791d959325c0cfe55ff30e31f6a2d2d5af4","ssdeep":"","tlshash":"470141c51cb8cd2544829689797e770eb0acfd50933f1c02b61f054d2b647ac9ed364d","size":788,"data":"","first_seen":"2026-06-15T10:30:56.052201Z","last_seen":"2026-09-28T20:54:31.234707Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d59decc2d8ac4b20db797c9208364f4","sha1":"7ede5cf5e5272bbffbe183479f9c96118f8229ef","sha256":"f092c7042ae5e00125c30066336916bb339b7e33955681f95971c7c0c2b396a5","sha512":"8be93e25849933ec100bf0e4768995d41514e62e79e90f8a053b1688290acb5006a8b0ac48d609b62f8f3dc9dc8eb42736d38ce4b2173763a6087be52f70f872","ssdeep":"","tlshash":"dcc02bde5c4c284b26d1ca55177c3310b336e915c72b0f09d347004453f44f8e8044c6","size":149,"data":"","first_seen":"2026-09-14T18:42:42.785989Z","last_seen":"2026-09-14T19:18:21.837948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4dd5a83224a2b88d9533783721997c7c","sha1":"434364131403036d71c65ef5f00c77d6842832d0","sha256":"abc7b0aa525bda6199fd9b3571235d698dc255e28101d60ccfd4773825cad6d6","sha512":"f3af8380e51664ce26a13ca687b49b7b6403471f6c9394370dc7904cee546bb51bba1a4b1d3747a6b13a8da1c697392bb36617057a421e3864cfaa39f05ede94","ssdeep":"","tlshash":"86d02e234e884e872ba00fd2001d7722a2a2c016a9968ad85e8cc88849302e0db0ec0b","size":237,"data":"","first_seen":"2026-09-14T18:42:42.787248Z","last_seen":"2026-09-14T19:18:21.839832Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ad476f14e7e1dd7bcafbdc1207593d5","sha1":"27096dc5132f3963f148c7550cb459c1be8f01d3","sha256":"16b9e10422003db5db1082183e06b81b2a0e380613bbcd4ad6756d84067c438f","sha512":"fe3dc1682f4a2ec664f92743f1350334ef580d2bc48c5e4f0c70135d2d8aab783d3573930f424a2f58b2588d959bd60b674517e7a1cc57c37deef7fec8dbc91c","ssdeep":"","tlshash":"c421fe21f1d6abf70853efc1355b7453b0694824b045bdfde864cde42caa4341a0ac09","size":1148,"data":"","first_seen":"2026-09-14T18:42:42.788437Z","last_seen":"2026-09-14T19:18:21.843467Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12ebec1b36678eb1da4412af6c65751a","sha1":"4cb5d87353d9a06fde067063787a4beed692ba77","sha256":"558ae0ec83cc88de0929fde86b87c231246aafa9c961ebffb3257b05f62ca5cf","sha512":"a1bbd93277a59086bf27da7dcc60434b717ac521bce0618aef7c914789497a22cf56441a7f300f1bb7a6de56ca624226883d048f6eadbcc049dc717338189bb6","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"fdc1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","size":5732,"data":"","first_seen":"2026-07-02T22:01:42.315643Z","last_seen":"2026-10-14T23:35:33.600837Z","times_seen":31575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.6","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-10-14T23:38:20.889982Z","times_seen":247823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/plugins/ultimate-social-media-icons/js/shuffle/modernizr.custom.min.js?ver=5b87f4bbb620920693bc9e41f3cd2945","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bd6cb4fbf6f16f1fc46934cd8515f3c","sha1":"37360c9391c47e9d7b0460bf1fdfc8c380404c4f","sha256":"29c7ceffe2b367039ee6eb32a7334e2a9131654cdbdaf57a5431d909f69d1cab","sha512":"8534c4bc5048641e1897abcd5ec3dfbb3c5cb298fe970fdba5e8cbfdf18ebcfa01738b1be840a70cd1711ef152b06f1960e1b3e14a0b9069f3bec76664055fb4","ssdeep":"","tlshash":"a35163c9b6a2f225478b9164146f060eb12dcc6f7a488c89f005c6f87eb086c4263f3e","size":3089,"data":"","first_seen":"2023-03-07T12:06:17Z","last_seen":"2026-10-14T20:53:44.491719Z","times_seen":4507,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/plugins/ultimate-social-media-icons/js/shuffle/random-shuffle-min.js?ver=5b87f4bbb620920693bc9e41f3cd2945","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9205d1691f1303227809875d3a6ee811","sha1":"71094c5c5a6f50bc3d94cf9f99f768708a437e6d","sha256":"8577be08e13d868781746fd18e27a2d95ee4658c33221ec7659ece82d4d31463","sha512":"0806f175eb2c418754569f152e7c7b0f809ac951ee178969b4d3fbf0e29e4fa68caf224fe897885a2e4f673ba08a1de9fb53a22e0cf1a71ba53007e24baf318a","ssdeep":"","tlshash":"67310e08b5a2213ac226a0b9092f5d0a7373b178ae0b07447560d8b1a83ec894b26f35","size":1472,"data":"","first_seen":"2023-03-07T12:06:17Z","last_seen":"2026-10-14T20:53:44.593039Z","times_seen":4643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/plugins/ultimate-social-media-icons/js/custom.js?ver=2.9.9","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"404ea21ed15688f2cfa53b0ffd5190a3","sha1":"2fc1018cddc2d15f99ffbb2c2bd981f6e32a40b3","sha256":"9207694eb596f24c7e466b0a928724218d74d43495ad9f34644ddc8dc6df423d","sha512":"f364dc2e31aa687605d5ec2f37386e94a8de38c82225ad10c36396355d49ad09e0fa19d062f8f09e99717891a812333b9e7d60a88285f3f202c7430497cf6b02","ssdeep":"768:JYqICj7T9o1K6mgKpTs4r1xLpgyrIxGp+tf/HXbhcRaRo54MhzI4zqAnh9lka0:DtvL9lka0","tlshash":"29e22d1e631295b1c1fb37f56a7a9a08f827227705228b127c2c41f41fbe425c677ead","size":33932,"data":"","first_seen":"2025-02-18T13:28:44.852996Z","last_seen":"2026-10-14T18:21:54.393401Z","times_seen":2516,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/cache/wpfc-minified/97okg7ln/2746k.js","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e37e95fcdb495d1542c8bf87ef05e6a","sha1":"4887bd9ebeef64428f4a0d246ee67d2ddfe9a405","sha256":"e4869321d6662f992be1fe0c9950e63d836e4d02eb12ce23a99200455029cefd","sha512":"3ffa054ad55f60904cebd9f839a48efce33d317b5c9e104076c759f083de3e9e4955ddd404950d1387c1a889452becf601670eedc10c75558a103030ec7d3dc4","ssdeep":"3072:sHNwcv9VBQpLl88SMBQ47GKRrPU+Zt3dOWw:sHWK9VC78UBQ47GKRrPU+ZiWw","tlshash":"d9e33ade739574324be721be206f910bb2734989a80d8414b168d8d9bc7c98a5337fbd","size":146367,"data":"","first_seen":"2026-09-14T18:42:42.757025Z","last_seen":"2026-09-14T19:18:21.797753Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5050,"data":"","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-10-14T23:35:33.58052Z","times_seen":32268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-i18n-js-after","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1696802c71a7c9d36bd6e9bfd91aa590","sha1":"223b345556396055fc29c67b3ae6c65c89af850b","sha256":"3bc6f168c6f26cdd3522eb6ad4d699a15c74903cb05a1a4ef2c0b0a292801b66","sha512":"e63e8b0b510936e9d4e5fd043b3031754e21ee1ef2fe3a4099b8827ef80bf9a5553480087eebe5b6d1ff5493b58b3c488bbbf2db5903c06883aac6c00fbe9c23","ssdeep":"","tlshash":"6ee012cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":436,"data":"","first_seen":"2025-11-19T23:41:50.657968Z","last_seen":"2026-10-12T21:45:40.413292Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/SFSICustomJs-js-extra","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b640dee74e8518b68e6daac2ce57f340","sha1":"0c4a215e66517b8a13286345a0f77c336d984db5","sha256":"fff8848e43dbb3a7ec3e188eebd09d0f0c067d8904d83364b05092afd49789d0","sha512":"e4cd8c597f761a15bd9decdad9cbc09b8d651bdcbc9414a3c6d2381ab63a4f69fdd74cc3ad6bf82f4bd6b22884bab9284ac3818d677456fc09062e6fc6407832","ssdeep":"","tlshash":"edf02b23cd884e875ba00ff1041d772292d2c016d595c9d85e8cc44445701e0db0dc0b","size":603,"data":"","first_seen":"2026-09-14T18:42:42.794133Z","last_seen":"2026-09-14T19:18:21.846729Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/themes/photoframe/js/photoframe.js?ver=1.1.3","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d748ab8f44b28ce8d969b42097546bb6","sha1":"a16a9464f4e4bdb16e308b08afb0dad64c96c084","sha256":"82526037a5538b98e6e6471966ecab013c95b833152c2737809ca7dde64ef6ad","sha512":"d1833a31d7cd1646fa7ea15a7380aa8262d86ab2d3185c0b7b08b8bfcb50d12c2789fe88ecc7de6ad04f4d62b0532d9ecd19b37ccba4245a1de000de72c9a18a","ssdeep":"","tlshash":"8c611386b14f267b47fa27b592399280b97cd604e205a02974fec43d14e4a672363ded","size":3267,"data":"","first_seen":"2024-08-08T01:15:33Z","last_seen":"2026-09-14T19:18:21.795604Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.6","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-10-14T23:38:20.996587Z","times_seen":254670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-includes/js/wp-emoji-loader.min.js","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"124bdde18d9bb0adbeeeaf2a3685197c","sha1":"c9b89e4d5b4237b777846d3e60d0bc3cbd172405","sha256":"fd91e4f9709477201c7726a6cfbaecfdcaadf9ac602e31f3c11344071587bdaa","sha512":"b53e72b85933c795db86be277ddc775e045a64217deef73fe5d81cd67a1d66b37b679efcfb58a5aa850283170e425112245ab7f143ec34551c8698e2317ff69b","ssdeep":"","tlshash":"fb617459eb7938db33fa01f2693a4d47eb614436e684d038c9ae631424b1893c375a5a","size":3434,"data":"","first_seen":"2026-09-14T18:42:42.79856Z","last_seen":"2026-09-14T19:18:21.847545Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-N5L3YY7SWX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"369b883a844240db435afa28b7c4a1c0","sha1":"30091effe82d058f87a0610418d6a55e19a7c153","sha256":"83c51a81023fd6b3a4474903f3f051a106d44cb3589c3c12dbe2c0284e09ac94","sha512":"bd34aad7a6de56703bb340a322a4a698a6afcc7d778416618c849f655a376dc218bc8a32c206132ca8f5756fe27a9c856629da1349d037de96e57f18b22a474a","ssdeep":"6144:xunf1L6SSxQhmgyyEydQV80ucTPbNELR3/jb5WS3KNS3IFZ:sx0yAynN5JiSU","tlshash":"1eb42acd73c674229396f178903f018ba57b29a2b49cc895f18adce42d3465a9237f7c","size":495967,"data":"","first_seen":"2026-09-14T18:42:42.771339Z","last_seen":"2026-09-14T19:18:21.804874Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-includes/js/wp-emoji-release.min.js?ver=5b87f4bbb620920693bc9e41f3cd2945","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-10-14T23:37:04.010479Z","times_seen":86532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://konikstudio.live/wp-content/cache/wpfc-minified/97okg7ln/2746k.js","line_number":9,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"konikstudio.live/wp-content/uploads/2022/02/Ola-i-Piotrek-19.jpg","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:44.111Z","timestamp":1789413464111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-content/uploads/2022/02/Ola-i-Piotrek-19.jpg HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Mon, 14 Sep 2026 19:17:44 GMT\r\ncontent-type: image/jpeg\r\npriority: u=4,i\r\ncf-ray: a3b1bbc6be268755-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2146\r\ncache-control: public, max-age=10368000\r\nexpires: max-age=A10368000, public\r\nlast-modified: Tue, 08 Feb 2022 19:24:44 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IquYhxAcu8D7QrLSw9rY0QvqyYOkhUG1uiVSw4qLzykvHAJaTZasR%2BA4D3qzCmVvXIouXFKH%2Bpo9KuCJs8YEqlVJoE7RtnpHELSFocu%2FUjxNHsanGRHHf5HmnxJDohabdJUt\"}]}\r\ncontent-length: 316189\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":316189,"size_decoded":316961,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1500x998, components 3","md5":"27d58f5c394f1694997adf82f365c7c9","sha1":"2320896e0d75002bb853b5747b47da2cc0023088","sha256":"5cfc0486bf6e7c3420e16d49653e5966c4996b3be8e31b619ce9df3303f2a6ce","sha512":"fbba6ec27b7802f968730350f307ea4927353a56447921982c6fa5a6ad71c322626a0fdf184907d7386906ee104f91861afb3ab388b5836319497b36baaf26b1","ssdeep":"6144:ULrS09qANCdV+rNvp9hKjUlm2epMbRc6mRXI4efz73pEkG6ZF:Ux9qJdwrNHh7j9bRc6iI4k/ykXZF","tlshash":"3c642324a260e74ae0986f711ef5f362f3ff4349519081570aed2edd373e3867688269","first_seen":"2026-09-14T18:42:42.77029Z","last_seen":"2026-09-14T19:18:21.791973Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/uploads/2022/11/124.jpg","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:44.112Z","timestamp":1789413464112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-content/uploads/2022/11/124.jpg HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Mon, 14 Sep 2026 19:17:44 GMT\r\ncontent-type: image/jpeg\r\npriority: u=4,i\r\ncf-ray: a3b1bbc6be278755-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2146\r\ncache-control: public, max-age=10368000\r\nexpires: max-age=A10368000, public\r\nlast-modified: Mon, 28 Nov 2022 17:44:59 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ZzNFK67rB00bYhxt9O6NjBj26oUuX3ScmoQLDWHX2Mex8Po56x%2BX88ONm3GCp%2BK4dSeAHEMGDkuHLlpdOcbQBJzL6BkbzrYkQx72c9JXy7Tu9ZvgUfuSs9PMPrNDRtHk1fY\"}]}\r\ncontent-length: 309141\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309141,"size_decoded":309911,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1500x1001, components 3","md5":"6b8c77dc28d9692c90ba308266dbce1d","sha1":"7b60e7e6344a4c250e9df817a67cf419772748ec","sha256":"07ac7c141f37348883dc45882fb69ecdad886d059f9d1348dc73c43460964651","sha512":"00b012cc237e94fbfae6164132729b5c70857e8b8d5e9a60e918d8079a283eab97fa3ebf60a26520ea35040915416aeb8b9b0519dfae573307bacbf0ff555741","ssdeep":"6144:/UyCugHSTlposp30fljd8mdV3TeJZ69MrL0/0GGI:/1xdpTEfljd8SemM3e08","tlshash":"116423a6cd820cabd5af07f4b6c5a743b1aa960892bc7cd0fd5e5b10349f894474f48e","first_seen":"2026-09-14T18:42:42.743802Z","last_seen":"2026-09-14T19:18:21.792798Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/frankruhllibre/v23/j8_w6_fAw7jrcalD7oKYNX0QfAnPW77l4briiY6hBjYM.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:44.130Z","timestamp":1789413464130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/frankruhllibre/v23/j8_w6_fAw7jrcalD7oKYNX0QfAnPW77l4briiY6hBjYM.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://konikstudio.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20888\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 14 Sep 2026 05:29:20 GMT\r\nexpires: Tue, 14 Sep 2027 05:29:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:01:25 GMT\r\ncontent-type: font/woff2\r\nage: 49704\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20888,"size_decoded":21700,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20888, version 1.0","md5":"81864bdd9a97986943fe11371b651f81","sha1":"13dbdd7ba696dfb9e376d34782c688567522a92a","sha256":"cf2b2e11176fa8c9dd38a7c5932833201cc52ba6dc61c3f42d8992ff3706b7ba","sha512":"cb842dd3ab8cf60757a75ebc6a2c85b95d7157b9cd2ca3f84df3e0d247e43b01731b2e178967822d15d5b2aea57abf53ee31253c3c8387ee8bdfe0feab568886","ssdeep":"384:3XMirvMhPbgTvJRBH3vgfprgZooPgdLZIKcyKm7m5CaTb5:3XMiibg7XBHupcNP6ZIKCMm5Ca35","tlshash":"6d92e1cd96ea8141cb9037e4c57f43773216b64085cbf69b4ea93855040baa4c47efcb","first_seen":"2025-09-26T22:39:59.27442Z","last_seen":"2026-10-13T20:58:01.02604Z","times_seen":41,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":43,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.6","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:43.961Z","timestamp":1789413463961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.6 HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:17:43 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NYNmyWU0zL2wa6X%2BDhBHHBvqQXcODzqhoyiJphvR8ejd4phWKUvor409lnJRmX%2BzvsxXvP5m1xsAX95%2F0DRlKdPHFzJAXYFRtlrE8ks4ezSNvura8Du25dfWuYSqdpwDyd5F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1bbc5ddc28755-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12512,"size_decoded":4351,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-10-14T23:38:20.889982Z","times_seen":247823,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:43.964Z","timestamp":1789413463964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:17:44 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DqimOMsmX6TKxFS4C0FKkqoacitd0sPTp9yKNUXMSMxrKymaJQLgDOLxS%2F8FkWw1ST2df6bBBC%2FWXrF4gJk8%2BO5cUFB8ng944l93FoKFJA53iiB6FGV2Ml0%2BagHbK7llsUn7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1bbc5ddca8755-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21464,"size_decoded":8159,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-10-14T23:38:20.301567Z","times_seen":355129,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/plugins/ultimate-social-media-icons/js/shuffle/modernizr.custom.min.js?ver=5b87f4bbb620920693bc9e41f3cd2945","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:43.966Z","timestamp":1789413463966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-social-media-icons/js/shuffle/modernizr.custom.min.js?ver=5b87f4bbb620920693bc9e41f3cd2945 HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:17:44 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cB3hWNnT3yUw54nMRx%2BqjV2zI2GS7WDZ074zqIUQSD%2BeSyr5oqLJkj9nZb3reQs1uhlLNKSxLiWRa%2BZLGu0FSsrfA1QCefYZmkgyhwn8lh14vx3kGbph7ByCYVZGE5FeiEy8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1bbc5ddcb8755-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3089,"size_decoded":2177,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2861), with CRLF, CR line terminators","md5":"0bd6cb4fbf6f16f1fc46934cd8515f3c","sha1":"37360c9391c47e9d7b0460bf1fdfc8c380404c4f","sha256":"29c7ceffe2b367039ee6eb32a7334e2a9131654cdbdaf57a5431d909f69d1cab","sha512":"8534c4bc5048641e1897abcd5ec3dfbb3c5cb298fe970fdba5e8cbfdf18ebcfa01738b1be840a70cd1711ef152b06f1960e1b3e14a0b9069f3bec76664055fb4","ssdeep":"","tlshash":"a35163c9b6a2f225478b9164146f060eb12dcc6f7a488c89f005c6f87eb086c4263f3e","first_seen":"2023-03-07T12:06:17Z","last_seen":"2026-10-14T20:53:44.491719Z","times_seen":4507,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/themes/photoframe/js/photoframe.js?ver=1.1.3","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:43.971Z","timestamp":1789413463971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-content/themes/photoframe/js/photoframe.js?ver=1.1.3 HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:17:44 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jtt7n4DEADAGqWTEh8qxZIOJNgpQrcepSiua7RcuUZqSQVylheDuy8T6PkDDGCrb%2F42rGX%2Bbg1dH9cN2RPvdkIph1%2F6JrF9EE00AkJ7jRXOtAHBL6r9yyUeo%2BOdqBqOyBSpL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1bbc5ddd08755-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3267,"size_decoded":1752,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d748ab8f44b28ce8d969b42097546bb6","sha1":"a16a9464f4e4bdb16e308b08afb0dad64c96c084","sha256":"82526037a5538b98e6e6471966ecab013c95b833152c2737809ca7dde64ef6ad","sha512":"d1833a31d7cd1646fa7ea15a7380aa8262d86ab2d3185c0b7b08b8bfcb50d12c2789fe88ecc7de6ad04f4d62b0532d9ecd19b37ccba4245a1de000de72c9a18a","ssdeep":"","tlshash":"8c611386b14f267b47fa27b592399280b97cd604e205a02974fec43d14e4a672363ded","first_seen":"2024-08-08T01:15:33Z","last_seen":"2026-09-14T19:18:21.795604Z","times_seen":12,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/plugins/ultimate-social-media-icons/images/icons_theme/default/default_facebook.png","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:43.979Z","timestamp":1789413463979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-social-media-icons/images/icons_theme/default/default_facebook.png HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Mon, 14 Sep 2026 19:17:44 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b1bbc5edd78755-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2146\r\ncache-control: public, max-age=10368000\r\nexpires: max-age=A10368000, public\r\nlast-modified: Fri, 07 Aug 2026 18:45:46 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A9ITeCKjH9a6xrtgiPbRQc0XBxWXz4Gn1P5jUMg5U%2FhvlVnFH9a24ZSQJtadydPxwrcSPH2TU1mef6s%2FdI0EeCGVrI%2BfvC2QxkqcE0KZH7XmrsNWBLz0ncIQ%2BwWfNrQZQh2n\"}]}\r\ncontent-length: 1357\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1357,"size_decoded":2128,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"fd252856427200b657dbc55dddbd1217","sha1":"af4029bf1ab66c8211b37fe27f7e0e3bfa588f41","sha256":"0dce5940cfbb1995ffa0933df7bdd96af2b9bfff5f4ae12dc1641ad0ce920019","sha512":"90744ec7e867d926f173894c7a5ba5623207966c2e970644f6ccc27ba60902d46c02c1e8732582597e01050c2c6b87cbfa076ee1ad77f100c5a8e0418527213e","ssdeep":"","tlshash":"3021f8df6f46518ff8b885309df68e32639828cf6a0169130e2d23a558b8c1c11e99ac","first_seen":"2023-05-07T22:04:45Z","last_seen":"2026-10-14T21:24:17.650139Z","times_seen":763,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:44.132Z","timestamp":1789413464132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://konikstudio.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 18:08:24 GMT\r\nexpires: Sat, 11 Sep 2027 18:08:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 263360\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-10-14T23:34:26.64718Z","times_seen":571392,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":33,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-N5L3YY7SWX\u0026cid=99283204.1789413464\u0026gtm=45je69a0v886836196za200zd886836196\u0026rcb=8\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938465~115938469~118897920~118897930~120213116~120385422~120469145~120469153\u0026z=1668083920","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:44.371Z","timestamp":1789413464371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:40:49 GMT","end":"Mon, 02 Nov 2026 08:40:48 GMT"},"fingerprint":{"sha1":"AC:46:A3:8B:39:87:22:F5:32:ED:16:91:E0:7E:28:F9:39:7F:D5:13","sha256":"A4:B2:FB:D3:1E:80:B3:DC:DB:0F:63:1F:D1:60:FE:3F:E6:F8:61:9E:91:4E:FF:2E:A6:1E:2D:71:C9:D0:1F:75"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-N5L3YY7SWX\u0026cid=99283204.1789413464\u0026gtm=45je69a0v886836196za200zd886836196\u0026rcb=8\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938465~115938469~118897920~118897930~120213116~120385422~120469145~120469153\u0026z=1668083920 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 14 Sep 2026 19:17:44 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-10-14T23:38:25.127081Z","times_seen":1108977,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":37,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/cache/wpfc-minified/97okg7ln/2746k.js","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:43.954Z","timestamp":1789413463954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-content/cache/wpfc-minified/97okg7ln/2746k.js HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:17:43 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9xdq9itg43iMCjh1H%2BG5uZGxFR%2FMdcYLTAK7BJsyL8SEiN4Rsql%2Bptr8DSSFiFpIn%2FyToEk2N%2FRKrFdEv4CHAeCHy7Aum3IJs71Zj8bmFdMV1FRtwWPQbafe%2BfMM7nL46uxH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3b1bbc5cdb98755-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146367,"size_decoded":50731,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (56117)","md5":"6e37e95fcdb495d1542c8bf87ef05e6a","sha1":"4887bd9ebeef64428f4a0d246ee67d2ddfe9a405","sha256":"e4869321d6662f992be1fe0c9950e63d836e4d02eb12ce23a99200455029cefd","sha512":"3ffa054ad55f60904cebd9f839a48efce33d317b5c9e104076c759f083de3e9e4955ddd404950d1387c1a889452becf601670eedc10c75558a103030ec7d3dc4","ssdeep":"3072:sHNwcv9VBQpLl88SMBQ47GKRrPU+Zt3dOWw:sHWK9VC78UBQ47GKRrPU+ZiWw","tlshash":"d9e33ade739574324be721be206f910bb2734989a80d8414b168d8d9bc7c98a5337fbd","first_seen":"2026-09-14T18:42:42.757025Z","last_seen":"2026-09-14T19:18:21.797753Z","times_seen":2,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/plugins/ultimate-social-media-icons/js/shuffle/jquery.shuffle.min.js?ver=5b87f4bbb620920693bc9e41f3cd2945","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:43.967Z","timestamp":1789413463967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-social-media-icons/js/shuffle/jquery.shuffle.min.js?ver=5b87f4bbb620920693bc9e41f3cd2945 HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:17:44 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tMEJHxKfKS2E5ew1zxBFUHhPmhhBZAFb2gD%2Fnt4qf6aCFgEj0P19LfWRflObFDy9AAfXgLrjvCuSoccpbP5PvOHLPAKfBPDFZotfXICZRrcQhPW8pGCylC%2FRu40EpMbUkVGy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1bbc5ddcc8755-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11484,"size_decoded":4967,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11484), with no line terminators","md5":"2b01351f36285d266938cfb15ae487a4","sha1":"643579a331557dedc16ed0bceb1c7780368b9a52","sha256":"4c5e10b3496ff844faf3e2d032e243d4a366a5cbc95ad7bef5dd924322e31b3a","sha512":"5f6d293d1e89fbaa2eb6a317201652fc948b04d36f413f95bc934ff7ebf6cd6aba1e9435a18fc8aef35995a3f97c0c56df1a986cb26bfebbb60a664ffd8b4599","ssdeep":"192:j6WqNTY8eI+qgPnTv2o0OTuTPko3SBgv6WJ+df:jrq2HIMOYyTXCB+Qx","tlshash":"b732a34e31907156a2a3f16144ff250b203a68397a13815c747fdedede6e84e207beb9","first_seen":"2023-03-07T12:06:17Z","last_seen":"2026-10-14T20:53:44.512408Z","times_seen":4356,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/uploads/2023/10/Wesele-w-Kapitanskiej-43.jpg","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:44.113Z","timestamp":1789413464113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-content/uploads/2023/10/Wesele-w-Kapitanskiej-43.jpg HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Mon, 14 Sep 2026 19:17:44 GMT\r\ncontent-type: image/jpeg\r\npriority: u=4,i\r\ncf-ray: a3b1bbc6ce288755-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2146\r\ncache-control: public, max-age=10368000\r\nexpires: max-age=A10368000, public\r\nlast-modified: Sun, 08 Oct 2023 19:38:05 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CFrU8RlKZECbB7Ie2q7x%2F3JcCQEGPOhnu9rN6tTY%2FUaf5bOmoUviGlGMECVIWpZ3lzwBZ6CV7NALz%2Bjo4SbTUmX%2BWwVaYLAe%2B6I4Zs9Y8QtQwuPeHgvqerkjGLTxUlY3iq0I\"}]}\r\ncontent-length: 272649\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":272649,"size_decoded":273425,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1500x998, components 3","md5":"75c5461a8f34fb6c586c97848fe0ea82","sha1":"71a34ecec216f6827ce66af02c40e87e0cb3d094","sha256":"11177c3a2ed3cbad1045c1c9badf7203808a17226fcf48998829f7768864517b","sha512":"6008afb224535326a01de74a5dac30c667f405b02a01902f601a5b032935f17815970db16b2c07b3e79a0ace2f94c10773b4e02b2e69e60e56a3fc51bc3bbff3","ssdeep":"6144:colG0iF97t1JsWPFHkD/Ecio1juJ4SE/wIPJ4ldDtTIBx1z:coG9xlED/EcB04SE/wIPJ4lvEx1z","tlshash":"5e44235195d9df32cf6faab85bb08d060711c10a0da2fd493bc4a0a36e62546f0fd5a5","first_seen":"2026-09-14T18:42:42.745138Z","last_seen":"2026-09-14T19:18:21.798944Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:44.126Z","timestamp":1789413464126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://konikstudio.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 18:08:24 GMT\r\nexpires: Sat, 11 Sep 2027 18:08:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 263360\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-10-14T23:34:26.64718Z","times_seen":571392,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":4,"connect":31,"send":0,"wait":19,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-includes/js/wp-emoji-release.min.js?ver=5b87f4bbb620920693bc9e41f3cd2945","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:44.443Z","timestamp":1789413464443,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=5b87f4bbb620920693bc9e41f3cd2945 HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nCookie: _ga_N5L3YY7SWX=GS2.1.s1789413464$o1$g0$t1789413464$j60$l0$h0; _ga=GA1.1.99283204.1789413464\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:17:44 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zDjAEmEohSH1S09ZQsdT%2BS3oLjeUmR1BepDuZg18u%2BPKBhuVaUg5zETKbVXEe0uPgkjD235bY03INNJstHNUrLhhbDdJxnzsrYNRTjcH66292JMR5QpRvyxE1sTUXfGBlHOO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1bbc8df118755-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22752,"size_decoded":6191,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-10-14T23:37:04.010479Z","times_seen":86532,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/cache/wpfc-minified/k9w81y8w/2746k.css","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:43.952Z","timestamp":1789413463952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-content/cache/wpfc-minified/k9w81y8w/2746k.css HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K6p6HFo0hFq3FvYonUh8SvkxpzqDN%2BgEF03qWw3qoNqslDtS6Qmttd8ZwOxfr%2BSTaoKl0obPjcQbjAAJrk%2BqIQEh5ksMeabD5YztgtJdj6K9Jmuk8gT0VJqAQQmvtQRF9lqr\"}]}\r\ndate: Mon, 14 Sep 2026 19:17:43 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3b1bbc5cdb88755-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2146\r\ncache-control: public, max-age=10368000\r\ncontent-encoding: br\r\nexpires: max-age=A10368000, public\r\nlast-modified: Fri, 07 Aug 2026 19:43:44 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":62411,"size_decoded":8658,"mime_type":"text/css","magic":"ASCII text, with very long lines (62411), with no line terminators","md5":"4fcc0486558cdad1cb5e8cda81473e34","sha1":"95adf283fb6ae11e6e9f7952e39c1c25834b09c2","sha256":"04d1328b18012f1ee0dc039ae461f56847e381770425914665787c39f496462b","sha512":"44b56752054f3bf369c091f294d71ffe33b18055e7aba37645218c04559239b538d8f72e3953d0db35d2a9fe9bde0c6686a1dd5ac31851fba7e7448043513e3b","ssdeep":"384:Ws4J/8DEksCoI+SBQYO22/RmRs5Cz9TQXPTkvmGkvmCFldtraiIks05ArOw/Dzp6:dFLh5mP3RbrlDdps05Xwvp5wXD","tlshash":"f9533e633e23b369226f842b82c7364c526485c1da0379d9f944c527dafece53b3685b","first_seen":"2026-06-20T13:04:39.115424Z","last_seen":"2026-09-14T19:18:21.800236Z","times_seen":4,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.7.2","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:43.972Z","timestamp":1789413463972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.7.2 HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:17:44 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LoDgJDeiEDQnb6W4c6sjgQqkqPdKAATfHSUfFP8TqfCkkfB17VoLCPHrzGYvPWhC1%2FFGpS0yKvADjMidZyb3KkUCI%2BVO5rhE6jYFyD271tu1KduPrv5Cv9xqKscL9CThcOZI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1bbc5ddd38755-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11619,"size_decoded":4903,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11619), with no line terminators","md5":"528aeec7791fb55273294ce47d047eed","sha1":"fefcee27584e760c149a07ec0f5642dead81e7f7","sha256":"120255c10e9d3dcf6fcb86b77761401414036d9f83e957104afccba8546751ba","sha512":"cd9e6b2477ff85d894c45826eb6a87db7eedc9af4f58c299a46206983dbeb29e54ba083a6a36b934beb08eff24d515264b2cbfd8d3e37835de22c3ead35e3dfa","ssdeep":"192:4v6LbN3SLFNjilRm5ReHKj2H8gH+gwnmMQwco/0MbYrdpb9pPkx:4v6LbNiVii2KnpcLpb9p8x","tlshash":"7232e988378776f056b36025947f761ab136ab74741c8850a21ad8e06db9d8fe073f3e","first_seen":"2026-07-17T12:56:12.232628Z","last_seen":"2026-10-14T18:37:13.215602Z","times_seen":2480,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/uploads/2021/02/Logotyp4.png","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:43.977Z","timestamp":1789413463977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-content/uploads/2021/02/Logotyp4.png HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Mon, 14 Sep 2026 19:17:44 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b1bbc5edd58755-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2146\r\ncache-control: public, max-age=10368000\r\nexpires: max-age=A10368000, public\r\nlast-modified: Sun, 07 Feb 2021 10:56:28 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NspzZW2WkqccUwgUVsmiuvI%2BPSClqRtEHuTDAl4X7ap7ST9fh9vssV9OvA0BFDifIGa6r%2BVrzQpBi6N%2Fce2KwrR3Bus2SydqjLdOeqW4vZfNDyrqaIxtZnkchrQe2pNgJnH5\"}]}\r\ncontent-length: 27861\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27861,"size_decoded":28631,"mime_type":"image/png","magic":"PNG image data, 375 x 100, 8-bit/color RGBA, non-interlaced","md5":"3f346efba034a071e1689e68dd66f28a","sha1":"684599d1510f30c908dd17d90330ad6b1fa1c723","sha256":"4c2d334c1fa5089685c1b0ab52d680cf04e3679c46a24a0d5315058cd61a52bd","sha512":"dd002ca614acbac6aaa555a2bd32319ea1d0c57e5dd82cd6e4ba93f39842cc3e292f3e33567d9bc334a871c473e080d58179f221a10feee196814c8e002940da","ssdeep":"384:PzxtUE9d47M/Jtfr2/s3BZRYgAXGtNqzvyuENvE3f:bxtX9a7M/Ga72G/kvsmf","tlshash":"f2c2ae753cf03812a40d8e366dec085d5cb69a93ed90ec40ba8d5e431f10b8e5e1b5a6","first_seen":"2026-09-14T18:42:42.758244Z","last_seen":"2026-09-14T19:18:21.80177Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/uploads/2022/02/Slub_plenerowy7.jpg","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:44.109Z","timestamp":1789413464109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-content/uploads/2022/02/Slub_plenerowy7.jpg HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Mon, 14 Sep 2026 19:17:44 GMT\r\ncontent-type: image/jpeg\r\npriority: u=4,i\r\ncf-ray: a3b1bbc6be238755-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2146\r\ncache-control: public, max-age=10368000\r\nexpires: max-age=A10368000, public\r\nlast-modified: Wed, 02 Feb 2022 19:07:45 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j7AyRLHA7zEWTRxO9g9V4O4UoFnjaWg7LwQA%2BuImk5j1z%2BiHbw64SRk4yRaoNZZixTDq19z%2Ffc3h1xJ%2FufHQXbS9QXnPH56DlF7WGDeU%2B0exNcHQTntqZkr0zfV1azYN%2FQvZ\"}]}\r\ncontent-length: 298740\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":298740,"size_decoded":299518,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1500x1001, components 3","md5":"70d16003abdc95769653441f0492e87c","sha1":"a7e775d5db4ee59e05bbd16b7f2c97ecf791a85e","sha256":"0a78ae6920664ca112ca649bd0aabfda02f4e5c86541b041544801204cf1f444","sha512":"a0c185920d3f6cde85d23e4ffbc19f1d70480dcb41f2774b2b2efabb30d4852ca59acc2481885fadd041e08c41232a99a5e309f3db5f3be01054922f8cf44388","ssdeep":"6144:gS5x+dxUjQMPENHXXtvKSzHfE55EpjqE+5YwyeDXWcSW4bFdl7vi:5L+Esl5XESppXnwyWXWcSNbVu","tlshash":"8b54232285726d7be2f088f078b1ddf63e761ab410efa6440916597af7b7443c2c7826","first_seen":"2026-09-14T18:42:42.764467Z","last_seen":"2026-09-14T19:18:21.802364Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/uploads/2021/04/cropped-ikonka-192x192.png","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:44.282Z","timestamp":1789413464282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-content/uploads/2021/04/cropped-ikonka-192x192.png HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Mon, 14 Sep 2026 19:17:44 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\ncf-ray: a3b1bbc7ce828755-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2146\r\ncache-control: public, max-age=10368000\r\nexpires: max-age=A10368000, public\r\nlast-modified: Thu, 01 Apr 2021 16:41:40 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B5%2FAvvYILj0imCLUyVscw1Awnm6yfRAF0C2%2Fmb3tQOmEcBRBFQfpCX27DzIui7G2HBC%2B9VIyWk3aCrjw6keOsaXEtXAchK4EQQqxkrjY151y81BkKe%2Fen33FCx5zmCixfCGG\"}]}\r\ncontent-length: 12974\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12974,"size_decoded":13749,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit grayscale, non-interlaced","md5":"6bd548f070d4a6025f99b15d0b54d8ef","sha1":"2b0d55d89a5ebf523321f9b5a3d956af6370eade","sha256":"f6c8dab8e6877be23c3eea9c1d610db0d9876e04ecf2ff685ee68546f800cc6e","sha512":"9e66648a39e3384dee8a16363c07a65f7f6838066d16f836ed9c153083df4d79d460e6d893cb5b7277300f64043f832b91ebc4be158859d201870f6b1faa12bc","ssdeep":"384:piArcZTSNO66vhWAOfQLzmafPGYpkgVlW:pi0wfdPma2YpPXW","tlshash":"6d42bf8bf5ea8ba0063698d2d5382bef73264e5dbc039e1b40e5dd3eb59715084e640d","first_seen":"2026-09-14T18:42:42.767911Z","last_seen":"2026-09-14T19:18:21.803031Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-14T19:17:43.139Z","timestamp":1789413463139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nw5Xt%2Bjinzeo03Fn42wTGb9mChhnjmzPgS%2BkMXyYTU9OdmqnjOq5Yx2h7kFfpaVS7eqMNEB%2BWVvkBK7R9CspknkctHTIUagc02xWLqPA6uMbNOEovuETFWKKKrQoeuC7Rb%2FT\"}]}\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Mon, 14 Sep 2026 19:17:43 GMT\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\ncf-ray: a3b1bbc10baf8755-CPH\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\npriority: u=0,i\r\nexpires: Mon, 29 Oct 1923 20:30:00 GMT\r\nlast-modified: Fri, 07 Aug 2026 19:43:44 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\npragma: no-cache\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WP Fastest Cache","description":"WP Fastest Cache is one of a number of plugins for WordPress designed to accelerate the performance of your website.","website":"https://www.wpfastestcache.com","common_platform_enumeration":"","icon":"WP Fastest Cache.png","categories":["WordPress plugins","Performance"]},{"name":"Yoast SEO:28.2","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Elementor:4.2.2","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Contact Form 7:6.1.6","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"UltimatelySocial","description":"Ultimately Social (Share Buttons \u0026 Sharing Icons) is a plugin that allows you to place fancy social media icons and buttons on your WordPress website.","website":"https://www.ultimatelysocial.com","common_platform_enumeration":"","icon":"UltimatelySocial.png","categories":["WordPress plugins"]},{"name":"Site Kit:1.184.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}],"data":{"size":45631,"size_decoded":13484,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9139)","md5":"acecfe1d8e7908c1592b20b6abf57f01","sha1":"460ae3123ee016da540874da654a765c7add5757","sha256":"e9a1573c0e4deb89f672145cf1283acd5f97d5722c8647d1e95d860bbef2e283","sha512":"9cf273a938b449f423a2d530fc1b98e6b153c0d2ccd425737e3a428eec15cf61a09d96e3f5911b5694caf097434a32940e24ffaf4dde35ca916ec0580598bd59","ssdeep":"768:KtjZdyp6GSp336whbNwJzeqwqcr9AdHXUGmgQn6jZ8Xnl06AUD0J+b0vLBL7:gjypBSF37/qcr9AHXUGm1n6jZ8Xnl060","tlshash":"9a233b73ec5824bb6b4a4bd9b06e332cb6b9d409cb029679b1fca16c57d0af105b350d","first_seen":"2026-09-14T18:42:42.75399Z","last_seen":"2026-09-14T19:18:21.80363Z","times_seen":2,"resource_available":true,"data":null}},"time_used":411,"timings":{"blocked":0,"dns":19,"connect":34,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Frank%20Ruhl%20Libre%3A300%2C400%2C500%2C700%7CMontserrat%3A300%2C300i%2C400%2C400i%2C500%2C500i%2C600%2C600i%2C700%2C700i\u0026subset=latin%2Clatin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:43.951Z","timestamp":1789413463951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Frank%20Ruhl%20Libre%3A300%2C400%2C500%2C700%7CMontserrat%3A300%2C300i%2C400%2C400i%2C500%2C500i%2C600%2C600i%2C700%2C700i\u0026subset=latin%2Clatin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 14 Sep 2026 19:17:44 GMT\r\ndate: Mon, 14 Sep 2026 19:17:44 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22972,"size_decoded":1748,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"131a2e877d01feb82bd014eac15dc72f","sha1":"cde969b1b72e2663d3e6991d5cc405a3d3837cb8","sha256":"6463b182dca18cf6d17f40c416cec94906d6b6394f77dd3a03e2f01467b47b4d","sha512":"278fd5894d667d90ab3df55567038a22d44a85dd73e9472de74fe0734171130c16853a23386ed2a6408e5b97ab6fbd128fc4fd8e8429fa0c803ff49de32d61d0","ssdeep":"384:new3FsccLwgFx9dwwVFGGeFwmFjHnCw7FYIxb/SjpbAfnM:Q","tlshash":"e5a2ee91012be500a7431cc623cf7d36ce4e62667494d436bafe2ca8fde6c265321b6d","first_seen":"2025-12-09T00:42:28.842536Z","last_seen":"2026-09-14T19:18:21.804234Z","times_seen":8,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":36,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-N5L3YY7SWX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:43.956Z","timestamp":1789413463956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-N5L3YY7SWX HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 14 Sep 2026 19:17:44 GMT\r\nexpires: Mon, 14 Sep 2026 19:17:44 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 167424\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":495967,"size_decoded":168028,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"369b883a844240db435afa28b7c4a1c0","sha1":"30091effe82d058f87a0610418d6a55e19a7c153","sha256":"83c51a81023fd6b3a4474903f3f051a106d44cb3589c3c12dbe2c0284e09ac94","sha512":"bd34aad7a6de56703bb340a322a4a698a6afcc7d778416618c849f655a376dc218bc8a32c206132ca8f5756fe27a9c856629da1349d037de96e57f18b22a474a","ssdeep":"6144:xunf1L6SSxQhmgyyEydQV80ucTPbNELR3/jb5WS3KNS3IFZ:sx0yAynN5JiSU","tlshash":"1eb42acd73c674229396f178903f018ba57b29a2b49cc895f18adce42d3465a9237f7c","first_seen":"2026-09-14T18:42:42.771339Z","last_seen":"2026-09-14T19:18:21.804874Z","times_seen":2,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":39,"receive":56,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/plugins/ultimate-social-media-icons/images/icons_theme/default/default_instagram.png","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:43.981Z","timestamp":1789413463981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-social-media-icons/images/icons_theme/default/default_instagram.png HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Mon, 14 Sep 2026 19:17:44 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b1bbc5edd88755-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2146\r\ncache-control: public, max-age=10368000\r\nexpires: max-age=A10368000, public\r\nlast-modified: Fri, 07 Aug 2026 18:45:46 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fEffSp5QD3tcqDa%2BKLKR2dcRGcdslzATzlsHpu5XSGNfK3kmkzly3AqPT5rJNGBLvAYAZXY9KsSyRGVl6d5tBZMghJXnCbkhq5IqcIYUcg8ZYVgXdFXfBwCnUrseVnZOW65d\"}]}\r\ncontent-length: 9059\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9059,"size_decoded":9824,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"beba7b387f04613cb0877eb9ce7c9441","sha1":"133889f27b630134dac00ef42030c89f0b6e6dcd","sha256":"84b9e1a326d4700c07ace98644a2a0c39d2216ba280ba82a9e6ba37c2cf230cc","sha512":"f11f1a443743520db97f674201b671789cf2b81c143a27728be5bb14e6e63ca3f3bc68849f846c4944f57c69e237f742ac2ee9ca090b4c08d5eb55ab9a7e4e58","ssdeep":"192:ISJW5o0nI+C8Pp2CY+McBZbIwEgS/6X1s/QazYOBrlCxolD9oga:PJgoSjCU7ocLa/o1sBzYXQDyga","tlshash":"0712b01cf30a773502d233293502fee7cb5c2c32d19da6c7b20e276f2641b46e986524","first_seen":"2023-05-07T22:04:45Z","last_seen":"2026-10-13T16:39:19.28473Z","times_seen":560,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/uploads/2022/02/Slub_plenerowy36.jpg","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:44.110Z","timestamp":1789413464110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-content/uploads/2022/02/Slub_plenerowy36.jpg HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Mon, 14 Sep 2026 19:17:44 GMT\r\ncontent-type: image/jpeg\r\npriority: u=4,i\r\ncf-ray: a3b1bbc6be248755-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2146\r\ncache-control: public, max-age=10368000\r\nexpires: max-age=A10368000, public\r\nlast-modified: Wed, 02 Feb 2022 19:09:24 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o4Dth5hGiI8WyehxLa2gUofvWlhWY0XAz0xG5o9WY3NUYcY2knOYHOsqGElVoFwvGp2X3cgzcZ3yuUmUuqIkdg0ktIjzddxRM4bnXvSH%2BC0GhU8vQCmA5KDOZhvsRxsm5WFG\"}]}\r\ncontent-length: 300592\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":300592,"size_decoded":301360,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1500x1001, components 3","md5":"14e11aa0628012f47a61acbc45190c5c","sha1":"cf08886d6bd13f75fca7d394c5b5db4212d8d007","sha256":"e8e0d5485ef883cf97d5993e0a0b08342d1a221409c67293f0e5c5363596f037","sha512":"fac796a2a9504a6947d57d9003ca37c9e8e4e58a989e6029d54d5e736ae9de30756e6ed73b965366667e497172a392fd53e6c6656504921c40198900082c38e3","ssdeep":"6144:Z5f6dKGCdmNL4r16RdJL8XE9ur+5JMv2ehdMQeBgY5hGTNZoNQ5ID:Z56dKGCdmN8r1Gdl809uouv2cdMQc5hB","tlshash":"b25423e71ee4960fe7e87f3412deb7a0f822b943b311b95a606474a531304acac57f19","first_seen":"2026-09-14T18:42:42.769182Z","last_seen":"2026-09-14T19:18:21.806784Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:44.127Z","timestamp":1789413464127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://konikstudio.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 18:08:24 GMT\r\nexpires: Sat, 11 Sep 2027 18:08:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 263360\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-10-14T23:34:26.64718Z","times_seen":571392,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":24,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WdhyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:44.131Z","timestamp":1789413464131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WdhyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://konikstudio.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 70532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 11:02:51 GMT\r\nexpires: Thu, 09 Sep 2027 11:02:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 461693\r\nlast-modified: Thu, 04 Sep 2025 17:10:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70532,"size_decoded":71345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 70532, version 1.0","md5":"a3538ea24dbf115d688964fc374db38c","sha1":"d5ff95b327b6cb2371a0f0cfff9092d2f7f6f58f","sha256":"545f27e4a3f64bafcffd2912b4d9e4d8b89fb7a87f5d257fdb4eae3c0eb9e224","sha512":"cd0d910665c070475cbe4b4e0830be5b463d3ff2537ca174e875ceb610f0f0cc627ff33dbbc95fa3e308e8cee0d0fd697e85e1244aa6023ee3113b3d10815fbe","ssdeep":"1536:1+9A/N3bmPFNtCqzOzD9khgUkon9FoooVdjlV+It4UEct:1+oBINnCzXUv/obdjlVfyM","tlshash":"5d6312976c22c87f804a02f99ebee1b487733021192a1b1370aff35654d46684afef70","first_seen":"2025-09-05T03:00:03.770574Z","last_seen":"2026-10-14T23:07:50.919848Z","times_seen":14262,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":36,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:43.958Z","timestamp":1789413463958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:17:43 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1igPllDKjftg4ZNI2D5R7QWbd1q5RsUR3zILdndDz%2BSVNboldDFvaAHOVuRuXzuJO7%2BueU%2BwfdUXih3LLKDHbXUPlpnH8SPDYQB%2B7wYLFUSps3n9vNws9kHzC%2BP%2BhvL%2FP36Y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1bbc5cdbb8755-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5050,"size_decoded":2506,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-10-14T23:35:33.58052Z","times_seen":32268,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/frankruhllibre/v23/j8_w6_fAw7jrcalD7oKYNX0QfAnPW7Dl4briiY6hBg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:44.128Z","timestamp":1789413464128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/frankruhllibre/v23/j8_w6_fAw7jrcalD7oKYNX0QfAnPW7Dl4briiY6hBg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://konikstudio.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 44260\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 08:52:18 GMT\r\nexpires: Sat, 11 Sep 2027 08:52:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 296726\r\nlast-modified: Tue, 09 Sep 2025 19:04:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44260,"size_decoded":45073,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 44260, version 1.0","md5":"def5a63bcfb21f853bfadc8fa2402e5c","sha1":"f705e727782014e59bd051ce9d9e62e449136d0f","sha256":"dd7ba212ad845e5d7c8fcffcddaf126909691e6ae4dfb64579930f2dc752a50e","sha512":"3629364eb053943c8e1c858306a0819b99d5f9082bc22aaeee4de6f89ea5c903ed3036a62c63443147b4ac3b41360fef85a72a55080a46c76dc59ab335508997","ssdeep":"768:5t8F7Bv0rsHTIRRkiTCukRwASXjWxeMrTBOetm4FMly5WgFrSfP20McR:5izGsHkjNC5RwASXKlrTBOVPoWK+fu0D","tlshash":"4513f1b469f0b8e0e617ae6035b7c6bbca602be7d261ddaf6520243f40c978047505e6","first_seen":"2025-09-10T22:33:05.137506Z","last_seen":"2026-10-13T20:58:00.975751Z","times_seen":1218,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":50,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f642.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:44.483Z","timestamp":1789413464483,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 19:44:43 GMT","end":"Fri, 20 Nov 2026 19:44:42 GMT"},"fingerprint":{"sha1":"71:14:CE:1E:D1:35:48:65:9D:D4:BE:BA:7A:F0:EF:FA:97:28:79:00","sha256":"98:51:EC:74:34:EB:FA:D4:3F:28:B7:CA:B2:41:04:70:21:25:B3:7C:AF:89:AF:64:1B:93:11:E2:B2:7B:F2:E7"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f642.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 14 Sep 2026 19:17:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:29:30 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 13\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":525,"size_decoded":826,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da3651e59d6006dfa5fa07ec3102d1f3","sha1":"682e14ed012f6da166aa1658921caf3482245903","sha256":"943c44a0f3dc1aba84f5fbe8465baadbb90af66cd7be9f37ca07a39260357ad2","sha512":"c66ac9960369f9d549dd44180ecfa1197cc7a56d639b988ebd3b3830752f109d9249f6ac8f0c830569aff5acd94a972d7a66889953b7657a5c8bb0e1c7b9f679","ssdeep":"","tlshash":"eef0c0cc709db0924d48e31013efd9d0625b241f4d9947cc32611908bb09edf31107e4","first_seen":"2023-05-01T03:34:18Z","last_seen":"2026-10-14T23:50:11.577779Z","times_seen":5755,"resource_available":false,"data":null}},"time_used":3256,"timings":{"blocked":0,"dns":2,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3237},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/cache/wpfc-minified/qwmj2mz0/2746k.css","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:43.948Z","timestamp":1789413463948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-content/cache/wpfc-minified/qwmj2mz0/2746k.css HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l4PLL7B5xo90cTDv3xOWLDINB281LBmoPVY44xHa9M5FyZowVegGtfp0ex%2FLp4bDfiPlyBMMjcAzfcZHfgMyRjRZiFIQsb0CVYSkkG78xt23nnMzjrj7ORBVR5gAaX9vNEeb\"}]}\r\ndate: Mon, 14 Sep 2026 19:17:43 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3b1bbc5bdb48755-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2146\r\ncache-control: public, max-age=10368000\r\ncontent-encoding: br\r\nexpires: max-age=A10368000, public\r\nlast-modified: Fri, 07 Aug 2026 19:43:44 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":159618,"size_decoded":28863,"mime_type":"text/css","magic":"ASCII text, with very long lines (5831)","md5":"098dde3fd12d4bfbec9893251fa95076","sha1":"596c36bf1faad6f2aefcd77970d4b3a129f4de07","sha256":"9cce8352713a50e367c2deb388c4dfd43c6426612040b18ac3c64461a0ffeea3","sha512":"a9a2e7479a140a6e491fb6dd8341c3265352c949ee6459a2ebf246b83988c114372f7fd4d51d9319a27e3c67ebb0bedc3b53874c45be5576ddc284449e01dd62","ssdeep":"3072:cz7WsQXBI6JLZbUb+Rm6U822RS+SbVTFiS22l7p3:cz7WsQXBI6JLZbUb+Rm6U822RS+SbaSv","tlshash":"a9f3b767e21415c0b337c15bbb51b3a52b2de35bd6066d78f0eb590c82cb2a143b2b5e","first_seen":"2026-09-14T18:42:42.74105Z","last_seen":"2026-09-14T19:18:21.809987Z","times_seen":2,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/uploads/2021/04/cropped-ikonka-32x32.png","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:44.284Z","timestamp":1789413464284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-content/uploads/2021/04/cropped-ikonka-32x32.png HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Mon, 14 Sep 2026 19:17:44 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\ncf-ray: a3b1bbc7de848755-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2146\r\ncache-control: public, max-age=10368000\r\nexpires: max-age=A10368000, public\r\nlast-modified: Thu, 01 Apr 2021 16:41:40 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2FgR83Cwbm6rROFoAUddinlHuubgNB8YIZSJmdkUWuliRChSDBOU6PIrBWwt3qXIqQur5nbRUYcQ2eRXpT8CqVBg%2BHA1KMio2li0cF%2FQpyaXKdLWrRCnBmY6uuwLKPMLElQa\"}]}\r\ncontent-length: 730\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":730,"size_decoded":1501,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit grayscale, non-interlaced","md5":"dd16e674c931547845077d47acc15c7f","sha1":"b6f707e40c8fccb0b278cf91c8457b3e34ce6613","sha256":"00c892d0fe9ac3422a61c22342a45097b80f62cc6b096cdcb61cdccdd55ba6c0","sha512":"358b758988f562a4838b9940dc4f9c9e5ea9cbf69d87dc3162166f25b8c65a1288d35b33e3bcd795bf1a817dcabd22e7f672d3ee14145a2c644b3cce67c44139","ssdeep":"","tlshash":"430165c725fcb13fc855846b2a431e49147233640368d05151f9e6710936033b2fa4a2","first_seen":"2026-09-14T18:42:42.749678Z","last_seen":"2026-09-14T19:18:21.810531Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/themes/photoframe/images/sprite-arrows-small.png","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:44.372Z","timestamp":1789413464372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-content/themes/photoframe/images/sprite-arrows-small.png HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/wp-content/cache/wpfc-minified/qwmj2mz0/2746k.css\r\nCookie: _ga_N5L3YY7SWX=GS2.1.s1789413464$o1$g0$t1789413464$j60$l0$h0; _ga=GA1.1.99283204.1789413464\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Mon, 14 Sep 2026 19:17:44 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\ncf-ray: a3b1bbc85ece8755-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2146\r\ncache-control: public, max-age=10368000\r\nexpires: max-age=A10368000, public\r\nlast-modified: Wed, 23 Nov 2022 18:15:26 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uHa2rPZ0tQxE51uXtJf9eEEEtbIuWxVxThhrmRDAXAKEK6cmBJbrTwXThAMHchRaYom9T2AsnA3%2BjTQIW8GZrjQoPobtb5onT7eZJJ%2Bg6QyEepvK5D5rfM2CeVSmkjMjCMJx\"}]}\r\ncontent-length: 797\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":797,"size_decoded":1563,"mime_type":"image/png","magic":"PNG image data, 20 x 40, 8-bit/color RGBA, non-interlaced","md5":"3e8299ed6b4c2663476e19182a2eeb12","sha1":"d6e7a181285833f8f85ea3a3cf94e8e263953e92","sha256":"70ee7c916d414cafc92276796ee18b7ca8d4f2d3740c8caae149ccebd6933e8d","sha512":"9a18622952a0212fc8be650549b679bc162574197bd55bc78455760a139f58ecf09951e3fd45948fea75bc822633b960e6ddc87d67d7e5b370b4b61470d66db6","ssdeep":"","tlshash":"3901818163080fa847717ab0048eceafcc2106f99ce18b9a9749b19d4904512f930bf2","first_seen":"2026-03-01T09:51:19.815055Z","last_seen":"2026-09-14T19:18:21.811075Z","times_seen":4,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/plugins/ultimate-social-media-icons/js/shuffle/random-shuffle-min.js?ver=5b87f4bbb620920693bc9e41f3cd2945","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:43.969Z","timestamp":1789413463969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-social-media-icons/js/shuffle/random-shuffle-min.js?ver=5b87f4bbb620920693bc9e41f3cd2945 HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:17:43 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2M1wybjdeQmspHPcr21Z2epeK4maIwY6uycDLH5gn7APlWsWUd5ZhMkg3BdBcEgvOHD8wM6vZjjnXln%2BYYnoeNV9kyMKdyvyCAygnfA1hQnTt41kNptC164eGMrnaBOaZ9QI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1bbc5ddcd8755-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1472,"size_decoded":1321,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1472), with no line terminators","md5":"9205d1691f1303227809875d3a6ee811","sha1":"71094c5c5a6f50bc3d94cf9f99f768708a437e6d","sha256":"8577be08e13d868781746fd18e27a2d95ee4658c33221ec7659ece82d4d31463","sha512":"0806f175eb2c418754569f152e7c7b0f809ac951ee178969b4d3fbf0e29e4fa68caf224fe897885a2e4f673ba08a1de9fb53a22e0cf1a71ba53007e24baf318a","ssdeep":"","tlshash":"67310e08b5a2213ac226a0b9092f5d0a7373b178ae0b07447560d8b1a83ec894b26f35","first_seen":"2023-03-07T12:06:17Z","last_seen":"2026-10-14T20:53:44.593039Z","times_seen":4643,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:43.959Z","timestamp":1789413463959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:17:43 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2Ff9SeuHnPP9408T93n6053FvUnu7ZdLhx3rqqr%2FQ8yuYcg%2BeImgElo%2B%2FkaEOJGf3QbO6%2B7eoLIEHIF0JDgLs7ybUn6CvSZ0d2cDi6%2FxjuislSI26Xt%2FXK99wrUgXrkhbHvs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1bbc5cdbf8755-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5732,"size_decoded":3163,"mime_type":"application/javascript","magic":"data","md5":"12ebec1b36678eb1da4412af6c65751a","sha1":"4cb5d87353d9a06fde067063787a4beed692ba77","sha256":"558ae0ec83cc88de0929fde86b87c231246aafa9c961ebffb3257b05f62ca5cf","sha512":"a1bbd93277a59086bf27da7dcc60434b717ac521bce0618aef7c914789497a22cf56441a7f300f1bb7a6de56ca624226883d048f6eadbcc049dc717338189bb6","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"fdc1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","first_seen":"2026-07-02T22:01:42.315643Z","last_seen":"2026-10-14T23:35:33.600837Z","times_seen":31575,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.6","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:43.962Z","timestamp":1789413463962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.6 HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:17:43 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fnwNu6uVRKYg8PRxnciBhJOXU4wd0r5ACu607tyR09qrjhiprSRUDWUEZj6u7G7YcGs6NTLqnSW4EtMkS2YVLj0W0AF1iNj%2FIASF%2BqqlKXHIntIg0dxNNRxpi6eNRc7Qe8U6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1bbc5cdc08755-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13452,"size_decoded":5130,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-10-14T23:38:20.996587Z","times_seen":254670,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konikstudio.live/wp-content/plugins/ultimate-social-media-icons/js/custom.js?ver=2.9.9","fqdn":"konikstudio.live","domain":"konikstudio.live","tld":"live"},"ip":{"addr":"104.21.39.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://konikstudio.live/","date":"2026-09-14T19:17:43.970Z","timestamp":1789413463970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konikstudio.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 11:45:55 GMT","end":"Sat, 07 Nov 2026 12:43:30 GMT"},"fingerprint":{"sha1":"2C:B5:D2:90:B6:E0:F5:59:74:38:A2:A1:6C:E6:DB:E9:C9:97:D0:90","sha256":"BD:F7:8C:58:75:6D:F2:6E:D8:CC:5A:FD:42:22:2B:23:6D:AE:B1:AD:F5:8B:CD:D5:45:94:B5:60:2C:AB:F0:10"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-social-media-icons/js/custom.js?ver=2.9.9 HTTP/1.1\r\nHost: konikstudio.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://konikstudio.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:17:44 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nIktb%2B7fiCvAstE7KzlulK7Y7OqRoEa2Gk6jpD8hOe8h4efIbDE29kN%2Bfh7MAtc%2BomRuMisjNUA7nDno8EkGK20vizBWPL7kp06jsclCzUqiuVBpieBhZBsJgCyNiUGyEI8C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1bbc5ddcf8755-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33932,"size_decoded":8653,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (827), with CRLF line terminators","md5":"404ea21ed15688f2cfa53b0ffd5190a3","sha1":"2fc1018cddc2d15f99ffbb2c2bd981f6e32a40b3","sha256":"9207694eb596f24c7e466b0a928724218d74d43495ad9f34644ddc8dc6df423d","sha512":"f364dc2e31aa687605d5ec2f37386e94a8de38c82225ad10c36396355d49ad09e0fa19d062f8f09e99717891a812333b9e7d60a88285f3f202c7430497cf6b02","ssdeep":"768:JYqICj7T9o1K6mgKpTs4r1xLpgyrIxGp+tf/HXbhcRaRo54MhzI4zqAnh9lka0:DtvL9lka0","tlshash":"29e22d1e631295b1c1fb37f56a7a9a08f827227705228b127c2c41f41fbe425c677ead","first_seen":"2025-02-18T13:28:44.852996Z","last_seen":"2026-10-14T18:21:54.393401Z","times_seen":2516,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"konikstudio.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"konikstudio.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}