{"report_id":"68adbdc8-c4bd-4b8b-b382-3e4cd769935e","version":0,"status":"done","tags":[],"date":"2026-08-28T14:07:27Z","url":{"schema":"http","addr":"privnte.com/","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"privnte.com/","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"title":"Privnote - Send notes that will self-destruct after being read","dom":{"size":86671,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (46183)","md5":"be8416b30d7ab09aa9aeb75a939dfdf8","sha1":"c60d35bc92328178dc0cc37e0a4723567482cffd","sha256":"282ddd4abd2349690075bd88d62db11d50d1ccd3655eb149370354edaea3d390","sha512":"e8928a3f1585f05bd901d7c2802e4eebacb3eff3c51a9ca4b5cf401f10025cd1d56f28683019b5d92e0158982de4d963b4b43a180a30e89f1266eb1ae6c5e4ac","ssdeep":"768:fsa5W9moo3Apz2VovyJwaLIl7j/oKvyyGUzV5M1P0mur5M1P0mu3jDy104VV8rVN:fsa5iiAV2mvyeMIJ/lvyyNtrVN","tlshash":"aa8370e250e022e8b3f38175f792a72df114d267c6a2c6a1f55c5664c7c2b8e8de634c","dom_hash":"domhash86c12eaadff68dcaf3033f58ba626864","first_seen":"2026-08-28T13:18:06.567327Z","last_seen":"2026-08-28T14:07:30.115463Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"privnte.com/","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T14:07:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"privnte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"up.clickiocdn.com","ip":{"addr":"95.211.66.34","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2015-07-13","domain_rank":242016,"first_seen":"2023-11-11T15:23:55Z","last_seen":"2026-08-27T17:16:50.253377Z","alert_count":0,"request_count":3,"received_data":821,"sent_data":1952,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.clickiocdn.com","ip":{"addr":"46.8.152.14","port":443,"asn":213119,"as":"ALZ Software Ltd","country":"United Kingdom","country_code":"GB"},"domain_registered":"2015-07-13","domain_rank":1440136,"first_seen":"2018-06-20T16:00:38Z","last_seen":"2026-08-28T09:48:35.185217Z","alert_count":0,"request_count":1,"received_data":853398,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"privnte.com","ip":{"addr":"104.21.71.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-02","domain_rank":0,"first_seen":"2026-08-28T13:23:33.116809Z","last_seen":"2026-08-28T13:23:33.116809Z","alert_count":13,"request_count":13,"received_data":94729,"sent_data":6961,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"s.clickiocdn.com","ip":{"addr":"88.99.174.114","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2015-07-13","domain_rank":336698,"first_seen":"2015-07-21T10:03:04Z","last_seen":"2026-08-28T09:48:35.119945Z","alert_count":0,"request_count":1,"received_data":68110,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"clickiocmp.com","ip":{"addr":"46.8.152.14","port":443,"asn":213119,"as":"ALZ Software Ltd","country":"United Kingdom","country_code":"GB"},"domain_registered":"2023-04-25","domain_rank":50599,"first_seen":"2023-05-04T14:35:56Z","last_seen":"2026-08-27T17:16:50.248527Z","alert_count":0,"request_count":3,"received_data":315717,"sent_data":1509,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"privnte.com/static-58c8928/js-min/lib/b64.js","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d34b0986ba7b84b4d90965d7edb8d94","sha1":"7c9ed8072ff7d86b99b8b382981ae9dbb6760c51","sha256":"36dce7ea0fd92d4746d0acbd131b7c9ab1fe2e6c04e7c1f719653073213caef7","sha512":"b4946839abceef17f923b2b6764434543774bde5b4ceedb3d8b885cdd1b6177d7680ea37904887b376bd6eddacd3a4be0dbcaffc6c8aeafc152038f8b5e36b70","ssdeep":"","tlshash":"4041358c109640d10bae2a71144ba18ee47e191718edb405cd1bfff589346f947eac3c","size":2357,"data":"","first_seen":"2023-07-26T11:58:05Z","last_seen":"2026-08-28T14:07:30.118491Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privnte.com/","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d2714cb5be3234199bc7eb1354b2983","sha1":"ba8ddc94f4ae90b930a446fba73a08e4b7089b4a","sha256":"3aa1288abdea8292ef7d7ea138267b5b6e3c7f7445bed0a20f14d51f4bee7c0a","sha512":"a9dfe4023fcb9868b5aef5d7e472229c953d229232cccf5ac343f9c1476efe0208082b5b916f07303789f7ebf475ac3606142999ef3e3302c9d6b725bc47b7a7","ssdeep":"","tlshash":"7ee05b8da1e241fc5878eb1683151fd134f0416520ca4e95b4ded4a23f6c1065c762fd","size":336,"data":"","first_seen":"2026-08-28T13:18:06.62103Z","last_seen":"2026-08-28T14:07:30.141242Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privnte.com/","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"70bcdbfded58eacb4665f1594209d684","sha1":"11a8d3319fc6a27d8adb24629405bc4c68f9f18a","sha256":"439c72cea4f39f5659fe5008411c2092af8a2443bbf750e994d5f9417201dea3","sha512":"69801ed021705b3d0ad07fc579fb1d0410237e44ae0a23845c598f85db9330e6e25a0fd1d4ae53203fff302de3eac11749b9ab8e90828c9423f3c011dcfe4734","ssdeep":"","tlshash":"23c0124f08a6640000f37c264f1f85009c93ed030080dcb17fbdd352cf10028514dac4","size":153,"data":"","first_seen":"2026-08-28T13:18:06.622555Z","last_seen":"2026-08-28T14:07:30.143983Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privnte.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-29T20:19:26.992462Z","times_seen":427544,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickiocmp.com/t/consent_230182.js","fqdn":"clickiocmp.com","domain":"clickiocmp.com","tld":"com"},"ip":{"addr":"46.8.152.14","port":443,"asn":213119,"as":"ALZ Software Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"71188ecf3fe2d39aabfdcc9ccada5503","sha1":"76c8eee4acc9779fbcfc3e520ad7700062851485","sha256":"23d82cf650f90e85edf4d787dece848f17fc71d812f59e2a4d2d5d882efcd609","sha512":"48719f1aa7c0749bdfaee3f8e1f4b5f7c6fd4053f72b2604b39018217d38470013bf2f10895b1be62577c147683c5b325d4358d4bd661597d12f8c44bf7c8975","ssdeep":"3072:dJqvN/xntkgOm05hZ1MtLhUpFy/BzeoW+tFVBGDFvlr0q:dQNUmEZ1Mt4y/BSoBFVBG5vlwq","tlshash":"da540ac972c1b0b4a3e36174b03f220ef23aa955ac48c0a4e665e5e0adb475d46f7f5c","size":294860,"data":"","first_seen":"2026-08-28T13:18:06.571344Z","last_seen":"2026-08-28T14:07:30.119168Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickiocmp.com/t/static/cmp/diagnostic-core.js","fqdn":"clickiocmp.com","domain":"clickiocmp.com","tld":"com"},"ip":{"addr":"46.8.152.14","port":443,"asn":213119,"as":"ALZ Software Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"85b2726a9ffbd78f2bf9f15ebfd14e47","sha1":"5342adbea2b3708b6001aa1acb48462cda8cfd79","sha256":"92473fafd4dcd7460ea7f1afc36659296d61c8993eeec98de96821097c68c6ce","sha512":"863557c1457425b653d39d3fa04ca9d3895b03425530cb27bcbb05e0b328c4da57dd411b425e96b6ec77f7c5ca3d45a533e9980fa1d240cfda85e65f4dfdd1f7","ssdeep":"192:iPFpx1uydmbJCakXuLKw8Ty6p6+Ugv3n22CKeBi1fVf4mvpdWnd7dPShNJ5B4rZk:iPPy8mVCatp6p6+V322C2/f4mvjWdhPU","tlshash":"bf12a7a7be5cb43b25d700b625b75714f53706107102d091f6bc887969a27c7a2efbc8","size":9866,"data":"","first_seen":"2026-05-07T03:07:29.345354Z","last_seen":"2026-08-29T19:32:01.778923Z","times_seen":254,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privnte.com/static-58c8928/js-min/lib/gibberish-aes.js","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a32a3e1c6325795e41dfb613c04b2f30","sha1":"1373300727de07484ede609da3d5777fabaa8a3f","sha256":"bb54040a037d6d730f498160c7f016f6c37a344025b7d198e5f3a3cfd34f942b","sha512":"8c495700b2cfef487ebb3ac0f5fd4a7a15e6c00c90a87d99253e10a5050e50cca87394cb7f3c54e753a5337ca3dfe0793ae90cb8487daf891f86ea87c603b119","ssdeep":"384:UWTQFzmi6dJLnmqtoxkfu/Bu1MrUD83xOJMkQ9OPMvF9P9UM/dzX9:3QVmReWfu/Bu14kQ9Td9J","tlshash":"e552e796ba7310a8b7ca54f14c3f15be66a0b9a51cf32321e0c7d6c016289e5e23ff15","size":14379,"data":"","first_seen":"2023-07-26T11:58:05Z","last_seen":"2026-08-28T14:07:30.116149Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privnte.com/static-58c8928/js-min/lib/promise.js","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"05e4b55a50fad40b75edd0cce91e4340","sha1":"ccc4dd629df0cf9dfcadf754e76ea88ed9c8e85b","sha256":"6986df3f8ba7ce00fb51b30b9fff84447f0fd6b874c354b95178bfbeb89d3a64","sha512":"27c7931d227d16a661d7cc2c063d0cfabf51b62adbd17cf0300aeae66c8d9477e08ff4226d74cd5df3714f824ef95ca3b68da0eb38fa3d151c1a8a612cd293b7","ssdeep":"","tlshash":"fd517462fb81e0dbcbc6a134fa2f5e0b6534b8051c56dc54b578e6d809fb01ef11ae19","size":2784,"data":"","first_seen":"2023-07-26T11:58:06Z","last_seen":"2026-08-28T14:07:30.125536Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privnte.com/static-58c8928/js-min/common.js","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b89f7651422fe015cea838def9a22f28","sha1":"a3f72f8eb4ddd700a05bc982a858e53e8e854d9c","sha256":"6f39bb5d66e42789ff6d3ab8a785652d537557b1d19ffd4215eb791853af9059","sha512":"6bd4b4522bd77e12df316f3dc7a5d35b5a15a738867b27623be9f8664f4cbc4b0a86e898dbc24294eab7075bf9bc889e52bd38d105aca877037722a50cd58fe7","ssdeep":"","tlshash":"b44132c8b207a6856a5642d42c0f7806b17be6a0180ce50d9f73f75f97b6e139137f26","size":2060,"data":"","first_seen":"2023-07-26T11:58:06Z","last_seen":"2026-08-28T14:07:30.127Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privnte.com/static-58c8928/js-min/legacy.js?ver=0.0012","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6af3ead5505c4300f151e16007c02f56","sha1":"1557381ecc15918464ba3f60c0582155d42085f0","sha256":"5588d51f035c2ee085baafc60053723a6dc41fe6b75ba00086c5444bb2f8c411","sha512":"ba3865a35b537d696b889a8030782886c6c16491199c1f528ebe5642ab6d6f2397347b11050b1d171ef3a23d55a6f55879e24b218142c8ff98df79098d5dfeea","ssdeep":"384:AVVBtIMVdaMVYEuFT1UzG+iK7xlfnzhiL2AAYa:+IMVPVoGzGQ7xlfJAA/","tlshash":"bda2428cf9461f4b15eae4b631b72a07f633834145054640c1bbea8d2f39e0bf15b5ba","size":21715,"data":"","first_seen":"2026-03-29T08:42:37.938398Z","last_seen":"2026-08-28T14:07:30.138543Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privnte.com/static-58c8928/js-min/lib/TextEncoderLite.js","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2210b21f09767aa04875d1c905fa0a35","sha1":"def79ce060aa758c5464b42d9658d8e660b846a1","sha256":"e3c7994493b22e917a000077d61321c351cbb1c2ae020523227a083c6fb749cc","sha512":"47e134d4c2826aede14ca4c9cf2d8a2470ef6d7d2e86f458a3303878a3038d7bbbdf9ed24ed342c1818bf1f11569ce25b21d80b801f4fb86333683d2ed257856","ssdeep":"","tlshash":"fa41fe53acd026ed06bc00302547251af4dce16e92b82235afce4f80d074ea8de5ff96","size":2001,"data":"","first_seen":"2023-07-26T11:58:06Z","last_seen":"2026-08-28T14:07:30.117838Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"privnte.com/static-58c8928/js-min/lib/gibberish-aes.js","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privnte.com/","date":"2026-08-28T14:06:59.283Z","timestamp":1787926019283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnte.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 11:45:18 GMT","end":"Tue, 24 Nov 2026 11:45:17 GMT"},"fingerprint":{"sha1":"12:24:B0:D3:B4:01:F4:33:87:69:86:05:E3:DA:95:6D:53:44:F9:04","sha256":"E5:5D:DE:EF:20:42:43:E8:CF:76:89:46:F1:40:BD:7E:AB:11:5D:32:0F:B1:7F:3B:FF:5C:07:00:BC:27:1A:F8"}}},"request":{"raw":"GET /static-58c8928/js-min/lib/gibberish-aes.js HTTP/1.1\r\nHost: privnte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnte.com/\r\nCookie: PHPSESSID=9484bb10d803f8505913ca9026e5ac79\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 14:06:59 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 26 Jan 2026 09:37:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2637\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z0NUGbpLaQUAEf1doTv16%2FP4iPhgUrtZM%2FcanTdRT3abpBYxtb%2Bd5vFBW5kYJUT%2BFq9iev9fKLgNGbGEsSSorZVwt7oeDZQnGZGA5bOgbT730F1kt3b6Y9lR4ECEGw%3D%3D\"}]}\r\ncf-ray: a323e1348c10b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4782\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14379,"size_decoded":5542,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2830)","md5":"a32a3e1c6325795e41dfb613c04b2f30","sha1":"1373300727de07484ede609da3d5777fabaa8a3f","sha256":"bb54040a037d6d730f498160c7f016f6c37a344025b7d198e5f3a3cfd34f942b","sha512":"8c495700b2cfef487ebb3ac0f5fd4a7a15e6c00c90a87d99253e10a5050e50cca87394cb7f3c54e753a5337ca3dfe0793ae90cb8487daf891f86ea87c603b119","ssdeep":"384:UWTQFzmi6dJLnmqtoxkfu/Bu1MrUD83xOJMkQ9OPMvF9P9UM/dzX9:3QVmReWfu/Bu14kQ9Td9J","tlshash":"e552e796ba7310a8b7ca54f14c3f15be66a0b9a51cf32321e0c7d6c016289e5e23ff15","first_seen":"2023-07-26T11:58:05Z","last_seen":"2026-08-28T14:07:30.116149Z","times_seen":33,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"privnte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnte.com/static-58c8928/icon/favicon-16x16.png","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privnte.com/","date":"2026-08-28T14:06:59.622Z","timestamp":1787926019622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnte.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 11:45:18 GMT","end":"Tue, 24 Nov 2026 11:45:17 GMT"},"fingerprint":{"sha1":"12:24:B0:D3:B4:01:F4:33:87:69:86:05:E3:DA:95:6D:53:44:F9:04","sha256":"E5:5D:DE:EF:20:42:43:E8:CF:76:89:46:F1:40:BD:7E:AB:11:5D:32:0F:B1:7F:3B:FF:5C:07:00:BC:27:1A:F8"}}},"request":{"raw":"GET /static-58c8928/icon/favicon-16x16.png HTTP/1.1\r\nHost: privnte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnte.com/\r\nCookie: PHPSESSID=9484bb10d803f8505913ca9026e5ac79\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 14:06:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 04 Sep 2026 13:23:02 GMT\r\nlast-modified: Mon, 26 Jan 2026 09:26:30 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2636\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LNnVrv97PpvrMSV5%2BYmJrgz049tDj%2FCblLXqbu5F2NIfWR54tkdadusDtbxlv5m%2BtcmlXOqLaZpTF%2B4GaczXEFbA5yeecWhMkGPfvqA2NcBau2%2BNPTIScXeb0vsV9A%3D%3D\"}]}\r\ncf-ray: a323e136ac2cb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 426\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":426,"size_decoded":1185,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"f89ab673e26bc011395be48dfbdcb462","sha1":"8d815e9fae24b38e9423cebf0c56ac93d2bf92c1","sha256":"794be059a2ad05011979e9806ad098ce2fc840a739076f00ac5ba898f8c9afa6","sha512":"0a873699ad352e7b6db716f62933c412807a06f8ebe93f3b68394efdd6223b42762c9498b52538dc9888c1a44489f91b5d0bb2d5dda8922280f4f99a15c65476","ssdeep":"","tlshash":"80e05ca7b1423cf9c5840b33a97e79e446284623a0f7193a07715da04805b91e1b107a","first_seen":"2023-11-28T12:56:07Z","last_seen":"2026-08-28T14:07:30.116713Z","times_seen":24,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"privnte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.clickiocdn.com/t/cmp/v3/google-vendor-list.json","fqdn":"s.clickiocdn.com","domain":"clickiocdn.com","tld":"com"},"ip":{"addr":"88.99.174.114","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://privnte.com/","date":"2026-08-28T14:06:59.941Z","timestamp":1787926019941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.clickiocdn.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 06:11:24 GMT","end":"Fri, 16 Oct 2026 06:11:23 GMT"},"fingerprint":{"sha1":"E0:3C:B3:36:8B:DB:1F:B9:E4:E4:C3:57:FF:2A:9E:4D:5F:14:81:9E","sha256":"A4:0A:C8:43:5E:FE:F9:60:07:3E:64:61:E6:36:44:3B:34:D2:42:C2:FC:7F:F6:1A:A2:AF:4C:11:9C:15:E3:4D"}}},"request":{"raw":"GET /t/cmp/v3/google-vendor-list.json HTTP/1.1\r\nHost: s.clickiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://privnte.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnte.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0\r\ndate: Fri, 28 Aug 2026 14:07:00 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 28 Aug 2026 02:05:06 GMT\r\netag: W/\"6a90ecd2-108b5\"\r\nexpires: Fri, 28 Aug 2026 14:37:00 GMT\r\ncache-control: max-age=1800\r\naccess-control-allow-origin: *\r\niseu: eu\r\niscntr: eu\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67765,"size_decoded":20077,"mime_type":"application/json","magic":"JSON text data","md5":"84364ae92d1fd182cc256c1e656fe152","sha1":"efa6d06cf9c72ac4526c2ccc849049499791abc6","sha256":"8ac4fd8a9da7bf1908526b0165067a626e3b1ddb5bef445f0bcad8e99902c133","sha512":"6f4daa554dc6a888193e79f448c21c9530b3e18ced4ac056fd1a00ef4df14e8d8096311a85e0ddb3e1d18852b69a637e94752e73522a0bf9a9d18f719d2593d9","ssdeep":"768:wjLNi95uUt4i6ZozTSY3Wp9Hw3WBXPE3LBr9e8+cCBSgfqHe:wPW5uO42zTSY3Wp1w3WRM319n+cyvV","tlshash":"3163e8efa285eb2cc254bae14f4bd3bcf4d2b41778e86c9b10586f6902e16e4516d037","first_seen":"2026-08-27T17:46:52.56829Z","last_seen":"2026-08-29T19:32:01.758339Z","times_seen":7,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":2,"connect":34,"send":0,"wait":34,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privnte.com/static-58c8928/js-min/lib/TextEncoderLite.js","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privnte.com/","date":"2026-08-28T14:06:59.285Z","timestamp":1787926019285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnte.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 11:45:18 GMT","end":"Tue, 24 Nov 2026 11:45:17 GMT"},"fingerprint":{"sha1":"12:24:B0:D3:B4:01:F4:33:87:69:86:05:E3:DA:95:6D:53:44:F9:04","sha256":"E5:5D:DE:EF:20:42:43:E8:CF:76:89:46:F1:40:BD:7E:AB:11:5D:32:0F:B1:7F:3B:FF:5C:07:00:BC:27:1A:F8"}}},"request":{"raw":"GET /static-58c8928/js-min/lib/TextEncoderLite.js HTTP/1.1\r\nHost: privnte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnte.com/\r\nCookie: PHPSESSID=9484bb10d803f8505913ca9026e5ac79\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 14:06:59 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 26 Jan 2026 09:38:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2637\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wNBxEXiqrDaMRB%2FOFh%2FRbtdXvzsptNmkLITMcrB7CAx8tzosmkRFkhXAjRSGkrzx1xHWkpcI77fTxeAN943151n%2Fbsg6jAOCPeU7ub0PWbVLU8jyvGp9xc1eSIP0XA%3D%3D\"}]}\r\ncf-ray: a323e1348c11b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 722\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2001,"size_decoded":1479,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"2210b21f09767aa04875d1c905fa0a35","sha1":"def79ce060aa758c5464b42d9658d8e660b846a1","sha256":"e3c7994493b22e917a000077d61321c351cbb1c2ae020523227a083c6fb749cc","sha512":"47e134d4c2826aede14ca4c9cf2d8a2470ef6d7d2e86f458a3303878a3038d7bbbdf9ed24ed342c1818bf1f11569ce25b21d80b801f4fb86333683d2ed257856","ssdeep":"","tlshash":"fa41fe53acd026ed06bc00302547251af4dce16e92b82235afce4f80d074ea8de5ff96","first_seen":"2023-07-26T11:58:06Z","last_seen":"2026-08-28T14:07:30.117838Z","times_seen":33,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"privnte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnte.com/static-58c8928/js-min/lib/b64.js","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privnte.com/","date":"2026-08-28T14:06:59.286Z","timestamp":1787926019286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnte.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 11:45:18 GMT","end":"Tue, 24 Nov 2026 11:45:17 GMT"},"fingerprint":{"sha1":"12:24:B0:D3:B4:01:F4:33:87:69:86:05:E3:DA:95:6D:53:44:F9:04","sha256":"E5:5D:DE:EF:20:42:43:E8:CF:76:89:46:F1:40:BD:7E:AB:11:5D:32:0F:B1:7F:3B:FF:5C:07:00:BC:27:1A:F8"}}},"request":{"raw":"GET /static-58c8928/js-min/lib/b64.js HTTP/1.1\r\nHost: privnte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnte.com/\r\nCookie: PHPSESSID=9484bb10d803f8505913ca9026e5ac79\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 14:06:59 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 26 Jan 2026 09:38:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2637\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zdwYYOacCdUulNHCymtHUdjpF43vo98HevCAXWfyZr1mrXnRXGVjdUSSkc1zfOphwvpxvGJG2UMdF8Y69ZZd7dhdt%2BOG%2FK6S2wbdG2e08fqLgMOz49sG5m%2B%2Fy9JoYg%3D%3D\"}]}\r\ncf-ray: a323e1348c12b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 900\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2357,"size_decoded":1659,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"5d34b0986ba7b84b4d90965d7edb8d94","sha1":"7c9ed8072ff7d86b99b8b382981ae9dbb6760c51","sha256":"36dce7ea0fd92d4746d0acbd131b7c9ab1fe2e6c04e7c1f719653073213caef7","sha512":"b4946839abceef17f923b2b6764434543774bde5b4ceedb3d8b885cdd1b6177d7680ea37904887b376bd6eddacd3a4be0dbcaffc6c8aeafc152038f8b5e36b70","ssdeep":"","tlshash":"4041358c109640d10bae2a71144ba18ee47e191718edb405cd1bfff589346f947eac3c","first_seen":"2023-07-26T11:58:05Z","last_seen":"2026-08-28T14:07:30.118491Z","times_seen":33,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"privnte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickiocmp.com/t/consent_230182.js","fqdn":"clickiocmp.com","domain":"clickiocmp.com","tld":"com"},"ip":{"addr":"46.8.152.14","port":443,"asn":213119,"as":"ALZ Software Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privnte.com/","date":"2026-08-28T14:06:59.466Z","timestamp":1787926019466,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clickiocmp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 12:25:17 GMT","end":"Tue, 29 Sep 2026 12:25:16 GMT"},"fingerprint":{"sha1":"78:B0:83:D4:8E:ED:BB:52:93:2E:92:9C:C9:50:07:09:5B:7C:57:BB","sha256":"9B:48:F8:07:13:94:90:5B:69:1A:0B:10:C6:39:C3:29:94:BD:3E:73:94:84:5E:91:0C:1D:1B:08:DF:65:E2:F3"}}},"request":{"raw":"GET /t/consent_230182.js HTTP/1.1\r\nHost: clickiocmp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnte.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0\r\ndate: Fri, 28 Aug 2026 14:06:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nexpires: Fri, 28 Aug 2026 14:07:59 GMT\r\ncache-control: max-age=60\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\niseu: eu\r\niscntr: eu\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":294860,"size_decoded":92453,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4972)","md5":"71188ecf3fe2d39aabfdcc9ccada5503","sha1":"76c8eee4acc9779fbcfc3e520ad7700062851485","sha256":"23d82cf650f90e85edf4d787dece848f17fc71d812f59e2a4d2d5d882efcd609","sha512":"48719f1aa7c0749bdfaee3f8e1f4b5f7c6fd4053f72b2604b39018217d38470013bf2f10895b1be62577c147683c5b325d4358d4bd661597d12f8c44bf7c8975","ssdeep":"3072:dJqvN/xntkgOm05hZ1MtLhUpFy/BzeoW+tFVBGDFvlr0q:dQNUmEZ1Mt4y/BSoBFVBG5vlwq","tlshash":"da540ac972c1b0b4a3e36174b03f220ef23aa955ac48c0a4e665e5e0adb475d46f7f5c","first_seen":"2026-08-28T13:18:06.571344Z","last_seen":"2026-08-28T14:07:30.119168Z","times_seen":4,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":3,"connect":20,"send":0,"wait":39,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privnte.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privnte.com/","date":"2026-08-28T14:06:59.468Z","timestamp":1787926019468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnte.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 11:45:18 GMT","end":"Tue, 24 Nov 2026 11:45:17 GMT"},"fingerprint":{"sha1":"12:24:B0:D3:B4:01:F4:33:87:69:86:05:E3:DA:95:6D:53:44:F9:04","sha256":"E5:5D:DE:EF:20:42:43:E8:CF:76:89:46:F1:40:BD:7E:AB:11:5D:32:0F:B1:7F:3B:FF:5C:07:00:BC:27:1A:F8"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: privnte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnte.com/\r\nCookie: PHPSESSID=9484bb10d803f8505913ca9026e5ac79\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Sun, 30 Aug 2026 14:06:59 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pGM%2BlSi8hfn6nCPJa8z79Fqv%2Frnq%2Fl4%2F%2FGz8tOMsbRrsBG0bMLYKH%2Fw2h8ha6FEniZANf4MCJXMEHC988FWSWPnUoXlgqqkO5fyDGJf8a2d8tZBk2y908UeNP7TN%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Fri, 28 Aug 2026 14:06:59 GMT\r\nserver: cloudflare\r\ncf-ray: a323e135ac1fb4fd-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1296,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-29T20:19:26.992462Z","times_seen":427544,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"privnte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnte.com/static-58c8928/style/legacy/privnote-logo.svg","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privnte.com/","date":"2026-08-28T14:06:59.488Z","timestamp":1787926019488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnte.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 11:45:18 GMT","end":"Tue, 24 Nov 2026 11:45:17 GMT"},"fingerprint":{"sha1":"12:24:B0:D3:B4:01:F4:33:87:69:86:05:E3:DA:95:6D:53:44:F9:04","sha256":"E5:5D:DE:EF:20:42:43:E8:CF:76:89:46:F1:40:BD:7E:AB:11:5D:32:0F:B1:7F:3B:FF:5C:07:00:BC:27:1A:F8"}}},"request":{"raw":"GET /static-58c8928/style/legacy/privnote-logo.svg HTTP/1.1\r\nHost: privnte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnte.com/\r\nCookie: PHPSESSID=9484bb10d803f8505913ca9026e5ac79\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 14:06:59 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 04 Sep 2026 13:23:01 GMT\r\nlast-modified: Mon, 26 Jan 2026 09:23:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2637\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dxangGrAERNdeVRDtxbzsHoJF6%2BtK%2FQOo%2FVrS4u%2BavCigA5UiGtMZfa3HrYU7LzeWp7%2Fdhnu0jgsdb4AFBqwhI8KMiOF8LTHt1imd84vW0UdLQF20SpoVQDeoT72ow%3D%3D\"}]}\r\ncf-ray: a323e135cc22b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1515\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3384,"size_decoded":2321,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a7f2059b256769ce7d5e57e593f622d1","sha1":"f70ae2bba7d2e77c173c11d566390c96a2eb368d","sha256":"2c3d754c1ba91e12e0963459cddb7fa732ae159886bddc5402abab5f6788cd1c","sha512":"f10a33630d7bfc146c6d3fcbcedf3bdb89c1a5d7bf54815d2b8ed3e40c9485327953547442312a2a8352f3b0a5bf8924e2171ce274b4ac80da2d1e29c8cd4bce","ssdeep":"","tlshash":"fa61719a032d59fc85d00e3cd9b875c327a160ddf67141a0e3477a7ab907ab57c28e74","first_seen":"2023-07-26T11:58:06Z","last_seen":"2026-08-28T14:07:30.121799Z","times_seen":83,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"privnte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnte.com/static-58c8928/style/legacy/privnote-page-flip-30.png","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privnte.com/","date":"2026-08-28T14:06:59.562Z","timestamp":1787926019562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnte.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 11:45:18 GMT","end":"Tue, 24 Nov 2026 11:45:17 GMT"},"fingerprint":{"sha1":"12:24:B0:D3:B4:01:F4:33:87:69:86:05:E3:DA:95:6D:53:44:F9:04","sha256":"E5:5D:DE:EF:20:42:43:E8:CF:76:89:46:F1:40:BD:7E:AB:11:5D:32:0F:B1:7F:3B:FF:5C:07:00:BC:27:1A:F8"}}},"request":{"raw":"GET /static-58c8928/style/legacy/privnote-page-flip-30.png HTTP/1.1\r\nHost: privnte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnte.com/static-58c8928/style/legacy.css\r\nCookie: PHPSESSID=9484bb10d803f8505913ca9026e5ac79\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 14:06:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 04 Sep 2026 13:23:02 GMT\r\nlast-modified: Mon, 26 Jan 2026 09:52:24 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2637\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aq0%2Fq7jEtIwPv%2F55aUzftXniwNU5wttIzg%2F6DKE8gQi2Tyu0ujGZyuf%2FfTskeXDprdBxmg3e5lRWgdQWdxtvqchJ5Mk%2Fofud8gx3HkPFbsqoMt2s2hww8uy5lhDgsA%3D%3D\"}]}\r\ncf-ray: a323e1364c29b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 174\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":174,"size_decoded":930,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit colormap, non-interlaced","md5":"eccb8dfcf75f2ddd8f2ce81533ebfb6a","sha1":"ec66a18b92a1635fd2fb2690e0823bbf375b4912","sha256":"0fda09b6fbd18ef079182f76f3a43a0aeedfcefac474efed7fb654e4dd9ae70a","sha512":"1ff3b76dc691123c3bd915ad67216e3a0a537038535017a47b6a2dfbaad41ba9b0b87380757651520464dc4fd1274dd7a6f3ce0fce25b43394040712745e1b34","ssdeep":"","tlshash":"b7c08cc7bd688e78cf230232eb25f20198cac74323219272188a882353e254480f6583","first_seen":"2025-04-25T09:36:31.317447Z","last_seen":"2026-08-28T14:07:30.122691Z","times_seen":89,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"privnte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnte.com/","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T14:06:58.337Z","timestamp":1787926018337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnte.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 11:45:18 GMT","end":"Tue, 24 Nov 2026 11:45:17 GMT"},"fingerprint":{"sha1":"12:24:B0:D3:B4:01:F4:33:87:69:86:05:E3:DA:95:6D:53:44:F9:04","sha256":"E5:5D:DE:EF:20:42:43:E8:CF:76:89:46:F1:40:BD:7E:AB:11:5D:32:0F:B1:7F:3B:FF:5C:07:00:BC:27:1A:F8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: privnte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 14:06:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/7.4.33\r\nset-cookie: PHPSESSID=9484bb10d803f8505913ca9026e5ac79; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LOimp8yu5jUwiaAAJTK%2FnxSXt2rTMyP14VyYG%2Fv5E8jKQH%2Fp8GYbet%2Fe8vqUWKQSBxKTxFlNPVzcz85tTNooWdsYjD0lM5o22%2Bq9WSMT5LgbWj5L2DSVDDWcFFHCnw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a323e12edbc1b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"9484bb10d803f8505913ca9026e5ac79","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=9484bb10d803f8505913ca9026e5ac79; path=/; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":20449,"size_decoded":5781,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (559)","md5":"60374f222c44190d5c7da8ca0bbc91ab","sha1":"029c017f78a743309373a84ebb8c464401ca30e5","sha256":"c84c1f87055bb8b909196e8dcf32c21c373fa51121b47979d3d30cfedb4516e9","sha512":"a4c7b5c637a6197d11e7235414fbd245aef055307c194f4d9373adb799955345eecd985c9b85ab9e4572eda0243981714af83d0c6b49ccb0ff83448f420e2d17","ssdeep":"192:z0yydsa5WBgfkCzF2nrxqu7YWdRgYjkFov1aLcCMpbtG9sbzmed3o:zUsa5WMkCzwnYiYWdRgYjkmv1Ac13JCX","tlshash":"a492659958f094b20193c1d5b661ae2bfee1a127c7191c0476fc8be40ff7e89de63066","first_seen":"2026-08-28T14:07:30.12391Z","last_seen":"2026-08-28T14:07:30.12391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":-1,"dns":11,"connect":22,"send":0,"wait":725,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"privnte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnte.com/static-58c8928/js-min/lib/promise.js","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privnte.com/","date":"2026-08-28T14:06:59.287Z","timestamp":1787926019287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnte.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 11:45:18 GMT","end":"Tue, 24 Nov 2026 11:45:17 GMT"},"fingerprint":{"sha1":"12:24:B0:D3:B4:01:F4:33:87:69:86:05:E3:DA:95:6D:53:44:F9:04","sha256":"E5:5D:DE:EF:20:42:43:E8:CF:76:89:46:F1:40:BD:7E:AB:11:5D:32:0F:B1:7F:3B:FF:5C:07:00:BC:27:1A:F8"}}},"request":{"raw":"GET /static-58c8928/js-min/lib/promise.js HTTP/1.1\r\nHost: privnte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnte.com/\r\nCookie: PHPSESSID=9484bb10d803f8505913ca9026e5ac79\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 14:06:59 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 26 Jan 2026 09:38:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2637\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bzi4UvQlYbxbrtteQSpbAdkd4VelshUv91rAKYK9WK3OXwdfvhg3T7yzCr8xEJC2VuSjELTn%2Bhh5eh5Wu%2FezGRWnf1QpTHhyubtFKHNENeED9hdZsMjKpWVNEcJbpA%3D%3D\"}]}\r\ncf-ray: a323e1348c13b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1088\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2784,"size_decoded":1844,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"05e4b55a50fad40b75edd0cce91e4340","sha1":"ccc4dd629df0cf9dfcadf754e76ea88ed9c8e85b","sha256":"6986df3f8ba7ce00fb51b30b9fff84447f0fd6b874c354b95178bfbeb89d3a64","sha512":"27c7931d227d16a661d7cc2c063d0cfabf51b62adbd17cf0300aeae66c8d9477e08ff4226d74cd5df3714f824ef95ca3b68da0eb38fa3d151c1a8a612cd293b7","ssdeep":"","tlshash":"fd517462fb81e0dbcbc6a134fa2f5e0b6534b8051c56dc54b578e6d809fb01ef11ae19","first_seen":"2023-07-26T11:58:06Z","last_seen":"2026-08-28T14:07:30.125536Z","times_seen":33,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"privnte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnte.com/static-58c8928/js-min/common.js","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privnte.com/","date":"2026-08-28T14:06:59.288Z","timestamp":1787926019288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnte.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 11:45:18 GMT","end":"Tue, 24 Nov 2026 11:45:17 GMT"},"fingerprint":{"sha1":"12:24:B0:D3:B4:01:F4:33:87:69:86:05:E3:DA:95:6D:53:44:F9:04","sha256":"E5:5D:DE:EF:20:42:43:E8:CF:76:89:46:F1:40:BD:7E:AB:11:5D:32:0F:B1:7F:3B:FF:5C:07:00:BC:27:1A:F8"}}},"request":{"raw":"GET /static-58c8928/js-min/common.js HTTP/1.1\r\nHost: privnte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnte.com/\r\nCookie: PHPSESSID=9484bb10d803f8505913ca9026e5ac79\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 14:06:59 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 26 Jan 2026 10:04:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2637\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=raleT3FbZc00wsFPPl9N6%2FfXQMKc%2FeV3DYAccXoDJWLCdnRJsFnYnZes0%2B618fMkTVNJsDSgzmixcLNAPM1XATFgSdQZS9WgVc25KE2c5twGuAOqOSWPo0Qxq7VzTA%3D%3D\"}]}\r\ncf-ray: a323e1348c14b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 801\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2060,"size_decoded":1558,"mime_type":"text/javascript","magic":"ASCII text","md5":"b89f7651422fe015cea838def9a22f28","sha1":"a3f72f8eb4ddd700a05bc982a858e53e8e854d9c","sha256":"6f39bb5d66e42789ff6d3ab8a785652d537557b1d19ffd4215eb791853af9059","sha512":"6bd4b4522bd77e12df316f3dc7a5d35b5a15a738867b27623be9f8664f4cbc4b0a86e898dbc24294eab7075bf9bc889e52bd38d105aca877037722a50cd58fe7","ssdeep":"","tlshash":"b44132c8b207a6856a5642d42c0f7806b17be6a0180ce50d9f73f75f97b6e139137f26","first_seen":"2023-07-26T11:58:06Z","last_seen":"2026-08-28T14:07:30.127Z","times_seen":33,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"privnte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnte.com/static-58c8928/style/legacy.css","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://privnte.com/","date":"2026-08-28T14:06:59.291Z","timestamp":1787926019291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnte.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 11:45:18 GMT","end":"Tue, 24 Nov 2026 11:45:17 GMT"},"fingerprint":{"sha1":"12:24:B0:D3:B4:01:F4:33:87:69:86:05:E3:DA:95:6D:53:44:F9:04","sha256":"E5:5D:DE:EF:20:42:43:E8:CF:76:89:46:F1:40:BD:7E:AB:11:5D:32:0F:B1:7F:3B:FF:5C:07:00:BC:27:1A:F8"}}},"request":{"raw":"GET /static-58c8928/style/legacy.css HTTP/1.1\r\nHost: privnte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnte.com/\r\nCookie: PHPSESSID=9484bb10d803f8505913ca9026e5ac79\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 14:06:59 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 04 Sep 2026 13:23:01 GMT\r\nlast-modified: Mon, 26 Jan 2026 09:22:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2637\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yaAHq7OmQijDwhHu3%2Bv9N2vM%2Bsin5Fxf6pFQkqAPFCqBUJTucqYZ8MrNmskyvRrAcg%2BsQ4raEaHUZ%2B9lX8%2BrjVAofL8XNOZCJIXZP3Whmtk2N5r9xvv%2FszhWqFjI0A%3D%3D\"}]}\r\ncf-ray: a323e1349c16b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2627\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12154,"size_decoded":3433,"mime_type":"text/css","magic":"ASCII text","md5":"8e9c1c0883c1178f41c8a72077708737","sha1":"37823e9a52898287798e7e5c387951f7af5be033","sha256":"0322b629b928912687cc9bc4b47d57e136bb93690f789b77a0032b0b6bad54e9","sha512":"638ba92a2055b98c22cb14ed2fbdc730e4896c79a9be42cb8b322be3278dd545754095674e997d69c1d9699a5294e936e3a5a751abd9a0e4e1df347718102abf","ssdeep":"192:cqjQmjDun5+gYgH5bDhhbDKVFqFVF0FyKDrJD+y+qSP9D2ccR7D6cP7EmvURU2Ew:v5QBDXDKVFqFVF0FPDFDp2DeGP","tlshash":"4b422115aed30845b84bc8647babd781e32840139d0fde3dbe9eb694cf4d19464b9b8c","first_seen":"2023-07-26T11:58:06Z","last_seen":"2026-08-28T14:07:30.12831Z","times_seen":33,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"privnte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnte.com/static-58c8928/icon/touch-icon-192x192.png","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privnte.com/","date":"2026-08-28T14:06:59.621Z","timestamp":1787926019621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnte.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 11:45:18 GMT","end":"Tue, 24 Nov 2026 11:45:17 GMT"},"fingerprint":{"sha1":"12:24:B0:D3:B4:01:F4:33:87:69:86:05:E3:DA:95:6D:53:44:F9:04","sha256":"E5:5D:DE:EF:20:42:43:E8:CF:76:89:46:F1:40:BD:7E:AB:11:5D:32:0F:B1:7F:3B:FF:5C:07:00:BC:27:1A:F8"}}},"request":{"raw":"GET /static-58c8928/icon/touch-icon-192x192.png HTTP/1.1\r\nHost: privnte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnte.com/\r\nCookie: PHPSESSID=9484bb10d803f8505913ca9026e5ac79\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 14:06:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 04 Sep 2026 13:23:02 GMT\r\nlast-modified: Mon, 26 Jan 2026 09:26:42 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2636\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2PawK%2FQ5n3zdUeelXfr7DHZTWNnE61D05jHmpDX9GfVZvTw4Q78bzTXZ02bVh5BsoLkI20BD%2B1jZT6Ipvc1dekNJI2xnuDzslBBaX3w9fBAVqpraYbcsSCxcXRlfjA%3D%3D\"}]}\r\ncf-ray: a323e136ac2bb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1693\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1693,"size_decoded":2447,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"356ff9ac1eb162a7d7ddbb9f2601c421","sha1":"40f8f2ab0d500a6dc4a820791bec5f793f095c8c","sha256":"8a524660254708603f5132814f46995715de4188eae952ad6209b08cd6a45172","sha512":"6ebeadccdbecd38e68b8849798bccd999d38f9221f2d88e0fc8a95089f36ba22a0565a221bd0e0ad53524b56b6d77808d26b2a6032b99421380e16e8cff89d9a","ssdeep":"","tlshash":"54311a7ac9b1f5b3d03a87b2d730050583190fc58a79ae7608202cea0fa845a1840aef","first_seen":"2023-11-28T12:56:07Z","last_seen":"2026-08-28T14:07:30.129114Z","times_seen":24,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"privnte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"up.clickiocdn.com/consent/log/?r=601967963\u0026site_id=230182\u0026version=1692267057\u0026csid=4889\u0026stv=3\u0026tcf2=1\u0026uid=17879260196583444\u0026ugeo=NO\u0026state=100","fqdn":"up.clickiocdn.com","domain":"clickiocdn.com","tld":"com"},"ip":{"addr":"95.211.66.34","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privnte.com/","date":"2026-08-28T14:06:59.691Z","timestamp":1787926019691,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.clickiocdn.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 13:20:19 GMT","end":"Sun, 08 Nov 2026 13:20:18 GMT"},"fingerprint":{"sha1":"74:F5:F4:86:71:45:68:C1:9C:6A:4D:D0:7D:76:4E:8C:D2:A2:CE:18","sha256":"EE:D1:5C:34:F2:D3:06:86:D0:19:7D:6D:0F:DB:E9:E0:49:3D:CD:C9:37:56:99:DB:4D:47:76:30:49:BC:FA:54"}}},"request":{"raw":"GET /consent/log/?r=601967963\u0026site_id=230182\u0026version=1692267057\u0026csid=4889\u0026stv=3\u0026tcf2=1\u0026uid=17879260196583444\u0026ugeo=NO\u0026state=100 HTTP/1.1\r\nHost: up.clickiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnte.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.20.1\r\ndate: Fri, 28 Aug 2026 14:06:59 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nx-pixel-host: amn-ams-5-3\r\niseu: eu\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42,"size_decoded":275,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-29T20:21:17.140951Z","times_seen":1048398,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":24,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.clickiocdn.com/t/cmp/v3/vendor-list.json","fqdn":"cdn.clickiocdn.com","domain":"clickiocdn.com","tld":"com"},"ip":{"addr":"46.8.152.14","port":443,"asn":213119,"as":"ALZ Software Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://privnte.com/","date":"2026-08-28T14:06:59.692Z","timestamp":1787926019692,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clickio.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 07:52:29 GMT","end":"Sat, 07 Nov 2026 07:52:28 GMT"},"fingerprint":{"sha1":"6C:A9:66:F0:88:E6:02:0B:1F:CA:10:72:8A:86:8E:89:EF:94:C3:67","sha256":"17:26:03:09:4E:FA:38:0E:94:88:F0:77:E6:A0:7C:BA:F0:C2:C7:48:63:90:2A:10:02:53:65:0B:69:2E:04:64"}}},"request":{"raw":"GET /t/cmp/v3/vendor-list.json HTTP/1.1\r\nHost: cdn.clickiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://privnte.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnte.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0\r\ndate: Fri, 28 Aug 2026 14:06:59 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 28 Aug 2026 02:05:04 GMT\r\netag: W/\"6a90ecd0-d043d\"\r\nexpires: Fri, 28 Aug 2026 14:36:59 GMT\r\ncache-control: max-age=1800\r\naccess-control-allow-origin: *\r\niseu: eu\r\niscntr: eu\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":853053,"size_decoded":143553,"mime_type":"application/json","magic":"JSON text data","md5":"fb60d49a5cfb8611d6733bcb93bd10bb","sha1":"7341230703cdd1e6a3719cc9899d6561471e7373","sha256":"22521b743d5ea0c36392dce6dadee30c8f90323537e65d9103cc82ec049f12fc","sha512":"0d18e1ec1f572a65ef3818821c70d4e182e7824b9e0ad12417c36138cb1ab8a163d4a3da9da9c64f6d5bcb9e2bec1af26d5a7e5af085f54289815491f3563480","ssdeep":"3072:DsR02NZi29g19Vj66oFdqPrXJyznYv5x6dj3DM:IRVwjlrXKYv5sLDM","tlshash":"c605266f12840839777b53a9c6067bc759d9307e0fac18e9bc5d193e17e41a33a6228f","first_seen":"2026-08-28T09:48:49.599264Z","last_seen":"2026-08-29T19:32:01.717678Z","times_seen":6,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":12,"connect":20,"send":0,"wait":20,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickiocmp.com/t/cmp/logos/logo_65ad2c5dbc38232f32205715c3fecbc3.png","fqdn":"clickiocmp.com","domain":"clickiocmp.com","tld":"com"},"ip":{"addr":"46.8.152.14","port":443,"asn":213119,"as":"ALZ Software Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privnte.com/","date":"2026-08-28T14:06:59.713Z","timestamp":1787926019713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clickiocmp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 12:25:17 GMT","end":"Tue, 29 Sep 2026 12:25:16 GMT"},"fingerprint":{"sha1":"78:B0:83:D4:8E:ED:BB:52:93:2E:92:9C:C9:50:07:09:5B:7C:57:BB","sha256":"9B:48:F8:07:13:94:90:5B:69:1A:0B:10:C6:39:C3:29:94:BD:3E:73:94:84:5E:91:0C:1D:1B:08:DF:65:E2:F3"}}},"request":{"raw":"GET /t/cmp/logos/logo_65ad2c5dbc38232f32205715c3fecbc3.png HTTP/1.1\r\nHost: clickiocmp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnte.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0\r\ndate: Fri, 28 Aug 2026 14:06:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 9787\r\nlast-modified: Wed, 24 May 2023 04:36:55 GMT\r\netag: \"646d9467-263b\"\r\nexpires: Fri, 28 Aug 2026 14:36:59 GMT\r\ncache-control: max-age=1800\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\niseu: eu\r\niscntr: eu\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9787,"size_decoded":10206,"mime_type":"image/png","magic":"PNG image data, 270 x 75, 8-bit/color RGBA, non-interlaced","md5":"d9a6790b73b98a40743c08080e432148","sha1":"08c7bf18a651dd8b2aeba6d56db2e5a734180f8b","sha256":"d87a273d6cc917fc7878dc700937a611505a0572870be34cbe49b3ff0189e81a","sha512":"a583c3b2cff554097b34e70d154e0e6dcb0057e2d293ea6b46ff4d425803cfc7fa109c39925cddda7efae6924a0c0fde00385c3b4440d3480214bb9a95a65cf1","ssdeep":"192:2mIi02k4x7ZaIqjACbSlHPrhpIq/yl7y7KI4qM2PEe8Byvb98L:gi0FE9nCSlvbbqlEKI4qxvb9S","tlshash":"f912afff00eca9bae455fd43ab6490b1b7d7058a1b9b121f90013372e2340e405c96af","first_seen":"2023-11-28T12:56:07Z","last_seen":"2026-08-28T14:07:30.137756Z","times_seen":33,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privnte.com/static-58c8928/js-min/legacy.js?ver=0.0012","fqdn":"privnte.com","domain":"privnte.com","tld":"com"},"ip":{"addr":"104.21.71.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privnte.com/","date":"2026-08-28T14:06:59.290Z","timestamp":1787926019290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnte.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 11:45:18 GMT","end":"Tue, 24 Nov 2026 11:45:17 GMT"},"fingerprint":{"sha1":"12:24:B0:D3:B4:01:F4:33:87:69:86:05:E3:DA:95:6D:53:44:F9:04","sha256":"E5:5D:DE:EF:20:42:43:E8:CF:76:89:46:F1:40:BD:7E:AB:11:5D:32:0F:B1:7F:3B:FF:5C:07:00:BC:27:1A:F8"}}},"request":{"raw":"GET /static-58c8928/js-min/legacy.js?ver=0.0012 HTTP/1.1\r\nHost: privnte.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnte.com/\r\nCookie: PHPSESSID=9484bb10d803f8505913ca9026e5ac79\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 14:06:59 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 23 Mar 2026 17:52:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2637\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LBSqvTSZMB7L9ibnbLbzxX28rG8qLCjpgzSl%2FC1866w7VK4CDMNbSjc9c3Q99lsKg7a2BJ7q%2F5Fn%2Bk0ufpX5HZYWlGjt6xifbNKkgd5ZzuypL9PDJ9bi9LFisxlhQQ%3D%3D\"}]}\r\ncf-ray: a323e1348c15b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4506\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21715,"size_decoded":5264,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (351)","md5":"6af3ead5505c4300f151e16007c02f56","sha1":"1557381ecc15918464ba3f60c0582155d42085f0","sha256":"5588d51f035c2ee085baafc60053723a6dc41fe6b75ba00086c5444bb2f8c411","sha512":"ba3865a35b537d696b889a8030782886c6c16491199c1f528ebe5642ab6d6f2397347b11050b1d171ef3a23d55a6f55879e24b218142c8ff98df79098d5dfeea","ssdeep":"384:AVVBtIMVdaMVYEuFT1UzG+iK7xlfnzhiL2AAYa:+IMVPVoGzGQ7xlfJAA/","tlshash":"bda2428cf9461f4b15eae4b631b72a07f633834145054640c1bbea8d2f39e0bf15b5ba","first_seen":"2026-03-29T08:42:37.938398Z","last_seen":"2026-08-28T14:07:30.138543Z","times_seen":5,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"privnte.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickiocmp.com/t/static/cmp/diagnostic-core.js","fqdn":"clickiocmp.com","domain":"clickiocmp.com","tld":"com"},"ip":{"addr":"46.8.152.14","port":443,"asn":213119,"as":"ALZ Software Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privnte.com/","date":"2026-08-28T14:06:59.664Z","timestamp":1787926019664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clickiocmp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 12:25:17 GMT","end":"Tue, 29 Sep 2026 12:25:16 GMT"},"fingerprint":{"sha1":"78:B0:83:D4:8E:ED:BB:52:93:2E:92:9C:C9:50:07:09:5B:7C:57:BB","sha256":"9B:48:F8:07:13:94:90:5B:69:1A:0B:10:C6:39:C3:29:94:BD:3E:73:94:84:5E:91:0C:1D:1B:08:DF:65:E2:F3"}}},"request":{"raw":"GET /t/static/cmp/diagnostic-core.js HTTP/1.1\r\nHost: clickiocmp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnte.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0\r\ndate: Fri, 28 Aug 2026 14:06:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 06 May 2026 10:07:30 GMT\r\netag: W/\"69fb12e2-268a\"\r\nexpires: Fri, 28 Aug 2026 14:36:59 GMT\r\ncache-control: max-age=1800\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\niseu: eu\r\niscntr: eu\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9866,"size_decoded":3556,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9832)","md5":"85b2726a9ffbd78f2bf9f15ebfd14e47","sha1":"5342adbea2b3708b6001aa1acb48462cda8cfd79","sha256":"92473fafd4dcd7460ea7f1afc36659296d61c8993eeec98de96821097c68c6ce","sha512":"863557c1457425b653d39d3fa04ca9d3895b03425530cb27bcbb05e0b328c4da57dd411b425e96b6ec77f7c5ca3d45a533e9980fa1d240cfda85e65f4dfdd1f7","ssdeep":"192:iPFpx1uydmbJCakXuLKw8Ty6p6+Ugv3n22CKeBi1fVf4mvpdWnd7dPShNJ5B4rZk:iPPy8mVCatp6p6+V322C2/f4mvjWdhPU","tlshash":"bf12a7a7be5cb43b25d700b625b75714f53706107102d091f6bc887969a27c7a2efbc8","first_seen":"2026-05-07T03:07:29.345354Z","last_seen":"2026-08-29T19:32:01.778923Z","times_seen":254,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"up.clickiocdn.com/consent/log/?r=601966061\u0026site_id=230182\u0026version=1692267057\u0026csid=4889\u0026stv=3\u0026tcf2=1\u0026uid=17879260196583444\u0026ugeo=NO\u0026state=21","fqdn":"up.clickiocdn.com","domain":"clickiocdn.com","tld":"com"},"ip":{"addr":"95.211.66.34","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privnte.com/","date":"2026-08-28T14:06:59.665Z","timestamp":1787926019665,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.clickiocdn.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 13:20:19 GMT","end":"Sun, 08 Nov 2026 13:20:18 GMT"},"fingerprint":{"sha1":"74:F5:F4:86:71:45:68:C1:9C:6A:4D:D0:7D:76:4E:8C:D2:A2:CE:18","sha256":"EE:D1:5C:34:F2:D3:06:86:D0:19:7D:6D:0F:DB:E9:E0:49:3D:CD:C9:37:56:99:DB:4D:47:76:30:49:BC:FA:54"}}},"request":{"raw":"GET /consent/log/?r=601966061\u0026site_id=230182\u0026version=1692267057\u0026csid=4889\u0026stv=3\u0026tcf2=1\u0026uid=17879260196583444\u0026ugeo=NO\u0026state=21 HTTP/1.1\r\nHost: up.clickiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnte.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.20.1\r\ndate: Fri, 28 Aug 2026 14:06:59 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nx-pixel-host: mnams02\r\niseu: eu\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42,"size_decoded":271,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-29T20:21:17.140951Z","times_seen":1048398,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":4,"connect":22,"send":0,"wait":24,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"up.clickiocdn.com/consent/log/?r=601970983\u0026site_id=230182\u0026version=1692267057\u0026csid=4889\u0026stv=3\u0026tcf2=1\u0026uid=17879260196583444\u0026ugeo=NO\u0026state=101\u0026vcnt=193","fqdn":"up.clickiocdn.com","domain":"clickiocdn.com","tld":"com"},"ip":{"addr":"95.211.66.34","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privnte.com/","date":"2026-08-28T14:06:59.714Z","timestamp":1787926019714,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.clickiocdn.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 13:20:19 GMT","end":"Sun, 08 Nov 2026 13:20:18 GMT"},"fingerprint":{"sha1":"74:F5:F4:86:71:45:68:C1:9C:6A:4D:D0:7D:76:4E:8C:D2:A2:CE:18","sha256":"EE:D1:5C:34:F2:D3:06:86:D0:19:7D:6D:0F:DB:E9:E0:49:3D:CD:C9:37:56:99:DB:4D:47:76:30:49:BC:FA:54"}}},"request":{"raw":"GET /consent/log/?r=601970983\u0026site_id=230182\u0026version=1692267057\u0026csid=4889\u0026stv=3\u0026tcf2=1\u0026uid=17879260196583444\u0026ugeo=NO\u0026state=101\u0026vcnt=193 HTTP/1.1\r\nHost: up.clickiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnte.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.20.1\r\ndate: Fri, 28 Aug 2026 14:06:59 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nx-pixel-host: amn-ams-5-4\r\niseu: eu\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42,"size_decoded":275,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-29T20:21:17.140951Z","times_seen":1048398,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":21,"send":0,"wait":25,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}