{"report_id":"68f0c7de-9603-427b-9d17-5fc4e66dfe60","version":0,"status":"done","tags":[],"date":"2026-08-31T18:43:53Z","url":{"schema":"http","addr":"wp.pl-zadluzenie-informacja.cfd/","fqdn":"wp.pl-zadluzenie-informacja.cfd","domain":"pl-zadluzenie-informacja.cfd","tld":"cfd"},"ip":{"addr":"104.21.72.5","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"wp.pl-zadluzenie-informacja.cfd/","fqdn":"wp.pl-zadluzenie-informacja.cfd","domain":"pl-zadluzenie-informacja.cfd","tld":"cfd"},"title":"Poczta - Najlepsza Poczta, największe załączniki - WP","dom":{"size":15301,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (358)","md5":"c0348e57e94f6527fbcae5e86ea335ce","sha1":"c8a90234162fa47724f10c812f2ed1e197a9b241","sha256":"b032134642254a212427a6dd62ef22c7af27b5023a4db71489f33eab783dc1db","sha512":"4532f8e8d1e9c0f761a9b1effc8dc3eace04bdf7c339de37d16831d3176e8fda7d3eb4c58f7fd771ef850d3b268cc37aa0993439c7ec187e5aa523986cd5db21","ssdeep":"192:+OsfIG0OveFv6RaaWj2Cs47ywO42P3AxXvyByhViAR21m/2v9ladvJSzi/oye/Xo:+xfIT6YsUWtwMvxpS","tlshash":"2d62964b566b0457b80298647fa66746325ed003d10aca783fdc539ccf8e9d19da339c","dom_hash":"domhashfc4ee5528c883fb64e9d590ca8287658","first_seen":"2026-08-31T18:43:58.779871Z","last_seen":"2026-09-01T17:01:15.417419Z","times_seen":5,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wp.pl-zadluzenie-informacja.cfd/","fqdn":"wp.pl-zadluzenie-informacja.cfd","domain":"pl-zadluzenie-informacja.cfd","tld":"cfd"},"ip":{"addr":"104.21.72.5","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T18:43:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"wp.pl-zadluzenie-informacja.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"wp.pl-zadluzenie-informacja.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"wp.pl-zadluzenie-informacja.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"pocztanh.wpcdn.pl","ip":{"addr":"212.77.98.32","port":443,"asn":12827,"as":"Wirtualna Polska Media S.A.","country":"Poland","country_code":"PL"},"domain_registered":"2017-03-09","domain_rank":3057290,"first_seen":"2021-10-25T17:24:27Z","last_seen":"2026-08-11T22:36:55.134056Z","alert_count":0,"request_count":4,"received_data":25009,"sent_data":2354,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.wpcdn.pl","ip":{"addr":"212.77.98.32","port":443,"asn":12827,"as":"Wirtualna Polska Media S.A.","country":"Poland","country_code":"PL"},"domain_registered":"2017-03-09","domain_rank":1355622,"first_seen":"2018-07-25T11:02:25Z","last_seen":"2026-08-13T07:34:19.271004Z","alert_count":0,"request_count":3,"received_data":220472,"sent_data":1654,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"wp.pl-zadluzenie-informacja.cfd","ip":{"addr":"104.21.72.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-31T18:43:53.903353Z","last_seen":"2026-08-31T18:43:53.903353Z","alert_count":3,"request_count":1,"received_data":16396,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wp.pl-zadluzenie-informacja.cfd/","fqdn":"wp.pl-zadluzenie-informacja.cfd","domain":"pl-zadluzenie-informacja.cfd","tld":"cfd"},"ip":{"addr":"104.21.72.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4dc217d05ba8255440369cdcdb35114e","sha1":"a6cb6727eb32be5ebc01499a95ed480371b4799b","sha256":"9d78bd351604ddc7d7dd83ec33a074f266a22f5a63746b23f515109da21ef8b4","sha512":"a91dd5df1abd1aa0e0df05080f266079546299a9b4e5fdad087b61d70a5ae7851926792feb0036bf56f10247da8bc2564fe93432dfcecc19cf46efa665779979","ssdeep":"","tlshash":"3ac0228b71a80cb12ed1b3a3e2cb934aa4ae00281862860c0b184ea8ad108640422081","size":189,"data":"","first_seen":"2026-08-31T18:43:58.787932Z","last_seen":"2026-09-01T17:01:15.423253Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"pocztanh.wpcdn.pl/pocztanh/login/7.37.6/images/wp/pro.png","fqdn":"pocztanh.wpcdn.pl","domain":"wpcdn.pl","tld":"pl"},"ip":{"addr":"212.77.98.32","port":443,"asn":12827,"as":"Wirtualna Polska Media S.A.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wp.pl-zadluzenie-informacja.cfd/","date":"2026-08-31T18:43:16.852Z","timestamp":1788201796852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wpcdn.pl","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 12 May 2026 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:1F:48:99:50:1D:07:CD:4A:C0:91:5C:41:AE:BF:D6:DB:78:52:6F","sha256":"71:40:00:26:B8:0E:FB:48:73:C4:CC:51:14:0A:CA:EA:49:71:26:64:B4:65:3F:D2:DC:14:F9:F6:9C:10:A4:C4"}}},"request":{"raw":"GET /pocztanh/login/7.37.6/images/wp/pro.png HTTP/1.1\r\nHost: pocztanh.wpcdn.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wp.pl-zadluzenie-informacja.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 18:43:17 GMT\r\ncontent-type: application/xml\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T06:24:37.687585Z","times_seen":18438043,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.wpcdn.pl/inter/woff2/Inter-Regular.woff2","fqdn":"fonts.wpcdn.pl","domain":"wpcdn.pl","tld":"pl"},"ip":{"addr":"212.77.98.32","port":443,"asn":12827,"as":"Wirtualna Polska Media S.A.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wp.pl-zadluzenie-informacja.cfd/","date":"2026-08-31T18:43:16.868Z","timestamp":1788201796868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wpcdn.pl","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 12 May 2026 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:1F:48:99:50:1D:07:CD:4A:C0:91:5C:41:AE:BF:D6:DB:78:52:6F","sha256":"71:40:00:26:B8:0E:FB:48:73:C4:CC:51:14:0A:CA:EA:49:71:26:64:B4:65:3F:D2:DC:14:F9:F6:9C:10:A4:C4"}}},"request":{"raw":"GET /inter/woff2/Inter-Regular.woff2 HTTP/1.1\r\nHost: fonts.wpcdn.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://wp.pl-zadluzenie-informacja.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wp.pl-zadluzenie-informacja.cfd/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 18:43:17 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 108488\r\nlast-modified: Wed, 03 Jul 2024 14:52:59 GMT\r\nx-rgw-object-type: Normal\r\netag: \"46a1550a4bbaccd13a8eb46a359a9f89\"\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 900\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108488,"size_decoded":108960,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 108488, version 4.0","md5":"46a1550a4bbaccd13a8eb46a359a9f89","sha1":"237befb8851c19fe6a0adce50bfe9d155384b5c4","sha256":"b6f9db9e45be20f3c1312c97fbee7ec36b7d8280f8caa4d53c9ba0408cc9997a","sha512":"33b787e9d21b30c9884624b15fd5a3fb95e5f758cc08ba06fea2f097d84e0957d4acecba6c12403a95ccc3009df59e59f7d9edd856437f5688c38fcbeba5dfd1","ssdeep":"3072:tz2KdXZlw+NUGDu0SJfaJF7cKX0sHJlGMzocs01:RRJlw+N/u07JFgwl2VI","tlshash":"a7b312133206529ef8c26b392951fd4a3c539ecbecdfad2109712717693d96613f428e","first_seen":"2023-11-20T05:40:03Z","last_seen":"2026-09-12T19:10:06.189658Z","times_seen":5151,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":3,"connect":41,"send":0,"wait":173,"receive":11,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.wpcdn.pl/inter/woff2/Inter-Bold.woff2","fqdn":"fonts.wpcdn.pl","domain":"wpcdn.pl","tld":"pl"},"ip":{"addr":"212.77.98.32","port":443,"asn":12827,"as":"Wirtualna Polska Media S.A.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wp.pl-zadluzenie-informacja.cfd/","date":"2026-08-31T18:43:16.870Z","timestamp":1788201796870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wpcdn.pl","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 12 May 2026 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:1F:48:99:50:1D:07:CD:4A:C0:91:5C:41:AE:BF:D6:DB:78:52:6F","sha256":"71:40:00:26:B8:0E:FB:48:73:C4:CC:51:14:0A:CA:EA:49:71:26:64:B4:65:3F:D2:DC:14:F9:F6:9C:10:A4:C4"}}},"request":{"raw":"GET /inter/woff2/Inter-Bold.woff2 HTTP/1.1\r\nHost: fonts.wpcdn.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://wp.pl-zadluzenie-informacja.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wp.pl-zadluzenie-informacja.cfd/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 18:43:17 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 111040\r\nlast-modified: Wed, 03 Jul 2024 14:52:59 GMT\r\nx-rgw-object-type: Normal\r\netag: \"279e5a64038565325a5fda8f14a9b9ec\"\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 900\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111040,"size_decoded":111512,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 111040, version 4.0","md5":"279e5a64038565325a5fda8f14a9b9ec","sha1":"00211a6168ac64860cfedd40304560b213e0041c","sha256":"220976705fbec109f43c5cfdceca639e99ace7e51f3eb67292b105d3575eb39b","sha512":"1e97a2f0249fbb2a6624148c8206b22aa8bd2acd02630541b1267ee467120cedc5efbfd788eff4b02b2a01cc28862e002ad04caed525cf216e6cffdab63d56bd","ssdeep":"3072:RoqPtRznqtYOGNyYneHE2zL6cixdX0KAgTL2Cby:1VlnxOGNyYnsR5TCby","tlshash":"09b31273c48ab2cfb7e963acb533eb296cd2da1036960f1e12a50650dcbc5b754d504e","first_seen":"2023-11-22T20:31:52Z","last_seen":"2026-09-12T17:09:57.62422Z","times_seen":2492,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":2,"connect":39,"send":0,"wait":78,"receive":110,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.wpcdn.pl/inter/woff2/Inter-SemiBold.woff2","fqdn":"fonts.wpcdn.pl","domain":"wpcdn.pl","tld":"pl"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wp.pl-zadluzenie-informacja.cfd/","date":"2026-08-31T18:43:16.872Z","timestamp":1788201796872,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /inter/woff2/Inter-SemiBold.woff2 HTTP/1.1\r\nHost: fonts.wpcdn.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://wp.pl-zadluzenie-informacja.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wp.pl-zadluzenie-informacja.cfd/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T06:24:37.687585Z","times_seen":18438043,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pocztanh.wpcdn.pl/pocztanh/login/7.37.6/images/wp/favicon.ico","fqdn":"pocztanh.wpcdn.pl","domain":"wpcdn.pl","tld":"pl"},"ip":{"addr":"212.77.98.32","port":443,"asn":12827,"as":"Wirtualna Polska Media S.A.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wp.pl-zadluzenie-informacja.cfd/","date":"2026-08-31T18:43:17.371Z","timestamp":1788201797371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wpcdn.pl","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 12 May 2026 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:1F:48:99:50:1D:07:CD:4A:C0:91:5C:41:AE:BF:D6:DB:78:52:6F","sha256":"71:40:00:26:B8:0E:FB:48:73:C4:CC:51:14:0A:CA:EA:49:71:26:64:B4:65:3F:D2:DC:14:F9:F6:9C:10:A4:C4"}}},"request":{"raw":"GET /pocztanh/login/7.37.6/images/wp/favicon.ico HTTP/1.1\r\nHost: pocztanh.wpcdn.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wp.pl-zadluzenie-informacja.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 18:43:17 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 14510\r\nlast-modified: Tue, 11 Aug 2026 06:55:28 GMT\r\nx-rgw-object-type: Normal\r\netag: \"a34a742c53acd219a1669291878cbbd0\"\r\ncache-control: public, max-age=31536000, immutable\r\nvary: Origin, Accept-Encoding\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14510,"size_decoded":14904,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"a34a742c53acd219a1669291878cbbd0","sha1":"3000d44feb62c47a1ce1e34664f109bb3944ee79","sha256":"afc283455e136a230e58720d584d872ba3d52bd51344cfa7dbd50317f727c4c6","sha512":"9e2c6f87f025246559cd092160441fbfb85d294b315c8321b24af8f0822a43027a660f1a3f0b86ae4b72650644dcd851b206c5a06abe69dd4e39752cf5991772","ssdeep":"96:MjgFU8rk0/4Fhgvax/9bzltA26lcIN/W0l+NO:5XQ0/4Fuvg/dltYlxN/P6O","tlshash":"9952cea5e217e928c376b1b9de15cbf2cd282e86d24b277b201a7d2bb7356c30d10075","first_seen":"2026-08-31T18:43:58.783295Z","last_seen":"2026-09-01T17:01:15.419325Z","times_seen":5,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wp.pl-zadluzenie-informacja.cfd/","fqdn":"wp.pl-zadluzenie-informacja.cfd","domain":"pl-zadluzenie-informacja.cfd","tld":"cfd"},"ip":{"addr":"104.21.72.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T18:43:00.591Z","timestamp":1788201780591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pl-zadluzenie-informacja.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 22:03:23 GMT","end":"Sat, 28 Nov 2026 23:02:10 GMT"},"fingerprint":{"sha1":"99:F8:D8:BA:DD:E5:62:D6:9C:60:DD:59:5D:AA:20:45:A8:6B:73:F3","sha256":"14:7C:C6:1C:46:89:6E:93:E9:62:D1:26:3E:9C:45:77:F9:9D:5B:70:AE:FE:54:CA:27:64:B6:77:FF:98:DF:71"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wp.pl-zadluzenie-informacja.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Sun, 30 Aug 2026 23:23:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r14YXdqtL4CfaTk6JgpAz1723QrQO4xeiCMi9I3SAJlfD2%2FRSEYTEd4dW75T2zL%2BXKhuUcE2hU3OksCF5IblCvS8SHIUHfOQ1JDr3V1qc6sS6gVGUZKkZk%2Bcj5ZNPMV4ooNLVpfyJGlpBcICx2Iyw3As\"}]}\r\ndate: Mon, 31 Aug 2026 18:43:16 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a33e2da9cea2d0c3-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15706,"size_decoded":5028,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (352), with CRLF line terminators","md5":"e148d66dec59c6f7760511352473a9c9","sha1":"358027649241f896d17dd106432446ec6ea68558","sha256":"a48957612159f6786c99bda807f9e23f0fd28f738dee1b3415d43282d002c767","sha512":"928cfec2e000f7f991b898319978e488325a533701e97ed7a112afca548d739b3c99c768122200705ca2ca16cf04b84a25b9d8a6e15a39ec5fd1390f2edca63c","ssdeep":"192:zzsPIHnLhdyaS+QxgijiWD9jAIsFK6G3+xNohkZs/AKLy3soWmv2g1O:zYPIoGWIJ84v2+O","tlshash":"3962a61696081416a03296b4ffa29756faab8013d306c2783fdc13968ffa9159933fdc","first_seen":"2026-08-31T18:43:58.784572Z","last_seen":"2026-09-01T17:01:15.419845Z","times_seen":5,"resource_available":false,"data":null}},"time_used":16021,"timings":{"blocked":-1,"dns":111,"connect":46,"send":0,"wait":15854,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"wp.pl-zadluzenie-informacja.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"wp.pl-zadluzenie-informacja.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"wp.pl-zadluzenie-informacja.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pocztanh.wpcdn.pl/pocztanh/login/7.37.6/images/wp/wp-logo.png","fqdn":"pocztanh.wpcdn.pl","domain":"wpcdn.pl","tld":"pl"},"ip":{"addr":"212.77.98.32","port":443,"asn":12827,"as":"Wirtualna Polska Media S.A.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wp.pl-zadluzenie-informacja.cfd/","date":"2026-08-31T18:43:16.849Z","timestamp":1788201796849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wpcdn.pl","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 12 May 2026 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:1F:48:99:50:1D:07:CD:4A:C0:91:5C:41:AE:BF:D6:DB:78:52:6F","sha256":"71:40:00:26:B8:0E:FB:48:73:C4:CC:51:14:0A:CA:EA:49:71:26:64:B4:65:3F:D2:DC:14:F9:F6:9C:10:A4:C4"}}},"request":{"raw":"GET /pocztanh/login/7.37.6/images/wp/wp-logo.png HTTP/1.1\r\nHost: pocztanh.wpcdn.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wp.pl-zadluzenie-informacja.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 18:43:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 3087\r\nlast-modified: Tue, 11 Aug 2026 06:55:28 GMT\r\nx-rgw-object-type: Normal\r\netag: \"46ce95a1fdd6d33fe0a37bdc973eaabb\"\r\ncache-control: public, max-age=31536000, immutable\r\nvary: Origin, Accept-Encoding\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3087,"size_decoded":3465,"mime_type":"image/png","magic":"PNG image data, 172 x 112, 8-bit/color RGBA, non-interlaced","md5":"46ce95a1fdd6d33fe0a37bdc973eaabb","sha1":"b34f5065a6f7612cabab77f999757dba32551e72","sha256":"d4104fcd89bc1e32e2c9bd3d474d2dc972493b9ff3cef597959ef3f690c638cd","sha512":"6a72fca1b58eb4782b61295ef66e4e84d5d541e7f571f42ca6494f61a1ac9404d0f08f6af765f2a156d85e17bf20da3339d3deaa66dbfa8f2fd8b5ea5678b6bd","ssdeep":"","tlshash":"54515ddb63b87305ae64d6474266e393ae9f26c20c4d1ea4f09a81b689a4d7417cc317","first_seen":"2023-05-03T01:06:51Z","last_seen":"2026-09-01T17:01:15.420367Z","times_seen":118,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":3,"connect":39,"send":0,"wait":42,"receive":0,"ssl":329},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pocztanh.wpcdn.pl/pocztanh/login/7.37.6/svg/wp/poczta-logo.svg","fqdn":"pocztanh.wpcdn.pl","domain":"wpcdn.pl","tld":"pl"},"ip":{"addr":"212.77.98.32","port":443,"asn":12827,"as":"Wirtualna Polska Media S.A.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wp.pl-zadluzenie-informacja.cfd/","date":"2026-08-31T18:43:16.850Z","timestamp":1788201796850,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wpcdn.pl","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 12 May 2026 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:1F:48:99:50:1D:07:CD:4A:C0:91:5C:41:AE:BF:D6:DB:78:52:6F","sha256":"71:40:00:26:B8:0E:FB:48:73:C4:CC:51:14:0A:CA:EA:49:71:26:64:B4:65:3F:D2:DC:14:F9:F6:9C:10:A4:C4"}}},"request":{"raw":"GET /pocztanh/login/7.37.6/svg/wp/poczta-logo.svg HTTP/1.1\r\nHost: pocztanh.wpcdn.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wp.pl-zadluzenie-informacja.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 18:43:16 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 6094\r\nlast-modified: Tue, 11 Aug 2026 06:55:28 GMT\r\nx-rgw-object-type: Normal\r\netag: \"0b4828d325b558464b6b34c7b60b16ab\"\r\ncache-control: public, max-age=31536000, immutable\r\nvary: Origin, Accept-Encoding\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6094,"size_decoded":6476,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0b4828d325b558464b6b34c7b60b16ab","sha1":"5d7abf1b255752b35993b295bcafd58450310ae6","sha256":"c15d348135f401262aae405899af313dcf8cfc5d870038c42fc1da82446cc3c6","sha512":"f52c79e01eef4750d98b3d05d1f9abf5896dda46560236a07f35a91fe3e04019ccf4118deef6ba5803f06b512f50d0b7f1a2ce578a8e780e8affd95e4d2e3576","ssdeep":"96:+4ab9nR+l7Km16bxzSA/L0D/oBR6JYOEL7PCXPmxsB1PxxuBI5RA+NDbGAlQkJNp:g9nRyroxlL0LobaYtPvyHxu+RTDPlR1b","tlshash":"e5c1d8e503b096c4a4eb893eff27d8885509b1bf7aa685c0f21e5f595f8b8d0f506c14","first_seen":"2024-11-07T07:52:54.336106Z","last_seen":"2026-09-01T17:01:15.420937Z","times_seen":119,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":2,"connect":39,"send":0,"wait":44,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}