{"report_id":"6ac72830-05d3-4db1-8f18-7700d8e27e90","version":6,"status":"done","tags":[],"date":"2026-04-27T15:49:01Z","url":{"schema":"http","addr":"plivnote.com","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":0,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"https","addr":"plivnote.com/","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"title":"plivnote.com – plivnote.com – Your trusted partner","dom":{"size":85294,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16648)","md5":"85b6eaf075ebfe179faff105a5b7229d","sha1":"ce93f271d0bd04071a64e3a333ea0187954f3037","sha256":"c41c0c4fbfcdbeaa177f8682577d7bf4536e7202acff5df35a1fa85ef0c5edfb","sha512":"64b27c87369ce6fd834442ad15cdbe05d59117d2d27b8c6e51e6dfbe6d18fdb90ca028b1e8762ffb0ce62c6f8aeca65d2b77d8478dcfc9adeb60d0fbf5a6315f","ssdeep":"1536:WVypckekaOrkSk8wikzYhaGNKTmQCos2YNhGXD9LV/SUusXH89HDrfz:WQekekrrkSkfikzYhlEir7NhGXxLV/7K","tlshash":"2d833c667aa0047f2d9b82fad25a761cb61cf593db06d6b6f8fc01205fd2ef21553208","dom_hash":"domhash4e4eb3740f9d0be66264d190ededbd07","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"plivnote.com","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":0,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-01T15:49:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-27T15:48:39Z","timestamp":1777304919,"ip_dst":{"addr":"Client IP","port":34908,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 8","source":"{\"timestamp\":\"2026-04-27T15:48:39.654141+0000\",\"flow_id\":2162926292540116,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"62.60.226.244\",\"src_port\":443,\"dest_ip\":\"172.18.0.3\",\"dest_port\":34908,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400007,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 8\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2026-04-27T15:48:39.629460+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-04-26T22:34:03.62582Z","alert_count":0,"request_count":1,"received_data":103646,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-26T22:16:47.246638Z","alert_count":0,"request_count":5,"received_data":236059,"sent_data":2755,"comment":"","tags":null,"fingerprints":null},{"fqdn":"plivnote.com","ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"domain_registered":"2026-04-23","domain_rank":0,"first_seen":"2026-04-23T16:45:26.59154Z","last_seen":"2026-04-23T16:45:26.59154Z","alert_count":38,"request_count":38,"received_data":1227066,"sent_data":23091,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WooCommerce:10.5.3","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Contact Form 7:6.1.5","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Elementor:3.35.6","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-26T22:20:29.825994Z","alert_count":0,"request_count":4,"received_data":200664,"sent_data":2303,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-04-27T05:48:26.405059Z","alert_count":0,"request_count":2,"received_data":1000807,"sent_data":861,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"plivnote.com/","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"b65724e01b9f184f66cd7a5472ce5e67","sha1":"7f11cda21c8c2bc9e9afd8a8b46d3acad1dc4a53","sha256":"801dbab5258b48052ba957fd27f3432ba35be10433a81ea4b105be6224b958fb","sha512":"cc99818834c704dff7cc1be7ac25da303edb338ab7fa6a6211ca75990819af2765a6bb26d72f6358c81f48143a5f8d12f82dee3aa1682d84fe05a4943704b725","ssdeep":"","tlshash":"88d02bda52da9d5363d66ed8100238f270a01413e59d8858daccbc981710d81ca0404f","size":260,"data":"","first_seen":"2026-04-27T15:49:05.3255Z","last_seen":"2026-04-27T15:52:06.246382Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-27T22:20:56.990413Z","times_seen":171867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js?ver=10.5.3","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc06080ebf979384eaf92a5f1cd7a50b","sha1":"1474b07026c758629a82df51a5e4fbb7abf531df","sha256":"c50a0b33030ba0ec063be642c297f48af94359e2222ff140817248d591faf837","sha512":"d6443028105566717f328c56d17a0694e13905aa008bd36ba744e76bc5181e854ab80563be1d3167d728bf5eba6c502d7e36aebf0ed74504c88e47125cc710aa","ssdeep":"384:1wNWSiRVRS4tdanZkYH5FL736ePkPakFX:qNdi7anPH5FL736ePkP/","tlshash":"fc62e945756050358aa511ac283b018f613adc3aa6f46834ef18e4ae387cede51fbb7d","size":15315,"data":"","first_seen":"2024-06-19T04:58:57Z","last_seen":"2026-04-27T22:20:49.451643Z","times_seen":108604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/themes/custom-theme/assets/js/theme.js?ver=1.0.0","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1781917e1b1785565c65fc73acc12c8","sha1":"00636e727d46e705d90a9d4d7f0abc0ff84c59b6","sha256":"3d30ddca01f89108fc0d460b7bf61600645f2814662920ec4560bcc48eacb8e0","sha512":"ff81b302870656f99e18350ae46da4b1ac65d3e291605d235eb0ee2d14baa50eab954472c9201f8a15376935b22a6e142e415b327affdeaf5b9c1698cd18e5a9","ssdeep":"192:UAigFbg74dDSDIoOM0Dy3iGcL1E/igO7MYHk38AywA9whAFaOklXGCGTC75GK/Fz:tZnAOM0Dy3hcaJDqC7j6XsK+ndcA","tlshash":"a392641e25b7207545b3227ea7cfa604763120477409cd0a7ead87441fc29b96fe3bea","size":20931,"data":"","first_seen":"2026-03-07T20:32:57.270232Z","last_seen":"2026-04-27T15:52:06.206238Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/contact-form-7-js-before","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4568b5d9e9e1912fdfcf402c7a4202c","sha1":"4f7d4e3faa7cd50274e6ab107df649a25e11389b","sha256":"83d3f8177f6ab9ec384b024a907329a770c0901b7ce8af3748d6caad0d332860","sha512":"94ffbcf4a5e60d2641787284ca29ac4e01c5af54189b0438565b80af45496915d88ac3cffcb055bd3c7d7320bf3d43bd06e18f1605e94d3c53a1956e626e87ac","ssdeep":"","tlshash":"3a0180ded9d81c4614d7c174017c1314b519a437c61f5e45f64d004c5ff407d69142c9","size":797,"data":"","first_seen":"2026-04-27T15:49:05.332407Z","last_seen":"2026-04-27T15:52:06.243317Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.10.5.3","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"691a1e43450e7cda541a3bd6f10fd5db","sha1":"d3a78cb77ccec297c9d32fee99a2a4761f604a8c","sha256":"8b083f64f2e9e8ac445c730dfce7013cc6449ce155fd1c2f42b60edba4ecb4b1","sha512":"a32ebe942e704da64381e392ffc20ed4f9d8daf71227a06f2dc0ca5c037675ab67e5b5a5ddf9bcb77b1872308daa780cc0e6ec5a2469bcd51444ece4f3b3de0d","ssdeep":"","tlshash":"c031b6d93095a8da06071490463f1207f2f91e27eecd98906264e8f50ab077a01ebf6b","size":1720,"data":"","first_seen":"2024-03-20T13:06:17Z","last_seen":"2026-04-27T22:20:49.763545Z","times_seen":111074,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=10.5.3","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6843fa9b6dfd1cae807f2c375830d09","sha1":"cc378797cb063f3981907698a6cc01e539eca654","sha256":"fca8dd4ee9c93f33dc3149e2c78aec8a28c54036faaf19c7b0ac9ca32293c070","sha512":"c9eb3dd5c84945d185f5ccccd954ef9546488e4979f9b3af5de54e107b2d0f8959e6c54509eee41f5ab67eb28488476e9a7751cd1a3fe671b618316cf944f3f0","ssdeep":"96:8mJQb8DHwbTtwqfDZa27MXi/NCa2St01Zyw6VfQ0GfV5VP:FKwWpwQFa2N/NCa2St01Zyw6VY9fV5VP","tlshash":"119173ceb121e4b693a22d82602fda850533383ff08694f8248aa6e51f359456577f3f","size":4350,"data":"","first_seen":"2025-11-27T20:47:57.43318Z","last_seen":"2026-04-27T22:24:09.876476Z","times_seen":20965,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"26558170a9334601b30e92d69a3d0ee6","sha1":"3a13b0f76f5b24854b9f17fce2f47451c19b036c","sha256":"42a3c2542d03f42886e81b2ca36782599f92395a5e9e0cdb55b0a55498e5b83e","sha512":"d2e32ce8a48a9a02e38078ebb784e9a0e8fcbbc43b64628068667e074b593e062cf69906af2e88b28d12303041f0e259413004ccc2b0e70d2f722bf7c7d49942","ssdeep":"","tlshash":"d871869ae7763cdbb2f900f2697a0d47eb614435d6c8d438c9bea3141cb5893c274b46","size":3619,"data":"","first_seen":"2026-04-27T15:49:05.339212Z","last_seen":"2026-04-27T15:52:06.240181Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-04-27T22:20:57.053864Z","times_seen":243970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-i18n-js-after","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ceeee36ebcd553a48f1a2647a16ff9b","sha1":"f3e76b20cb36259c92f792546cb56a546e9d2f7e","sha256":"87a9a2e96aa49dcaafa53e5e9d1bd33008a0a81dd21e3e712ad54aa0effbec7c","sha512":"095a38fc464c7537eec2df77702e19dae605dd241166c57719632f3cdc8d8d8db73c3dc2960aaaeffa34d99175924b99a427918e970c862aed8388aac593acb1","ssdeep":"","tlshash":"1f0112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":720,"data":"","first_seen":"2025-12-02T13:18:50.284608Z","last_seen":"2026-04-27T20:25:04.391117Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=10.5.3","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"abf4bb282c65836335fa88b6a680fb5c","sha1":"4ff37875342f9e9ab85cc6284fd5acfc06df7d18","sha256":"a41ecabfaa5a628b26a98234caa818e4d68e3edf6c48cee40b2a6f4c4fcafaba","sha512":"98a8eff66d0687b1032168ed55e3bb451fad16f1317da18768311c1058b8d8cb67fd827810298a70a831ec9d73d308d7133e2d21d022e46356d1295f8f645874","ssdeep":"48:0ncEupIbXbi5okOBRQJ8H6xJsnDpr6r75eGSqlw4Sd+uOujoKsPPF3cLR8p2o:0cEQw26a8EJWrO75ekw4klctsd85","tlshash":"0a81872774216d7322eb75ba2c9fe98014331639a8414501b50acf6c2b7e8ca7637f3e","size":4131,"data":"","first_seen":"2025-07-14T18:47:47.063472Z","last_seen":"2026-04-27T22:24:09.701973Z","times_seen":31459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.5","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-04-27T22:20:49.477385Z","times_seen":164773,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f2c41fbb61b82f37635e68ebe09e7c6","sha1":"4d73037e99829c323afe79807bdb132c14cef392","sha256":"0f004a5ee2b74a726770906326a5ec9e7a76eaa49db01d346ead0ff688339d78","sha512":"953d039c3ebbc621a0b766cecc51a4335d3f8fe2b3428f734c7a5284d61f76453eb625159410ed2419d454555d79d7b74d73b0364620afeae5dc92f6422a1710","ssdeep":"","tlshash":"63d0a79605992d8352dcaef00000283334b0e217f6e108002b1cee6c3239dc3de10147","size":215,"data":"","first_seen":"2025-12-02T22:49:33.863677Z","last_seen":"2026-04-27T22:15:09.663994Z","times_seen":13329,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-04-27T22:21:35.712398Z","times_seen":138756,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/elementor-frontend-js-before","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"cad5a111d3dd6776fabf325f94d0c6a3","sha1":"7a03af49ed9be388953038dfd2ae78eb754c764b","sha256":"1f7434d32fb9ebc49e6d122c63a421d8a282125e375cb6c294d6fca3f9e14af8","sha512":"ebd0dd93b91d8ec2367b5a1828e3be31bbdb79c966a07770e356e6fec4a4194cefc05e6574b91db185294d423f4bf58d1c62a1795e65e507072d0b3e091be945","ssdeep":"","tlshash":"3a617222f9415e7f83d38bb03913be07696c0635e041bca5f8ad487d14b69652307e8b","size":3347,"data":"","first_seen":"2026-04-27T15:49:05.355561Z","last_seen":"2026-04-27T15:52:06.257757Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.6","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"73c07e9630db2adbba0c6bc0bf568719","sha1":"dbeb1065ce0ea1fc9fa6b9df9e5e1700a8dee09e","sha256":"f4bdadf362076967230901fdfc69c8df84957f6615dec226b99ad2abb64c2c76","sha512":"d48774149b65604aeee68cf2936bfe5c84714bab61a46a190952b595ee79ce8aa2c0549a3755768b3a3615c2b6abe0cfdc69c398a77296b8ceebc69bfea8f8dd","ssdeep":"1536:yuyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:C+uhIAu","tlshash":"cf33d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","size":50503,"data":"","first_seen":"2026-01-29T11:04:52.803648Z","last_seen":"2026-04-27T22:28:35.236542Z","times_seen":23399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","size":8481,"data":"","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-04-27T22:21:35.405154Z","times_seen":89164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","size":5314,"data":"","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-04-27T22:21:35.607824Z","times_seen":137061,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wc-order-attribution-js-extra","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"df717acfb20fcaf9aaea5f9b10b580cd","sha1":"a849e5b4df63e547a612753f6112663a45150aaf","sha256":"4ba859d2abefda75306af6b8ebb74f853f70458e63d8c6667bbb24dcd7ed0986","sha512":"1e13ed183d8fcac52a2c30ab73f35e17e9fcc526fa8882e1bbafbf5c0ead5e0d8960c854c7eeea66ab9b5b343c27e17c5448cc2bcef91ebce9b7c60597670f3c","ssdeep":"","tlshash":"3a217652ee04a836e7c2803150a95bfd32bb13b6f4c0401dd3ad4b6d9228b81e082a0e","size":1369,"data":"","first_seen":"2026-04-27T15:49:05.359089Z","last_seen":"2026-04-27T15:52:06.249447Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.6","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"070048edd0950b156f2884cc6be49958","sha1":"f7df7a3692aae24b0d9bcfce4f436f9154fc4478","sha256":"a06367414e21ca690b7be3bad14cd62dcd8c35683b88cdee2050aaea11f703db","sha512":"aea4a92b1164697d2d808b46fa87d5dc35a4237afd7b4adee7f92da9b51f3ab1119a9375ca7ec62f2624d7fbb89d4cc77fb034486f80dc75b42e0f8c6d9b15b9","ssdeep":"768:D1c+6idHZRdzM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5GlT:ZcURdzMMBOBjmFatJR8RjD8/xHVlEEnp","tlshash":"69e208523296e866069f48a3f0231119f3765dd9b80af0d5b2bcdce6a471e877362b34","size":31928,"data":"","first_seen":"2026-03-03T15:30:23.234129Z","last_seen":"2026-04-27T22:24:09.579797Z","times_seen":21509,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"84b92284baabb976cd2fb5f3d5baed7e","sha1":"35669db5a2abbfd50ba1c7c71a0526bfa72ee2ca","sha256":"335b42ceafe8bac9d1feb059fe95749af39ab33400c24cf819a6052ad120c505","sha512":"2adc7bb5714e690e684894577d5dde19040693098ffa2e09d9303c7d5c4d44e4faa2998b3df0eb50ae073b33388733db8c8dfae7fd5a07f304cb573bda5149eb","ssdeep":"","tlshash":"bcf0c2ae5ab24a3755679a6e955e1071a602018fac3ebc377d5c60001f4c84ca1b8398","size":450,"data":"","first_seen":"2026-04-27T15:49:05.362831Z","last_seen":"2026-04-27T15:52:06.254783Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.6","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cd57e8cc70f6a9fc319c4c45fef6134","sha1":"883fa4ed0f0e114f04e7af8a8ad3a0964156c690","sha256":"fd9ae84b4655a6ff4bc18628d0dedaa835d10b5d6ea48455d73523c8b34e34f6","sha512":"57d47442aa77d546eb854717c1c9c30c1197f3aba0948709dd1ad3528c50d17d0b61e7b791fecfeff9e4d7c2ceeb370b3cc7fdd6eea563ce3db609c7ec2d896f","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDy9l8OWZp5Rm4leNzwVeLyVU2j2KBKGarNcl8/2:JsNGyrjiiNW65RmH0IW9v7G/2","tlshash":"f7c172941a54fc2b21e139d8e00ba735252ec0373c1af981fa32eced54e4fd183aa531","size":5722,"data":"","first_seen":"2026-03-03T15:30:23.231417Z","last_seen":"2026-04-27T22:24:09.439049Z","times_seen":21272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.10.5.3","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef56117d1bb5cc41aa6bd127a49c7640","sha1":"b9c2ed774177fc0fceba5cb58113024b23fe4fb7","sha256":"d151f8c0b2659cfb63704d68654ad8d9437ae9da4410536f63ddec21689a0620","sha512":"0ec9039dbb47470815ad8bf58fd206672717a146b3a99bcb12444687e8489698e06664e6c6cc38a5d2954fa919e5a6c3bc57e44f3be2655f92b801bac43ec763","ssdeep":"192:x9cCxjlRE8iST7TMcPvedRUtV7uLEUfHqo/gH5P5AxTov7fG3ex2NrMP:x9RjlRE8iSf4cPmgtV7uoOKIgxaxTovp","tlshash":"9f12e96831f3215780b7b1907cf7e38f73b2553c648798d1d0acd4692aacd7a2622f09","size":9636,"data":"","first_seen":"2023-08-09T05:33:46Z","last_seen":"2026-04-27T22:20:49.742318Z","times_seen":130675,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dd361b7473936c5c8f5bf661c323973","sha1":"5c8f2bcac20956a31c9cff999d50b99f9ee8f9fd","sha256":"55922883b583583787dd3e36a6ee97b5bedc12eec38a24b6bd271d53b8ebf1c2","sha512":"4181a000ecc679d08f6cad5ddac0283744c6dcb07822a19d2552105e4a9191f1baa4a1590975a71325c56714a37084f8122afe463170ce54b5a56d1a1c7780c4","ssdeep":"","tlshash":"a4f05c7a70d278ff200b44520a97105de6a81cf5012961417fbd44382a75ea4a23139f","size":449,"data":"","first_seen":"2025-06-30T23:09:48.860419Z","last_seen":"2026-04-27T22:24:09.79763Z","times_seen":60469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js?ver=10.5.3","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a816ff38bdd095e2118365ad4c618b","sha1":"c58ae69eeea5bf2846b88a6c7cbaaa7728a2444d","sha256":"0eb862a5891526d089b727fdfa30222cca4b4d75b5835727bf57df17436256f6","sha512":"b6650185967270b09fed48ef9937d21ae45b37010aef6b6a6a4ce3efb295bd39d3734b1cce7535e126cb255b1a3b40c27dd97322f1b70ee0e1c67163e2539cf4","ssdeep":"","tlshash":"41418335b001a826c37782d997aba651b335662d760290dca19c8cb43a39c0b7972cbf","size":2439,"data":"","first_seen":"2026-02-05T17:32:11.552459Z","last_seen":"2026-04-27T22:24:09.760419Z","times_seen":13614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-04-27T22:20:49.79918Z","times_seen":171347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:41.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://plivnote.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Apr 2026 07:54:05 GMT\r\nexpires: Thu, 22 Apr 2027 07:54:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 460476\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-27T22:19:03.866127Z","times_seen":157249,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":120,"dns":1,"connect":21,"send":0,"wait":8,"receive":5,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:42.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-04-27%2015%3A48%3A41%7C%7C%7Cep%3Dhttps%3A%2F%2Fplivnote.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-04-27%2015%3A48%3A41%7C%7C%7Cep%3Dhttps%3A%2F%2Fplivnote.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fplivnote.com%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:42 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 449\r\nLast-Modified: Thu, 23 Apr 2026 09:58:02 GMT\r\nConnection: keep-alive\r\nETag: \"69e9ed2a-1c1\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":449,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (449), with no line terminators","md5":"9dd361b7473936c5c8f5bf661c323973","sha1":"5c8f2bcac20956a31c9cff999d50b99f9ee8f9fd","sha256":"55922883b583583787dd3e36a6ee97b5bedc12eec38a24b6bd271d53b8ebf1c2","sha512":"4181a000ecc679d08f6cad5ddac0283744c6dcb07822a19d2552105e4a9191f1baa4a1590975a71325c56714a37084f8122afe463170ce54b5a56d1a1c7780c4","ssdeep":"","tlshash":"a4f05c7a70d278ff200b44520a97105de6a81cf5012961417fbd44382a75ea4a23139f","first_seen":"2025-06-30T23:09:48.860419Z","last_seen":"2026-04-27T22:24:09.79763Z","times_seen":60469,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/uploads/elementor/css/post-1755.css?ver=1776938286","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-1755.css?ver=1776938286 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: text/css\r\nContent-Length: 1015\r\nLast-Modified: Thu, 23 Apr 2026 09:58:06 GMT\r\nConnection: keep-alive\r\nETag: \"69e9ed2e-3f7\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1015,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1015), with no line terminators","md5":"2f57898d236a7f76affd41c044159242","sha1":"84f92682ff77399b31abead1222b5bc612cb6b59","sha256":"2eb6e83c7c231ac6adfeb35235afc12b8fd93ea7eee2de359aab769eb23d1378","sha512":"30987abb47d505d27161c94a9a50c8ac5336639f376244117c33851451845d3ea021c8231d32bf21958c6a07d0c30db34c9e13942e20f63187160933f1b86a07","ssdeep":"","tlshash":"0311fb9d7e535050622fa597c81391cc923208f9883d67d2da7528637532ef773d8a4a","first_seen":"2026-04-27T15:49:05.184828Z","last_seen":"2026-04-27T15:52:06.200577Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/themes/custom-theme/style.css?ver=1.0.0","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/themes/custom-theme/style.css?ver=1.0.0 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 23 Apr 2026 09:58:02 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed2a-911\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2321,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"91d7a3e93fe58faa3ee3eb27d4fdc290","sha1":"f48bb0304f9b13d1b40f38860a97fb4c32d6da7e","sha256":"46977cc5f7d16b15da58cfcca0b62cdbbd48a3f44ccab8d6e0216cc363def792","sha512":"e0f6829e1a5cb58173d2d9cb7239d693accd6dc81e671d247e1bb56f3f9dd2151a780b9c5bfb660152444eb872cb14bdbc988641a5a35887da3df9c2dbd57fe7","ssdeep":"","tlshash":"0841a3093673a764d0ef447bb143715eba8cc54047cf9ce0d5b8204ae9b5a8513f032b","first_seen":"2026-02-27T19:47:29.999229Z","last_seen":"2026-04-27T15:52:06.122254Z","times_seen":27,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Apr 2026 09:58:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed28-3509\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-27T22:20:45.943062Z","times_seen":696810,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/themes/custom-theme/assets/js/theme.js?ver=1.0.0","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/themes/custom-theme/assets/js/theme.js?ver=1.0.0 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Apr 2026 09:58:02 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed2a-51c3\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20931,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d1781917e1b1785565c65fc73acc12c8","sha1":"00636e727d46e705d90a9d4d7f0abc0ff84c59b6","sha256":"3d30ddca01f89108fc0d460b7bf61600645f2814662920ec4560bcc48eacb8e0","sha512":"ff81b302870656f99e18350ae46da4b1ac65d3e291605d235eb0ee2d14baa50eab954472c9201f8a15376935b22a6e142e415b327affdeaf5b9c1698cd18e5a9","ssdeep":"192:UAigFbg74dDSDIoOM0Dy3iGcL1E/igO7MYHk38AywA9whAFaOklXGCGTC75GK/Fz:tZnAOM0Dy3hcaJDqC7j6XsK+ndcA","tlshash":"a392641e25b7207545b3227ea7cfa604763120477409cd0a7ead87441fc29b96fe3bea","first_seen":"2026-03-07T20:32:57.270232Z","last_seen":"2026-04-27T15:52:06.206238Z","times_seen":20,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700\u0026family=Roboto:wght@300;400;500;700\u0026family=Playfair+Display:wght@400;500;600;700\u0026family=Montserrat:wght@300;400;500;600;700\u0026family=Lato:wght@300;400;700\u0026family=Poppins:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700\u0026family=Roboto:wght@300;400;500;700\u0026family=Playfair+Display:wght@400;500;600;700\u0026family=Montserrat:wght@300;400;500;600;700\u0026family=Lato:wght@300;400;700\u0026family=Poppins:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 27 Apr 2026 15:48:40 GMT\r\ndate: Mon, 27 Apr 2026 15:48:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59629,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"13b97ddd14a4f17a3f7876d9f47c5f74","sha1":"e0f0db33f41cf981e76b1798b5ecd156af4754b4","sha256":"1735b094ae272ddd04e88d82c6cd6665d6c869ac083c45b9699f9a270326db4d","sha512":"bca2ab8fdb513f99e96b04d0d34fe774cfa6da333ddc7829b44460b4d6589f3a227a157515390c9909a278613d6058391be8b98fcf43f098ffaafe0072e3624c","ssdeep":"768:4aOw/0veaHwG02xaww50pAahwI04QDS99YURRuWDyjooYhREHPM5svvYaR7AIWPP:/yll3","tlshash":"84431d91042ba400ab830cc223cf7f36ee5e61557085c1b9affd1e99acdbc66436976d","first_seen":"2026-02-27T19:47:30.006567Z","last_seen":"2026-04-27T15:52:06.155673Z","times_seen":28,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/uploads/2026/04/image_1776937747564-300x300.png","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:41.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/image_1776937747564-300x300.png HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-04-27%2015%3A48%3A41%7C%7C%7Cep%3Dhttps%3A%2F%2Fplivnote.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-04-27%2015%3A48%3A41%7C%7C%7Cep%3Dhttps%3A%2F%2Fplivnote.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fplivnote.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:41 GMT\r\nContent-Type: image/png\r\nLast-Modified: Thu, 23 Apr 2026 09:58:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed28-6a51\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27217,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"38269a71c4f50d4dcca07e8ede009401","sha1":"faf0845f1ba79814ad7befd299f8c1ae74363192","sha256":"bbddc321faea1304e3b0c871e6689bd897ad39a40a7f57aebddc4e458ed32778","sha512":"2a7186232d56a2c6b4769d0ab644e738fae94676411c9c2793226b95b4990099c814364f3fe944ab3d7faadf0972778c4f5982e7ea611950b4037e3fd26ac4c6","ssdeep":"768:iWa5yXVhSuaTZKnPuEbIIyGGybRxLnAFngY5vcbBAw:iWaShmgWKvyGGSRx+nvQBt","tlshash":"15c2e1e292bb4d975298af7b756f8312af38729360c8ea206131f047dac73f5159075c","first_seen":"2026-04-27T15:49:05.202857Z","last_seen":"2026-04-27T15:52:06.133256Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/uploads/2026/04/image_1776937747564-100x100.png","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:41.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/image_1776937747564-100x100.png HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-04-27%2015%3A48%3A41%7C%7C%7Cep%3Dhttps%3A%2F%2Fplivnote.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-04-27%2015%3A48%3A41%7C%7C%7Cep%3Dhttps%3A%2F%2Fplivnote.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fplivnote.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:41 GMT\r\nContent-Type: image/png\r\nLast-Modified: Thu, 23 Apr 2026 09:58:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed28-ee4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3812,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced","md5":"65fe9dd45ddedb1445086a9a8b419599","sha1":"d3146ced10e122c1c81492925071614f37e00374","sha256":"5848947ff6abed514414a9ebf4ecdf77872661a73d8e1e923705a95ce94adb41","sha512":"aab63c41b76dec5700e9a3d3c068c65bed91340bec9b3f6a6d21e07d41c62c24c093a29a619cef31febd187ccc9ce0f79c57829a0d65b6902929875c6f95eafd","ssdeep":"","tlshash":"7c717cd476b103cbf28fb4057ba82ae02a9151aad53fc0e52714fecb0b81def8521203","first_seen":"2026-04-27T15:49:05.207011Z","last_seen":"2026-04-27T15:52:06.108532Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/uploads/elementor/css/post-5.css?ver=1776938286","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-5.css?ver=1776938286 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 23 Apr 2026 09:58:06 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed2e-490\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1168,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1168), with no line terminators","md5":"d894eda9099c06a0e3a9ad38a8850a56","sha1":"3a5b3cb8bc87bd83ac5be01e9b5692c09377c330","sha256":"9a22810feef8b6a1068ec532431f1cb7333179289962363718ed7382668368a1","sha512":"a3435a76447a5e2d5b0ffab0cfe78af6478b51a2c8e61bdef1a036bfffbbc4d90075714b59898a7bd159aa16ed883f81532ab50b42837767a253713064de3a4f","ssdeep":"","tlshash":"862125457a23d432e17b093f91c3b02c112cd46fa25f8adff41c9649f9bea462228647","first_seen":"2025-06-17T01:58:04.925731Z","last_seen":"2026-04-27T19:46:39.925507Z","times_seen":333,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.10.5.3","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.10.5.3 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Apr 2026 09:58:01 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed29-25a4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9636,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9242)","md5":"ef56117d1bb5cc41aa6bd127a49c7640","sha1":"b9c2ed774177fc0fceba5cb58113024b23fe4fb7","sha256":"d151f8c0b2659cfb63704d68654ad8d9437ae9da4410536f63ddec21689a0620","sha512":"0ec9039dbb47470815ad8bf58fd206672717a146b3a99bcb12444687e8489698e06664e6c6cc38a5d2954fa919e5a6c3bc57e44f3be2655f92b801bac43ec763","ssdeep":"192:x9cCxjlRE8iST7TMcPvedRUtV7uLEUfHqo/gH5P5AxTov7fG3ex2NrMP:x9RjlRE8iSf4cPmgtV7uoOKIgxaxTovp","tlshash":"9f12e96831f3215780b7b1907cf7e38f73b2553c648798d1d0acd4692aacd7a2622f09","first_seen":"2023-08-09T05:33:46Z","last_seen":"2026-04-27T22:20:49.742318Z","times_seen":130675,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/uploads/2026/04/image_1776937747564.png","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/image_1776937747564.png HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: image/png\r\nLast-Modified: Thu, 23 Apr 2026 09:58:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed28-56771\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":354161,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"2fa2d03417150972edc441816b0d3a82","sha1":"9dbce613b1b8a48f396cf37277f5035d7c08a3ed","sha256":"bca48b2f4d731812fdd8011731705dab2966d358adbdd8a02bdc66d428b86822","sha512":"122630f2d67ed945b8c02efad69eedbea8938dea956a629e1f65aa1c2cd84417345641032d0581a8976292517d232326417c95eb6805b4dffba5a49cd6cc5b70","ssdeep":"6144:i3bSsmY5s+9GDTpbIvJQL4tJycpHsUjUnsi+o06jgcSiBPAzqkajRgdaG1/umalT:i3Oh55DTpbSk4nBpMUjUnf+dWDPAzqlD","tlshash":"8a742362be023d1cea5d2eb03512eb264ff17356b76a32897270649b4760fa0b00d75d","first_seen":"2026-04-27T15:49:05.215697Z","last_seen":"2026-04-27T15:52:06.218423Z","times_seen":2,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":229,"dns":0,"connect":0,"send":0,"wait":27,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js?ver=10.5.3","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js?ver=10.5.3 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Apr 2026 09:58:01 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed29-3bd3\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15315,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (15315), with no line terminators","md5":"fc06080ebf979384eaf92a5f1cd7a50b","sha1":"1474b07026c758629a82df51a5e4fbb7abf531df","sha256":"c50a0b33030ba0ec063be642c297f48af94359e2222ff140817248d591faf837","sha512":"d6443028105566717f328c56d17a0694e13905aa008bd36ba744e76bc5181e854ab80563be1d3167d728bf5eba6c502d7e36aebf0ed74504c88e47125cc710aa","ssdeep":"384:1wNWSiRVRS4tdanZkYH5FL736ePkPakFX:qNdi7anPH5FL736ePkP/","tlshash":"fc62e945756050358aa511ac283b018f613adc3aa6f46834ef18e4ae387cede51fbb7d","first_seen":"2024-06-19T04:58:57Z","last_seen":"2026-04-27T22:20:49.451643Z","times_seen":108604,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=10.5.3","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=10.5.3 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 23 Apr 2026 09:58:01 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed29-1d67\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7527,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7527), with no line terminators","md5":"59d266c0ea580aae1113acb3761f7ad5","sha1":"73c56509ceda1b1047096bae2cab820063047833","sha256":"8de5b2ae100f00d7a4e18f42cb12e8b5562d387f6b5c0ed09332cd5cec389ac0","sha512":"e24e206f12b35d20ba6e84a63f4855baee00a47448e0e106bb6565dca151d758388c65e0fea651fbacbda985efaabfb86756a24eb343e1a1023b17ca20a4fed3","ssdeep":"192:mjHXN5HjRHJNnHKDHJXHasHyBj8nHBH8bNbHlUqrmni4ElJK6XKUlK5859lP5IQl:mTdtjVTHKzJXawyBEleb8apGAHNJ","tlshash":"3ef114a3aa117e7537dee4847c0735e97c2ae038bf04193558990b0cc7da9da61a2f1e","first_seen":"2025-02-26T09:02:49.789528Z","last_seen":"2026-04-27T22:15:09.187657Z","times_seen":38153,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:42.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.1 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-04-27%2015%3A48%3A41%7C%7C%7Cep%3Dhttps%3A%2F%2Fplivnote.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-04-27%2015%3A48%3A41%7C%7C%7Cep%3Dhttps%3A%2F%2Fplivnote.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fplivnote.com%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:42 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Apr 2026 09:58:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed28-58ea\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-27T22:20:56.990413Z","times_seen":171867,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/?plugins=typography","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 09:41:26 GMT","end":"Fri, 19 Jun 2026 10:41:19 GMT"},"fingerprint":{"sha1":"1C:D9:C0:8C:4D:FA:FF:5A:2C:CC:48:EB:7B:35:CF:FA:AB:7F:C0:61","sha256":"1E:81:97:52:8B:47:37:54:3B:62:1E:0B:E5:1D:D6:F7:F2:6D:CD:F7:D3:1F:8C:0E:78:14:26:9F:B9:87:EA:5C"}}},"request":{"raw":"GET /?plugins=typography HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 27 Apr 2026 15:48:40 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17?plugins=typography@0.5.16\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::4q7bv-1777304525284-98160616b5f3\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 394\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=epFyTDdQ06X5lI9k2N7pj%2BQMbiusc6nX%2BKvxzuDDEabLuScm%2FcN%2BlK8Zntlgk6yF9MdDcrqT4nGY3%2BA8ukROEP7tacRnSN6hQT3kYO%2BYkjtfOS60v%2FPCc%2FssGFneoWF2d4YDkcI%3D\"}]}\r\ncf-ray: 9f2ef9065fe45687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":499661,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T22:20:10.334261Z","times_seen":14297583,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":7,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.5","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.5 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 23 Apr 2026 09:58:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed28-b83\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2947,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"64ac31699f5326cb3c76122498b76f66","sha1":"cc0a5a1741b8257001f89b331378d8aa7c30094a","sha256":"4048fd0e6c44412465449ba4f5c7272349ee1574401cec755d6b8d9c0ccc28dd","sha512":"23ad865e63544ee039221161083510346b01b8be56fa7a83540036c51dceb3f0171adf8f932cf77a457240427c0c3ccbad1f9f371e977c5b6a01e9fe316a878f","ssdeep":"","tlshash":"d0510164660028504bff92db6ea9db047b6e7481cd1faf97b0c21a7c5b782851223e5e","first_seen":"2025-06-26T12:36:15.124007Z","last_seen":"2026-04-27T22:20:49.761163Z","times_seen":111247,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css?ver=6.5.1","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/all.min.css?ver=6.5.1 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 15:48:40 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18861\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65692999-49ad\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 214741\r\nexpires: Sat, 17 Apr 2027 15:48:40 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5GjamH0umz846UBfLZmNl%2B4KqUXVh%2BKaO0h3CBwhxu2640JfhzwpHXXaVYDLdU8%2BOm%2FYbDDa6%2BOXvioB13MCGu6vM4HuZk%2BXgUiq4Hk3fnPtdvoNmZi8bzz31MGKXHnII2BU2z1i\"}]}\r\ncf-ray: 9f2ef90629c9b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102641,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-04-27T22:28:41.190151Z","times_seen":24347,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":17,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/themes/custom-theme/assets/css/block-themes.css?ver=1.0.0","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/themes/custom-theme/assets/css/block-themes.css?ver=1.0.0 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 23 Apr 2026 09:58:02 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed2a-8a3c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35388,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF, CR line terminators","md5":"4310728d5869a9b6cbc4f7d062232f61","sha1":"409b8e45f1494f6afac93f6c547fd96e3afa3c08","sha256":"dbe9af9d5c7e100d404096166d1eeb20cc95e547ed122c8bd9fc1de90e4b6e27","sha512":"86129a88bb4cd63801f9e2845096bf63424b3b02d9332932121e20874619588f22504231919cbc32a7ede6366d8eba9fa37c13258e0674f864b3d9883bd251a8","ssdeep":"192:CaJw2i6QQXixZ3n0OUGnxcCxhhRIKK1BOmr7+OB1CBcMI2hvSgOs2bRo1sTLLM6e:uf+2ocYOqQilAfneJQfUouYRzt0B6j","tlshash":"f0f21f0d727ab27545339e35638d9f69776472418f22265bfd9c001a1f8a3b83a83f1d","first_seen":"2026-03-05T15:18:29.497457Z","last_seen":"2026-04-27T15:52:06.198312Z","times_seen":23,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":36,"dns":1,"connect":30,"send":0,"wait":25,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.35.6","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.35.6 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 23 Apr 2026 09:58:02 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed2a-d58a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54666,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (54666), with no line terminators","md5":"4fb5f7fc5e41f736ec0527b162519d52","sha1":"33697641c940c68153509fa7c9d7d0c3c760ce2d","sha256":"0a5d398672e25dc7f020f69df92a985481b248a60e301fee232d0c8afd648dc5","sha512":"5da1e9708bfdbd38beb7cee98d806ebc84b4d8337ce638a363d28461ebd9fda5189618bfa62167a5261ec2e98b02cb88ee4ff7bd5ecdd2d2facd480965e0c7a6","ssdeep":"384:Ws4J/8DEksCoI+SBQYO22/RmRs5Cz9TQXPTkvmGkvmCFldtraiIks05ArOk:dFLh5mP3RbrlDdps05Xk","tlshash":"17330da23d13b269226f442b82c7364c526499c1ee0375d9f944c523dafece63b36c5b","first_seen":"2026-01-29T13:38:24.653388Z","last_seen":"2026-04-27T22:28:02.092837Z","times_seen":25182,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 27 Apr 2026 15:48:40 GMT\r\ndate: Mon, 27 Apr 2026 15:48:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22365,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"63c1df95a2b11b7542db5b48c56125f1","sha1":"b4116959b5ecbc00779addd320d98d8863692210","sha256":"7ead28f8032c788137532c3a88e9a7bda1411143e54ed4c066271c29f90340b7","sha512":"a5e42a035be607f6a98d7f73a26c37ad2e03a81dd0b54f2cc7bc5dc94a41b3b80af855ce9604e2b2283a7936df9008f068a8285c4cd8e4e960ab411c9c687d4f","ssdeep":"384:bvWLvKvXvUwvzv+vLWaZOUPSVsWJqtUghWVWInkUBALWWXYjUyvsHWm1iUz+54WD:bv0vKvXv3vzv+vLrZOuSVsMqtNhWV1nR","tlshash":"66a2bdd6486ba405ab870cc163dfbfa2ad9e5151a081c4becbfd2cb86cd6d32136075d","first_seen":"2025-09-17T18:46:03.2743Z","last_seen":"2026-04-27T22:32:25.730581Z","times_seen":11937,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":1,"connect":30,"send":0,"wait":38,"receive":0,"ssl":213},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=10.5.3","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=10.5.3 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Apr 2026 09:58:01 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed29-10fe\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4350,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4350), with no line terminators","md5":"d6843fa9b6dfd1cae807f2c375830d09","sha1":"cc378797cb063f3981907698a6cc01e539eca654","sha256":"fca8dd4ee9c93f33dc3149e2c78aec8a28c54036faaf19c7b0ac9ca32293c070","sha512":"c9eb3dd5c84945d185f5ccccd954ef9546488e4979f9b3af5de54e107b2d0f8959e6c54509eee41f5ab67eb28488476e9a7751cd1a3fe671b618316cf944f3f0","ssdeep":"96:8mJQb8DHwbTtwqfDZa27MXi/NCa2St01Zyw6VfQ0GfV5VP:FKwWpwQFa2N/NCa2St01Zyw6VY9fV5VP","tlshash":"119173ceb121e4b693a22d82602fda850533383ff08694f8248aa6e51f359456577f3f","first_seen":"2025-11-27T20:47:57.43318Z","last_seen":"2026-04-27T22:24:09.876476Z","times_seen":20965,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=10.5.3","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=10.5.3 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 23 Apr 2026 09:58:01 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed29-4d0f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19727,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19727), with no line terminators","md5":"e98f5279cacaef826050eb2595082e77","sha1":"a8544ea38d3f635cdf937ff02c6766801a689431","sha256":"88b9926f308c1b694f61a23f1c80f2ef3a9980f98084bfc0f273b7049611db2b","sha512":"ca096c013f2913a9cdcafde5becc54e6aea2958398caf72c6370d5676a99b3c1ecb200b901618c2506bd6885ddc411a57d4a0904db1197a56ad62ff2ec4abe10","ssdeep":"384:c3sXkEzOm9Oq/tThyIeGe0cGAyBMKOgSpSgsVY8s:mGAyGZh","tlshash":"669275e7c4381c2877edb5ad7c4031e53c26d53cbb8511b8a8956b1d82ca6d73ab170e","first_seen":"2025-04-10T05:48:53.592778Z","last_seen":"2026-04-27T22:15:09.412441Z","times_seen":35979,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 27 Apr 2026 15:48:40 GMT\r\ndate: Mon, 27 Apr 2026 15:48:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15162,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cd46912baf19b9fe32c8e6a6320bcaf9","sha1":"08ee007e9656ed41ffbabdb06701a3895bfa0094","sha256":"92a04c9ec1ae41b88f1eda4e7c4d74ffea87294a25c63c0fcdd7472dd82f1035","sha512":"33912fabd74bd7afee0c49ddd4b89161dfc7939fabb2ac6a75b9a5b4fd3e745fcdb6a4dda2ba6ddef3c9177f4ac972ff43239bc2f1af456c7530e7b981510b9e","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kc:8KYXuM0p2+g7r","tlshash":"3f628892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T14:17:01.635764Z","last_seen":"2026-04-27T21:06:52.929732Z","times_seen":2992,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":257,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":236},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/themes/custom-theme/assets/css/ai-blocks.css?ver=1.0.0","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/themes/custom-theme/assets/css/ai-blocks.css?ver=1.0.0 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 23 Apr 2026 09:58:02 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed2a-abdf\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43999,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"208f1c3f7cd5ecf83661d041f87a6918","sha1":"95b6966000b43fb5a9b0a55e81b99be0d7863f0e","sha256":"c5068ea32bbc2e22a9fc377ea9fd438be461d3d606f269695325fef084f11a0f","sha512":"63d5a67f1a7af9e5e5e3347a3c245285c3db4619cb032737168c572ebb91b657439ba82a6d7b07771f6e6b48f5dbe7d4b21d49426de1b045c03e36d7f865e64d","ssdeep":"384:RaYdtrOtMCcOec4CxYEjhQnb4oIJQTdnPCfCQrAlF6Pc3gXj:utvec4C+2Qb4oIJQTd2CQrAlF6PcM","tlshash":"f413a75822b6d614b8abd4b451c697ba73dc9104ce0fcd7eb7e7601c9dc97e82432b88","first_seen":"2026-03-07T20:32:57.309352Z","last_seen":"2026-04-27T15:52:06.181232Z","times_seen":20,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":34,"dns":1,"connect":30,"send":0,"wait":26,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Apr 2026 09:58:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed28-15601\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-27T22:20:46.026459Z","times_seen":751163,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":26,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/uploads/2026/04/image_1776937736429.jpg","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/image_1776937736429.jpg HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 23 Apr 2026 09:58:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed28-1ab7f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":109439,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1344x768, components 3","md5":"ecd83cc4a7210ee0e57c55dd12479044","sha1":"e681e092e5d7a795d60ef0e953451f7d71defdb8","sha256":"0a1b64e1067f817b84f78ce5595509fea81386f6d46784a4fb2bbd5e377b801b","sha512":"2c692b483cda119a2e25ee98bc6b0b91e5a0050bf5217bdefe63742b41af8e4e62593368d6545072459e72909f6820574de0e787ae0a436fe7e1b6491921ea53","ssdeep":"3072:GFShXNFVqqQy3oREYSGOaXylHpJaB9GBTDu7Mu:GFSXNjKREtiX2pEB9G1D/u","tlshash":"49b302bf6b7e9689436cea4242d4ff782d61d82583e727f341cb81c9f0109f599b1682","first_seen":"2026-04-27T15:49:05.255935Z","last_seen":"2026-04-27T15:52:06.166744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":228,"dns":0,"connect":0,"send":0,"wait":26,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Apr 2026 09:58:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed28-14c2\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-04-27T22:21:35.607824Z","times_seen":137061,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js?ver=10.5.3","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js?ver=10.5.3 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Apr 2026 09:58:01 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed29-987\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2439,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2439), with no line terminators","md5":"46a816ff38bdd095e2118365ad4c618b","sha1":"c58ae69eeea5bf2846b88a6c7cbaaa7728a2444d","sha256":"0eb862a5891526d089b727fdfa30222cca4b4d75b5835727bf57df17436256f6","sha512":"b6650185967270b09fed48ef9937d21ae45b37010aef6b6a6a4ce3efb295bd39d3734b1cce7535e126cb255b1a3b40c27dd97322f1b70ee0e1c67163e2539cf4","ssdeep":"","tlshash":"41418335b001a826c37782d997aba651b335662d760290dca19c8cb43a39c0b7972cbf","first_seen":"2026-02-05T17:32:11.552459Z","last_seen":"2026-04-27T22:24:09.760419Z","times_seen":13614,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.6","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.6 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Apr 2026 09:58:02 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed2a-165a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5722,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5722), with no line terminators","md5":"9cd57e8cc70f6a9fc319c4c45fef6134","sha1":"883fa4ed0f0e114f04e7af8a8ad3a0964156c690","sha256":"fd9ae84b4655a6ff4bc18628d0dedaa835d10b5d6ea48455d73523c8b34e34f6","sha512":"57d47442aa77d546eb854717c1c9c30c1197f3aba0948709dd1ad3528c50d17d0b61e7b791fecfeff9e4d7c2ceeb370b3cc7fdd6eea563ce3db609c7ec2d896f","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDy9l8OWZp5Rm4leNzwVeLyVU2j2KBKGarNcl8/2:JsNGyrjiiNW65RmH0IW9v7G/2","tlshash":"f7c172941a54fc2b21e139d8e00ba735252ec0373c1af981fa32eced54e4fd183aa531","first_seen":"2026-03-03T15:30:23.231417Z","last_seen":"2026-04-27T22:24:09.439049Z","times_seen":21272,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/themes/custom-theme/assets/css/utilities.css?ver=1.0.0","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/themes/custom-theme/assets/css/utilities.css?ver=1.0.0 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 23 Apr 2026 09:58:02 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed2a-352a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13610,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"54c00f59b5c2fc0ad005f01fa3508110","sha1":"bd2b224b0aee77114a4cb8f3100709caa051e603","sha256":"48386dc94576f82db8fc9d702d7b57457e046fb89cd03af40ce651d6ffd047ca","sha512":"c92a69fe735aa96895e570a001a0868e1dee5fe6b597eecf8a5096df1f3df83ff3c20770aa8e6ec817754d4190b83e64e70c7b595397446da7cc663c7ca49980","ssdeep":"192:IsCj32dvaebX+KgzoS5e5VcIEPc9SsoXQDs4MkfSqGzfutPVz8SGiV:KaZrAe5VcIEPspYVnbutPig","tlshash":"165296573a12210cb03f5129f093a75443298501f61ffcfe7696984ad6981fc3677bab","first_seen":"2026-02-27T19:47:30.007312Z","last_seen":"2026-04-27T15:52:06.119946Z","times_seen":26,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":37,"dns":1,"connect":30,"send":0,"wait":25,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/themes/custom-theme/assets/css/themes.css?ver=1.0.0","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/themes/custom-theme/assets/css/themes.css?ver=1.0.0 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 23 Apr 2026 09:58:02 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed2a-7994\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31124,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"49ba76e31367407c47a3178dfd3744e1","sha1":"7bc10e79837cc443cb491a681676af73b649305b","sha256":"4b3d3998f431210ff2f72f3a7bf72903c9d874e42aa1d51323da17abbe3aa34f","sha512":"c68be13943140304427ba8a86000738c1b530e1cdca9947a20b8dc9183868ed4600ed2bf2c2117867a2aac419486fe073f1d3d08e5c26700c2bd3898f9549588","ssdeep":"768:9IgFIcoEqzgOhQ/jDLhYRxc1EAKJUUxC/:inkOc3GGSLhx0","tlshash":"f4e20f443241b1ad2d3a48affb19bd19b7b06019c7156bdffcd602215a8a3bc93f1729","first_seen":"2026-02-27T19:47:30.008195Z","last_seen":"2026-04-27T15:52:06.231583Z","times_seen":26,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":37,"dns":4,"connect":31,"send":0,"wait":25,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.10.5.3","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.10.5.3 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Apr 2026 09:58:01 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed29-6b8\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1720,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1690)","md5":"691a1e43450e7cda541a3bd6f10fd5db","sha1":"d3a78cb77ccec297c9d32fee99a2a4761f604a8c","sha256":"8b083f64f2e9e8ac445c730dfce7013cc6449ce155fd1c2f42b60edba4ecb4b1","sha512":"a32ebe942e704da64381e392ffc20ed4f9d8daf71227a06f2dc0ca5c037675ab67e5b5a5ddf9bcb77b1872308daa780cc0e6ec5a2469bcd51444ece4f3b3de0d","ssdeep":"","tlshash":"c031b6d93095a8da06071490463f1207f2f91e27eecd98906264e8f50ab077a01ebf6b","first_seen":"2024-03-20T13:06:17Z","last_seen":"2026-04-27T22:20:49.763545Z","times_seen":111074,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Apr 2026 09:58:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed28-348c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13452,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-04-27T22:20:49.79918Z","times_seen":171347,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:41.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://plivnote.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Apr 2026 07:54:05 GMT\r\nexpires: Thu, 22 Apr 2027 07:54:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 460476\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-27T22:19:03.866127Z","times_seen":157249,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":78,"dns":11,"connect":8,"send":0,"wait":9,"receive":11,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:41.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://plivnote.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 11:27:44 GMT\r\nexpires: Fri, 23 Apr 2027 11:27:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 361257\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-27T22:20:56.893881Z","times_seen":355382,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-27T15:48:39.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:39 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLink: \u003chttps://plivnote.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://plivnote.com/wp-json/wp/v2/pages/1755\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://plivnote.com/\u003e; rel=shortlink\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WooCommerce:10.5.3","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Contact Form 7:6.1.5","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Elementor:3.35.6","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":70232,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8832)","md5":"7b50d5cca5cd69d13aa6e55a6de111de","sha1":"bd787ddd3d1f2f4d439ce4149294733b6b140f51","sha256":"fd42fa70be2464a572e842d8b88122926a0b6aa5e29cc5bfcfb962ed47958dad","sha512":"267674a2689e0a321efdb28ca077a6647d088c4f644e9a6ccfe09e0d1f1d8dc33ac57b2a9bfcf25aaeb578be5ea0e62f9f9319e8302bd2dad3db79afe7625823","ssdeep":"1536:zNypnKkpkaOKktk8w9kzSKBmQExs0rvhGXD9LV/SUusXH89HDrfr:zo4kpkrKktkf9kznUj5vhGXxLV/7usXY","tlshash":"8e632bb279f4047b25cf82baa22b761caa9ce567eb02c565f4fc41381f91ef21553348","first_seen":"2026-04-27T15:49:05.28519Z","last_seen":"2026-04-27T15:52:06.178032Z","times_seen":2,"resource_available":true,"data":null}},"time_used":361,"timings":{"blocked":129,"dns":73,"connect":25,"send":0,"wait":102,"receive":1,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.6","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.6 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Apr 2026 09:58:02 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed2a-c547\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50503,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50502), with no line terminators","md5":"73c07e9630db2adbba0c6bc0bf568719","sha1":"dbeb1065ce0ea1fc9fa6b9df9e5e1700a8dee09e","sha256":"f4bdadf362076967230901fdfc69c8df84957f6615dec226b99ad2abb64c2c76","sha512":"d48774149b65604aeee68cf2936bfe5c84714bab61a46a190952b595ee79ce8aa2c0549a3755768b3a3615c2b6abe0cfdc69c398a77296b8ceebc69bfea8f8dd","ssdeep":"1536:yuyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:C+uhIAu","tlshash":"cf33d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","first_seen":"2026-01-29T11:04:52.803648Z","last_seen":"2026-04-27T22:28:35.236542Z","times_seen":23399,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":25,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.6","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.6 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Apr 2026 09:58:02 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed2a-7cb8\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31928,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31928), with no line terminators","md5":"070048edd0950b156f2884cc6be49958","sha1":"f7df7a3692aae24b0d9bcfce4f436f9154fc4478","sha256":"a06367414e21ca690b7be3bad14cd62dcd8c35683b88cdee2050aaea11f703db","sha512":"aea4a92b1164697d2d808b46fa87d5dc35a4237afd7b4adee7f92da9b51f3ab1119a9375ca7ec62f2624d7fbb89d4cc77fb034486f80dc75b42e0f8c6d9b15b9","ssdeep":"768:D1c+6idHZRdzM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5GlT:ZcURdzMMBOBjmFatJR8RjD8/xHVlEEnp","tlshash":"69e208523296e866069f48a3f0231119f3765dd9b80af0d5b2bcdce6a471e877362b34","first_seen":"2026-03-03T15:30:23.234129Z","last_seen":"2026-04-27T22:24:09.579797Z","times_seen":21509,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Apr 2026 09:58:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed28-53d8\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-04-27T22:20:57.053864Z","times_seen":243970,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17?plugins=typography@0.5.16","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 09:41:26 GMT","end":"Fri, 19 Jun 2026 10:41:19 GMT"},"fingerprint":{"sha1":"1C:D9:C0:8C:4D:FA:FF:5A:2C:CC:48:EB:7B:35:CF:FA:AB:7F:C0:61","sha256":"1E:81:97:52:8B:47:37:54:3B:62:1E:0B:E5:1D:D6:F7:F2:6D:CD:F7:D3:1F:8C:0E:78:14:26:9F:B9:87:EA:5C"}}},"request":{"raw":"GET /3.4.17?plugins=typography@0.5.16 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plivnote.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 15:48:40 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::2w7xz-1773800733016-8adc4983bf11\r\nlast-modified: Wed, 18 Mar 2026 02:25:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 3504186\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=82%2FQ8%2FHV2%2Br5%2BtWyHHb0ZKdEcLXX2Ha3SPX%2F27e3%2Fbbt7IlgA6R5stS5nGKSdqhcnGAqjl1Z1C%2BOs5%2FaBIZ%2FEERSg%2BHCalE84m%2FgNhIbFzSSfqjPyiRQSP%2FIm1R%2FAOm3QbM9BYs%3D\"}]}\r\ncf-ray: 9f2ef90769085687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":499661,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52873)","md5":"29ffc3e3e3e0e98bf3590865db08dc00","sha1":"bb6dfbdfd7e9b4c6589ee2b526cea2c2edece065","sha256":"40f00f2a537733b55c4d30fbb762164329de258493af6faf88b72f48d354ae6f","sha512":"7574770ebd3153913e40fcb74bce4217ae1f866bfb4383a151a17f0350e4d07c2131430e330c0d9f5226f8c07f67f65345d45274b70194be6ced0cb1f33c0b99","ssdeep":"6144:G/Q1+KztlZNXAs+7Vy61LLwaoh0A3qdP06OBlBmIqf7NgekjLO0s:r1+Kztfqs+7Vy61LLMSgFFRmI4NCLO0s","tlshash":"7bb43ba97356b13647eba1e850ab1402f37d5a28900c84acf79dc4da3de4d4950bbf3d","first_seen":"2025-08-04T14:57:28.699817Z","last_seen":"2026-04-27T20:00:40.904327Z","times_seen":756,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:41.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://plivnote.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Apr 2026 07:54:05 GMT\r\nexpires: Thu, 22 Apr 2027 07:54:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 460476\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-27T22:19:03.866127Z","times_seen":157249,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=10.5.3","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=10.5.3 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Apr 2026 09:58:01 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed29-1023\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4131,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4131), with no line terminators","md5":"abf4bb282c65836335fa88b6a680fb5c","sha1":"4ff37875342f9e9ab85cc6284fd5acfc06df7d18","sha256":"a41ecabfaa5a628b26a98234caa818e4d68e3edf6c48cee40b2a6f4c4fcafaba","sha512":"98a8eff66d0687b1032168ed55e3bb451fad16f1317da18768311c1058b8d8cb67fd827810298a70a831ec9d73d308d7133e2d21d022e46356d1295f8f645874","ssdeep":"48:0ncEupIbXbi5okOBRQJ8H6xJsnDpr6r75eGSqlw4Sd+uOujoKsPPF3cLR8p2o:0cEQw26a8EJWrO75ekw4klctsd85","tlshash":"0a81872774216d7322eb75ba2c9fe98014331639a8414501b50acf6c2b7e8ca7637f3e","first_seen":"2025-07-14T18:47:47.063472Z","last_seen":"2026-04-27T22:24:09.701973Z","times_seen":31459,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=wc-10.5.3","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=wc-10.5.3 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 23 Apr 2026 09:58:01 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed29-36b6\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14006,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (10312)","md5":"e2d671c403c7e2bd09b3b298c748d0db","sha1":"d9e1884d4627704102a1e6c19905ca2f00431c6a","sha256":"45173f1550e57be245f3ed3b0f6fde7962e27901d5a04adf9342e546500bed49","sha512":"cee28ff90c4e108f2afbbf51772f294ed1a5b5d179b3c7dec59ee0781f6cb2e3f70a79a8f88e3b6587507c0aea6b2f483dd0d1f1ca753b8ed6670b9ef15c9770","ssdeep":"96:JctcybwYP5GKHxNBQUEr2xT8l/0JYNFvyadAAPOO+yH1:eF7RGKRNQr2Ges","tlshash":"fd5266b1e7b52cf8493989649e70b6d2b5f93080cbd325d9d04ae580719f4aa0bd27cf","first_seen":"2025-09-22T15:19:04.124916Z","last_seen":"2026-04-27T22:24:09.343135Z","times_seen":61573,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Apr 2026 09:58:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed28-161d\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-04-27T22:21:35.712398Z","times_seen":138756,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=10.5.3","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=10.5.3 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 23 Apr 2026 09:58:01 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed29-15266\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86630,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"1eb298bdcbd06f8af3819a6a5450e17e","sha1":"dfef64b849e42fc4216561e4f45928cf2e885481","sha256":"28cc0f067f1ddef58cb4a8c849913f7b10bb663359371a5fdfe561f4c157b768","sha512":"6261509b44e245bc960195f79f6a50cc4ef7097b5de780267ddd1cba62b77dacd12f2df293b831c972f1721e172ee6269a6a059cd97c4628ac4ca379c8eba534","ssdeep":"768:uoJlQ6I5wzYtZcRIXQ6KmdbqmMk8iqjb/jOixEVUc:umQt5wzYtbQ6/dbqmMkuy","tlshash":"5683409b95b42d787beaf6958c84b1c53e10d075b2c01075ede50f9c81caaeb351af0e","first_seen":"2026-01-11T18:13:56.662365Z","last_seen":"2026-04-27T20:31:11.090583Z","times_seen":2272,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":36,"dns":1,"connect":26,"send":0,"wait":49,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 27 Apr 2026 15:48:40 GMT\r\ndate: Mon, 27 Apr 2026 15:48:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100764,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"9e6b9ba92c3c07c25c3a64a82c98afc3","sha1":"3ddff674c5f9cd149de491cf5df81c1074eaf397","sha256":"3d675aa2a0daa5e5b0080f14f3335f2d7a15275badcc418deba1e740a5ea55ab","sha512":"097289d7ac1a663cb14fa54e87356c82d88f82ae9574fa4cdd23333e1a98d3e9241d11fbb3d3cf34b52bfa7aac3d625d2bccefeb40fae26970f0e20d0b4751ab","ssdeep":"768:yDdD9DADNDgBDUKD7DnDdAgTQgUUhaWWHncXgLUahdPuOJ+gaULUIIV1ClghUULD:GZQDSVUvWtALyl83uRf","tlshash":"e2a30e91041b5440ab834ce223cebf35fe1f92507141d0b9abfc9b6baddbca6526835c","first_seen":"2026-02-19T22:36:20.76028Z","last_seen":"2026-04-27T21:41:25.368631Z","times_seen":4826,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":1,"connect":11,"send":0,"wait":34,"receive":0,"ssl":258},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.5","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:40.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.5 HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Apr 2026 09:58:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed28-30e0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12512,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-04-27T22:20:49.477385Z","times_seen":164773,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:41.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://plivnote.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Apr 2026 07:54:05 GMT\r\nexpires: Thu, 22 Apr 2027 07:54:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 460476\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-27T22:19:03.866127Z","times_seen":157249,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":117,"dns":5,"connect":21,"send":0,"wait":12,"receive":4,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plivnote.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"plivnote.com","domain":"plivnote.com","tld":"com"},"ip":{"addr":"62.60.226.244","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plivnote.com/","date":"2026-04-27T15:48:42.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plivnote.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 08:41:40 GMT","end":"Wed, 22 Jul 2026 08:41:39 GMT"},"fingerprint":{"sha1":"3A:53:7A:54:82:BB:97:67:2A:20:76:36:43:33:50:3C:39:40:40:1B","sha256":"1C:5F:76:0F:B3:45:E4:DB:80:BD:2D:EE:23:BB:F4:66:22:13:10:BC:89:63:AD:A3:F2:79:BE:7F:A4:96:17:BF"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js HTTP/1.1\r\nHost: plivnote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plivnote.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-04-27%2015%3A48%3A41%7C%7C%7Cep%3Dhttps%3A%2F%2Fplivnote.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-04-27%2015%3A48%3A41%7C%7C%7Cep%3Dhttps%3A%2F%2Fplivnote.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fplivnote.com%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.3\r\nDate: Mon, 27 Apr 2026 15:48:42 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 23 Apr 2026 09:58:02 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69e9ed2a-2121\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8481,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8481), with no line terminators","md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-04-27T22:21:35.405154Z","times_seen":89164,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"plivnote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}