{"report_id":"6ffb4b1b-fdf8-4f9f-8a15-67f3014ca5ed","version":6,"status":"done","tags":[],"date":"2026-02-14T13:19:21Z","url":{"schema":"https","addr":"spirit-of-flowers.com/","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":0,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"spirit-of-flowers.com/","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"title":"spirit-of-flowers","dom":{"size":145245,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (59953)","md5":"56d11c84a242aa7eb896f94fef81f013","sha1":"83d4b5253b99f27e820af6711d19bf18918d9f18","sha256":"4c862da05b4736ce055d51aab67f2b4d80626da19ffdd80b123a43e4acbaacf3","sha512":"00d712e3927f77e1bfeb777e9ca16be7f94423b4fe55d0639cadc472a01dfeca061787ae568a59887142c894232664a84ebf1153010c8d14dd2314db9309eb2c","ssdeep":"1536:gHaPCypDBpfJgDEFBAhFmdl7FXgudVcz3aJjyFIYBIk+ZRkUkkdMQfIj7h2rzUcB:gHaP7tAZatyPBIkORkUk+MwAcWI","tlshash":"e7e30e30f0e000b73e4f4f3c9585e239b6d967515a06abb6b4fca1a84b84af718f655c","dom_hash":"domhashb64b3aae8935d2996e9d71067b6b6a7b","first_seen":"2026-02-12T21:09:52.640456Z","last_seen":"2026-02-14T13:19:23.867562Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"spirit-of-flowers.com/","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":0,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T13:19:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"spirit-of-flowers.com","ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"2026-01-27","domain_rank":0,"first_seen":"2026-02-12T21:09:43.902084Z","last_seen":"2026-02-12T21:09:43.902084Z","alert_count":23,"request_count":23,"received_data":860280,"sent_data":15240,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WooCommerce:10.4.3","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"spirit-of-flowers.com/woocommerce-js-extra","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6d8949f802ed8537df11bcc860b922","sha1":"3690840f45db4dbe98e9224b206e7491f769753d","sha256":"c79a0413feb4fe5b349100aec211047efb05990ede285d306f74985e7aa997bf","sha512":"9343ff5f3a8d23f92455b9639b9509aafe052c1ddaaeb5208af8e508f69b9ba923cf8830c6dd2368d0be21d0b3d0586b6ac973657e1ab734ff17928989b1bc98","ssdeep":"","tlshash":"9bf086d6d5d91e9e71cc78f0d6352d5e20d0a602e150c73a5e3d9ad7d220d41eb5020b","size":608,"data":"","first_seen":"2026-02-12T21:09:52.700377Z","last_seen":"2026-02-14T13:19:23.89641Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/wp/wp-includes/js/jquery/jquery-migrate.js?ver=3.4.1","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2620f2ae61d84e5edef5a0b7b95cf96","sha1":"c79f1fd304b9452d5b5d73d98ac18c79deccf4dd","sha256":"09f417c2e643b736c19e96b99e166681af1002e9b192b84e4e85b0794e764f7f","sha512":"16bb87ac76cafe4c6b07c6d5d2c5ca4da3dacd17f7373e60155b5d57420d68bf9767a7a166d72e8867bc65c264bce7273cd05c273645027920765ecf99ea4d9c","ssdeep":"768:qS34lhQr7XyDx+0K88PLX45FCOrmLEJWFS0iv6X7LhF:qSIl+r7yGPLwFCOrdI1X","tlshash":"92e2b4ece3ad456e84763261ec3ed3efb33d82a522445654b40dc85c631c47a81aef7a","size":31978,"data":"","first_seen":"2023-03-14T16:02:00Z","last_seen":"2026-08-21T20:19:24.062588Z","times_seen":6116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/plugins/woocommerce/assets/js/js-cookie/js.cookie.js?ver=2.1.4-wc.10.4.3","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e1b3c85b6dc84e534baab74f0c63125","sha1":"12ce2f1d4fdd71172116b7fbf3929579c4a776aa","sha256":"6ff07f1a33ee013d687141ef6380caad32b0da6c5230a256ebae58d7c936f508","sha512":"6aa50a2085eb57dc86edafcfa0e69961dc6f441fbb5de1cdecf6c31a3392da199183f06586be2eeeb758c7128760ac9a47ae5403acdac847bd6b3feee1d3b097","ssdeep":"","tlshash":"877110a8b78d29fb0f061008dd2f64c8b67cd536089a45b5ac9ce167156dc2e13f98be","size":3812,"data":"","first_seen":"2024-03-27T15:41:09Z","last_seen":"2026-08-20T14:57:39.312341Z","times_seen":1209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/wc-order-attribution-js-extra","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbd9955c0d08e5ef3443a6bb7da0092a","sha1":"9fd3f9f7e0f11e8d8586d8e1ff683b6b1d8a3e5c","sha256":"9319603405208dbd17167ca68068478c083a2cad16e450283c7c1f2e4f2bfc9d","sha512":"0a68b9e2021720cbeec085be0d2e213debd7ed24eda8905025a8995b006c48a522d450176c71d46e3d3c6feb0389508ad423a735522fae4918f19431b59be515","ssdeep":"","tlshash":"4b317612ee14a839e7c2803550ad5bfd32b713b6f4c0462dd3ad4b5dd26cb81e0c2a0e","size":1533,"data":"","first_seen":"2026-02-12T21:09:52.698064Z","last_seen":"2026-02-14T13:19:23.897146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/plugins/woocommerce/assets/js/frontend/add-to-cart.js?ver=10.4.3","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"01bfdc4ae55c3b9f05f8576266f8340e","sha1":"378aafbf417e65a3f4c550403889e5c44c837c0b","sha256":"0fc09a783746f16c4f6133418bbb4b340750364bf912d43d9a298ce3fbb92ae3","sha512":"f9c02231def19be369cbd4140848c03f0d3f0b63cc7759d47ef4247356a4a064b8d89d8620f9f64a768b27b30033943bd9f076f61a79822f2139598daa8895c9","ssdeep":"192:UrfrvHpS6IMo+daLmyWeCy6QCCntxyaYllstAR96EOeOK:y7pS6V/GWexdKlst8","tlshash":"9e1296caf39d033a87a5386f5c0be6d87a3c1035e141549afc061ad527f99644369e2f","size":9118,"data":"","first_seen":"2025-12-13T12:20:17.743757Z","last_seen":"2026-08-19T15:00:31.017971Z","times_seen":498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/themes/spirit-of-flowers/public/build/assets/app-D-oJRQ_u.js","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"ee793f046235eac36f0e73d9a01213d5","sha1":"e5a9641edd175da21bbe273be6433751b89ca186","sha256":"e415237bc7214a50b044f08500615b9f7a02d92c588e93988224a8f05b8af864","sha512":"e102b71596a51de031989699a00483ae8c77275ae704fad0de3032cf2b092115e459cd537bad5c1bb4ab6973bde8ff87bb5c66adfdbf9996523fef7a7db20608","ssdeep":"","tlshash":"7db092d458c65a00c3233991c03a953b723826a191be88a96a3de3a4993311ae15ccae","size":126,"data":"","first_seen":"2023-04-12T21:12:17Z","last_seen":"2026-08-21T20:50:02.440023Z","times_seen":9655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/themes/spirit-of-flowers/public/build/assets/app-D-oJRQ_u.js","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"6b1c17dc548436ae2687e990df0789ec","sha1":"bbb9ec94e7461656508cc5b47ce6226abbe07e0c","sha256":"98b5972cdbca001314bdd0b16eb56f7b2da616244835aba75f0f61d644076ddf","sha512":"427151297c3c5b27db1adde920b15be4774e61841468a34751821fc547e6ee99ade68cf84ce96062e3239be8797fd6950f8e2977df95e59ef306fdc8918044bd","ssdeep":"","tlshash":"57c08cc488c28d00c2133881e23b943663342620817e94a52738a7908a3b01ad05cc6e","size":153,"data":"","first_seen":"2023-11-01T01:26:42Z","last_seen":"2026-07-22T20:40:29.121382Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"97de90d5acd08158b06295c901727b0b","sha1":"0621bac7c6cb31b5639578df645d6619a11a2c17","sha256":"26fcf2d05f8b01ef4424fa0c5f2c3cc74e343c194bb08bb3fc44d896bced17dc","sha512":"141953db775909151edd0109b494ac4464923d6b9a9c5ccfb552289cf4de6ab95319d30bd83b1ac0797be94b8beaa3721a3c3db09e904719d7167f5a3975d77b","ssdeep":"","tlshash":"d0e020e641d95e1f52d53de8903b3ded70d01403d149cb9a9d9dbe47d714940d70020f","size":354,"data":"","first_seen":"2026-02-12T21:09:52.703961Z","last_seen":"2026-02-14T13:19:23.899102Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/wp/wp-includes/js/jquery/jquery.js?ver=3.7.1","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"16623e9f7cd802cf093c325c511a739c","sha1":"b364dbd40e67076a03e9d7b061c9b2624d081e31","sha256":"1e7f83052e1e3442c4397ced9555033cd1d3f08444d85960683bcf91c8433cdb","sha512":"44b9d0ed3184fe5f19e650798e6fda22b71a6f316415e08c4ec88af3a4211e9fd335d5f9fc44a070f7b478d7060ae3b665c2d2620bbbce2ea6098bd6826b930c","ssdeep":"6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPf2:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAk","tlshash":"8f54a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","size":285334,"data":"","first_seen":"2023-09-10T20:41:57Z","last_seen":"2026-08-21T20:19:24.061645Z","times_seen":10439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.js?ver=2.7.0-wc.10.4.3","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3fffb371a821fb86953ec3ee1f791dfa","sha1":"6168c17d980e4addfd57b125cca773de987aa010","sha256":"9838c0f46531f21668549956aa677872ae479c87759ee4ef209ddd89f6f4e02a","sha512":"8ca534338c43a7efd5934cdbee17de6277e3e76aff67a2ae5c6a9ff6577f6494302c4ee81602b969cb2eac9fd0e38c713a1a9eacf0784873ff58cf253c1572c6","ssdeep":"384:x9zdTv78xcqzwM9AAHPMd2cuiB876JMhef6ywBsw2kBEezSvUt67Ekl:/Vv789sUle2liB8mJh54kMa","tlshash":"e692c89877bf115e5072325aad6e91ceb73c90b685436ce7fca8e47d20cc42e5321e26","size":20060,"data":"","first_seen":"2024-12-02T23:17:42.351054Z","last_seen":"2026-08-20T14:57:39.272354Z","times_seen":1145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/themes/spirit-of-flowers/public/build/assets/app-D-oJRQ_u.js","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d002b59fe6c74acdb643161bac11f1b5","sha1":"893b79aa7d689bd0a4c88907049a5d5e240f847e","sha256":"d1ea2566804993fb386733e0b5afe20681052133f0d983953c6540ccb9c1bd45","sha512":"e11fb08a6e422f8165ee5c7e1666fe1f555b6c0ab98ffe393ad267a3df17987fd53c1278ae6a5470ab2ab0c86fcf99b9e3ac3ee3a0da13f0d2d58208fff2eb24","ssdeep":"768:0+Eq2U5doTCyewAYgE/+vgDS9NZihUTynnJVxBWhKjZkWZYcbju70iwlAV1Y3SvK:0Hq2T1AvFYDiNMjxBGJXwl4dfMVdy3eR","tlshash":"0a23f9f97396b17183ef00b280bb464af3396854620a5464f768e8de383948d51f7f7a","size":46683,"data":"","first_seen":"2026-02-12T21:09:52.687597Z","last_seen":"2026-02-14T13:19:23.876222Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/wp/wp-includes/js/wp-emoji-loader.js","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd723f9e2d688c061ded038f8be1cae8","sha1":"0d937fe72dfdd77dbede8df8342c501b3713bc1d","sha256":"577e9795878387fec8c5bfa58782c7d6e494e6f0123e559377ec7dd0d7476629","sha512":"c34ad1b3d93a0b63e20f36fa74a202ccce944514dd38169b17b96452ae629ece2266b3e06516d9051894ee00a16e8b31e1bf894d828ba693334448c1018b4673","ssdeep":"192:G6v8jQsHR3gUXizgrOERXJUoRCM1JJlxmOegUoEmPV/48kJ/LJiort0r:hvNGisrZRZUsCM1JJTegU4N/4Zwo6","tlshash":"a652a854ea5e363b16a21470b85d5ecbaf6dc43ef3b9d0b1888e02191cdd02585bbfe4","size":14083,"data":"","first_seen":"2026-02-12T21:09:52.705573Z","last_seen":"2026-02-14T13:19:23.899898Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/wp/wp-includes/js/wp-emoji.js?ver=6.9","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b41ac8c1e195c90a191095264d2ba982","sha1":"da0448844572b4853dc276e2b549618142aa5d1d","sha256":"6cec30e87acdc37043fee00812d25fbfb764180e2e1b1147f6a37b238df8ec4d","sha512":"d3610a9e6817ce56e8dcfcb3025289958f329d8ad32fc9b7582c96f56d66ee783c2131f040644b3774c8ae212b0c97e55360d3ec93ac0266b48b1c5bf7ece086","ssdeep":"96:Pu4LWjoWlw0ED2v4U2Zdg+sPCi3FNr8dKKSRUMZH4dspm0ujpIvr0uSuQf5Wvzd+:Pj0Ac+m3FR3KSVYdsEh9GJ3vzdoIA","tlshash":"6f0283c8f38e232b5d2321147e4e23d86abc49397054dd77bd9ef511732442a877aaa4","size":8792,"data":"","first_seen":"2025-12-03T13:38:32.871622Z","last_seen":"2026-08-21T20:23:50.010721Z","times_seen":1773,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/wp/wp-includes/js/twemoji.js?ver=6.9","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"439c2678d36fcdcb5198427ead4c0b03","sha1":"232d225fd6bd269b0238b581bd3cb0d3159d45bf","sha256":"f723dee252d13361a09c3273e8c633a0c8b57454c1f6e2ed8fb237ee0e547369","sha512":"1e371cab981d7d58a0fa63fcf82b9e6bddf008893d9f16c5ac5c3357b2f3536d6b95db7b82f1e829599c39e4f2005f21c31f0e014210a74f2253acc652560c08","ssdeep":"384:Sy3iCACYe9gkFL3pRZTbXU/3j//bEPhXgA5L5GsoGsQkAL3Wx0yzbJFz:2CACYOpD9XU/3j//YpXgAXGdnsmFDz","tlshash":"4cf27f4b63aa4e9b342e37e3ce964f8dd59951072690f078faefb3902f5056642b0dd0","size":37190,"data":"","first_seen":"2025-12-03T13:38:32.912271Z","last_seen":"2026-08-17T17:22:06.538718Z","times_seen":1554,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/plugins/woocommerce/assets/js/frontend/woocommerce.js?ver=10.4.3","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb3e8f773654b53c0fb55cdda6d7de2e","sha1":"9205d3ba52bc8c7b23aa1caa6929995a93c7b9b4","sha256":"9ae5cf8876a0adcf58a0ad8d1b5ef1a6df7d14d21ab807ca49e2429aecc02bf7","sha512":"adaa074925820054902e3f48874de58753d50c709cbed38c8961fc08674618f65313de9ab4dcda4f047a1c167cbdd9ae1b864d06641acce73be6cc5eefd2c819","ssdeep":"192:tIWF4upebeY9ZpjCPdj4Q1guke49FOXMPTtP7/eieFL+3rMVy1on:tIWuupebeY9ZpjCPN4Q1guke49FOXMPc","tlshash":"d4f1631fe7bc276341be30ae6e6ee4c4343e0031a401051aad5e8e5c355a8aa5737f6d","size":7579,"data":"","first_seen":"2025-12-13T12:20:17.702048Z","last_seen":"2026-08-20T14:57:39.309543Z","times_seen":459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/themes/spirit-of-flowers/public/build/assets/app-D-oJRQ_u.js","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"ef089f58bda76fcc33654f10ea60480c","sha1":"9648039b975f75419e8abd664b422999ef2d6906","sha256":"32ca86163b511e050a5eea26a81f2495b0606c3da2707dea45d00b0e62f73aeb","sha512":"eed602abfa0cac3f6b27059710354ef4eacd4100abd70ad619fdb95f253e34ceb5d8981f06a2e4177f5ba949fec322d92caa21f5f292c0dc5297e35092809d51","ssdeep":"","tlshash":"42c02bc488c20900c3073590c039803731341260c07d44aa173ce3909833026e00ccdd","size":139,"data":"","first_seen":"2023-04-13T23:00:32Z","last_seen":"2026-08-21T20:46:59.929372Z","times_seen":8020,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/wc-add-to-cart-js-extra","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"037f04d2981db351005720ec71bc6a9b","sha1":"598f8a4c67e2bd38730adc7ed2819effd36e5b33","sha256":"30eba5d767cbce5ed790337139669ca83324ac48699b1026ef2af2e2ab67e850","sha512":"9d39dae3d6120a28e7e6a43487ed4a6785d59b0e907cb477b02b27be99fb8b0994cbd91a6d8361fe21f1e6bd5cfcd3305ddb80578c40a77ef16ac320499f5f6e","ssdeep":"","tlshash":"2bf0d8e6c1d95a1b52957df8943a39ad70d01402d149cb9a9d9dba47d714940d60020f","size":606,"data":"","first_seen":"2026-02-12T21:09:52.696523Z","last_seen":"2026-02-14T13:19:23.901198Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/plugins/woocommerce/assets/js/frontend/order-attribution.js?ver=10.4.3","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0b8d654bc88d8cd97f293855f69e5ef","sha1":"80f94dbe462c24a05b38d67342e6e48c7e03ab45","sha256":"6a5142982b16bb4724432e34af492b4b242d4e29dfdcd3aa80e2529486b9e54c","sha512":"8d35beeefd9ce47bb526217a782fcfe0aefc82f52c46f401d6cccaa71499a0095493e32e3578bd5fff204271fa0355744900135ae857b669a06f7a2c1db4b28f","ssdeep":"192:RSU8WUsUSnCtpZ/ite07NItxr1Odsbt2an:RRUsEDKteE+Wdsbwan","tlshash":"78d1b8abfb6e111146b120e8ce5d61d573ac4439bb408cfef546987a202cc3f417ad2b","size":6721,"data":"","first_seen":"2025-06-22T03:49:17.528951Z","last_seen":"2026-08-15T19:02:35.752592Z","times_seen":522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.js?ver=10.4.3","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1c6dba470210e8583e6b9a2cffdb35d","sha1":"da2b64822e77c73f822c05f6bf5ee33988b580f7","sha256":"a53ba6aff0f509d0b14e8f18068646bd25d80130f66b3dcd9b503d7b128490be","sha512":"d5ceace519750b0fdea6aa1a118d8ff19b23256fa05bce629baf880da5c3322d9ef8466ec56f3665c3e0bf0e5041353bf025b6e966b34f135699d2f54e3ecbb6","ssdeep":"384:1WH89VDpxyY3uBrWia2yiKBzHK0UoFt45DyWEbFSPvAvYraoQCu7ocoAd:0c+kuBrWxzHKLVmb+vAviLEaAd","tlshash":"a6d2421c69b31028556370b8aa9fd4087325e0133999ec197e6c5264bf9ee7d80f1ff9","size":30315,"data":"","first_seen":"2024-07-20T12:41:44Z","last_seen":"2026-08-20T14:57:39.241478Z","times_seen":1174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.js?ver=2.7.0-wc.10.4.3","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spirit-of-flowers.com/","date":"2026-02-14T13:18:59.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spirit-of-flowers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:49:41 GMT","end":"Tue, 28 Apr 2026 13:49:40 GMT"},"fingerprint":{"sha1":"78:91:72:EC:8E:28:DB:97:BD:2F:58:B1:C5:8A:07:7F:19:6F:51:33","sha256":"C4:95:09:A6:1E:0E:B8:1E:2D:20:82:EA:35:2D:59:EE:EA:F9:CA:BA:1F:31:7C:93:5D:C5:96:49:91:93:6F:17"}}},"request":{"raw":"GET /app/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.js?ver=2.7.0-wc.10.4.3 HTTP/1.1\r\nHost: spirit-of-flowers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spirit-of-flowers.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.28.1\r\ndate: Sat, 14 Feb 2026 13:18:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 21 Jan 2026 12:08:24 GMT\r\netag: W/\"6970c1b8-4e5c\"\r\nexpires: Mon, 16 Mar 2026 13:18:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20060,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"3fffb371a821fb86953ec3ee1f791dfa","sha1":"6168c17d980e4addfd57b125cca773de987aa010","sha256":"9838c0f46531f21668549956aa677872ae479c87759ee4ef209ddd89f6f4e02a","sha512":"8ca534338c43a7efd5934cdbee17de6277e3e76aff67a2ae5c6a9ff6577f6494302c4ee81602b969cb2eac9fd0e38c713a1a9eacf0784873ff58cf253c1572c6","ssdeep":"384:x9zdTv78xcqzwM9AAHPMd2cuiB876JMhef6ywBsw2kBEezSvUt67Ekl:/Vv789sUle2liB8mJh54kMa","tlshash":"e692c89877bf115e5072325aad6e91ceb73c90b685436ce7fca8e47d20cc42e5321e26","first_seen":"2024-12-02T23:17:42.351054Z","last_seen":"2026-08-20T14:57:39.272354Z","times_seen":1145,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/uploads/2026/01/img_8-70-300x300.jpg","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://spirit-of-flowers.com/","date":"2026-02-14T13:18:59.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spirit-of-flowers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:49:41 GMT","end":"Tue, 28 Apr 2026 13:49:40 GMT"},"fingerprint":{"sha1":"78:91:72:EC:8E:28:DB:97:BD:2F:58:B1:C5:8A:07:7F:19:6F:51:33","sha256":"C4:95:09:A6:1E:0E:B8:1E:2D:20:82:EA:35:2D:59:EE:EA:F9:CA:BA:1F:31:7C:93:5D:C5:96:49:91:93:6F:17"}}},"request":{"raw":"GET /app/uploads/2026/01/img_8-70-300x300.jpg HTTP/1.1\r\nHost: spirit-of-flowers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spirit-of-flowers.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.28.1\r\ndate: Sat, 14 Feb 2026 13:18:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 28 Jan 2026 16:08:19 GMT\r\netag: W/\"697a3473-68be\"\r\nexpires: Mon, 16 Mar 2026 13:18:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26814,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"d3231743d544bf3752ee392cdc4f6956","sha1":"c434e8ed8f7786e53200ef47f178f0346ad4ccee","sha256":"c710573e62ac9d8b5989d15c9394baf1baada59775037cec34f1fcef70ae88d0","sha512":"29fa0fd71bc7e74b936a761697b3568805ea489c5fabda2a75157649e01787f947c2f291c0629b995efa9f57f1eae603d15e8eed749102af856ccd236cd034e8","ssdeep":"768:PW6c4ygZSNAtU+DXs9jyKWG8VmlMW5wr1XEu29m7C:PWfZAt7Xs9WLVmtap0u2UC","tlshash":"b8c2f17d68981a30f9b4bc222d6e1a43d9050d54fefcb0a7ea71d42049338df19e7968","first_seen":"2026-02-12T21:09:52.662071Z","last_seen":"2026-02-14T13:19:23.869801Z","times_seen":2,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/wp/wp-includes/js/wp-emoji.js?ver=6.9","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spirit-of-flowers.com/","date":"2026-02-14T13:18:59.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spirit-of-flowers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:49:41 GMT","end":"Tue, 28 Apr 2026 13:49:40 GMT"},"fingerprint":{"sha1":"78:91:72:EC:8E:28:DB:97:BD:2F:58:B1:C5:8A:07:7F:19:6F:51:33","sha256":"C4:95:09:A6:1E:0E:B8:1E:2D:20:82:EA:35:2D:59:EE:EA:F9:CA:BA:1F:31:7C:93:5D:C5:96:49:91:93:6F:17"}}},"request":{"raw":"GET /wp/wp-includes/js/wp-emoji.js?ver=6.9 HTTP/1.1\r\nHost: spirit-of-flowers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spirit-of-flowers.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-02-14%2013%3A18%3A59%7C%7C%7Cep%3Dhttps%3A%2F%2Fspirit-of-flowers.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-02-14%2013%3A18%3A59%7C%7C%7Cep%3Dhttps%3A%2F%2Fspirit-of-flowers.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fspirit-of-flowers.com%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.28.1\r\ndate: Sat, 14 Feb 2026 13:18:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 06 Oct 2025 04:51:34 GMT\r\netag: W/\"68e34ad6-2258\"\r\nexpires: Mon, 16 Mar 2026 13:18:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8792,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (786)","md5":"b41ac8c1e195c90a191095264d2ba982","sha1":"da0448844572b4853dc276e2b549618142aa5d1d","sha256":"6cec30e87acdc37043fee00812d25fbfb764180e2e1b1147f6a37b238df8ec4d","sha512":"d3610a9e6817ce56e8dcfcb3025289958f329d8ad32fc9b7582c96f56d66ee783c2131f040644b3774c8ae212b0c97e55360d3ec93ac0266b48b1c5bf7ece086","ssdeep":"96:Pu4LWjoWlw0ED2v4U2Zdg+sPCi3FNr8dKKSRUMZH4dspm0ujpIvr0uSuQf5Wvzd+:Pj0Ac+m3FR3KSVYdsEh9GJ3vzdoIA","tlshash":"6f0283c8f38e232b5d2321147e4e23d86abc49397054dd77bd9ef511732442a877aaa4","first_seen":"2025-12-03T13:38:32.871622Z","last_seen":"2026-08-21T20:23:50.010721Z","times_seen":1773,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/uploads/2026/01/img_3-432-300x300.jpg","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://spirit-of-flowers.com/","date":"2026-02-14T13:18:59.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spirit-of-flowers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:49:41 GMT","end":"Tue, 28 Apr 2026 13:49:40 GMT"},"fingerprint":{"sha1":"78:91:72:EC:8E:28:DB:97:BD:2F:58:B1:C5:8A:07:7F:19:6F:51:33","sha256":"C4:95:09:A6:1E:0E:B8:1E:2D:20:82:EA:35:2D:59:EE:EA:F9:CA:BA:1F:31:7C:93:5D:C5:96:49:91:93:6F:17"}}},"request":{"raw":"GET /app/uploads/2026/01/img_3-432-300x300.jpg HTTP/1.1\r\nHost: spirit-of-flowers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spirit-of-flowers.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.28.1\r\ndate: Sat, 14 Feb 2026 13:18:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 28 Jan 2026 16:14:46 GMT\r\netag: W/\"697a35f6-39b6\"\r\nexpires: Mon, 16 Mar 2026 13:18:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14774,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"0f3de9945fdbdfc8dec1dcc2c21c7564","sha1":"b3437926c61dd3c8b0a784572922f6371b5a0c30","sha256":"71f6999b1873a996b8c6c058864aec36467ee749a14f0569f87c0705d52b4189","sha512":"5179ada8ad203e9c0bd799bb995921b2ac18603617ca1322104d6192f2367471e0ac90c386abd12143aba0f1981114af3e845979c93737a2244594a7f7583959","ssdeep":"384:PBe/1+COMCA2x+r5WqiR5y/gmqscy0ZbUuElc:PY+CO40Kswvcy0RUo","tlshash":"c262b064850452e024181f245dab414d6fd2d9ce3eda272c9c73a2639d4fbfc68ad6bc","first_seen":"2026-02-12T21:09:52.647396Z","last_seen":"2026-02-14T13:19:23.872116Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/plugins/woocommerce/assets/js/frontend/add-to-cart.js?ver=10.4.3","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spirit-of-flowers.com/","date":"2026-02-14T13:18:59.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spirit-of-flowers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:49:41 GMT","end":"Tue, 28 Apr 2026 13:49:40 GMT"},"fingerprint":{"sha1":"78:91:72:EC:8E:28:DB:97:BD:2F:58:B1:C5:8A:07:7F:19:6F:51:33","sha256":"C4:95:09:A6:1E:0E:B8:1E:2D:20:82:EA:35:2D:59:EE:EA:F9:CA:BA:1F:31:7C:93:5D:C5:96:49:91:93:6F:17"}}},"request":{"raw":"GET /app/plugins/woocommerce/assets/js/frontend/add-to-cart.js?ver=10.4.3 HTTP/1.1\r\nHost: spirit-of-flowers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spirit-of-flowers.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.28.1\r\ndate: Sat, 14 Feb 2026 13:18:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 21 Jan 2026 12:08:24 GMT\r\netag: W/\"6970c1b8-239e\"\r\nexpires: Mon, 16 Mar 2026 13:18:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9118,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"01bfdc4ae55c3b9f05f8576266f8340e","sha1":"378aafbf417e65a3f4c550403889e5c44c837c0b","sha256":"0fc09a783746f16c4f6133418bbb4b340750364bf912d43d9a298ce3fbb92ae3","sha512":"f9c02231def19be369cbd4140848c03f0d3f0b63cc7759d47ef4247356a4a064b8d89d8620f9f64a768b27b30033943bd9f076f61a79822f2139598daa8895c9","ssdeep":"192:UrfrvHpS6IMo+daLmyWeCy6QCCntxyaYllstAR96EOeOK:y7pS6V/GWexdKlst8","tlshash":"9e1296caf39d033a87a5386f5c0be6d87a3c1035e141549afc061ad527f99644369e2f","first_seen":"2025-12-13T12:20:17.743757Z","last_seen":"2026-08-19T15:00:31.017971Z","times_seen":498,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/plugins/woocommerce/assets/js/frontend/woocommerce.js?ver=10.4.3","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spirit-of-flowers.com/","date":"2026-02-14T13:18:59.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spirit-of-flowers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:49:41 GMT","end":"Tue, 28 Apr 2026 13:49:40 GMT"},"fingerprint":{"sha1":"78:91:72:EC:8E:28:DB:97:BD:2F:58:B1:C5:8A:07:7F:19:6F:51:33","sha256":"C4:95:09:A6:1E:0E:B8:1E:2D:20:82:EA:35:2D:59:EE:EA:F9:CA:BA:1F:31:7C:93:5D:C5:96:49:91:93:6F:17"}}},"request":{"raw":"GET /app/plugins/woocommerce/assets/js/frontend/woocommerce.js?ver=10.4.3 HTTP/1.1\r\nHost: spirit-of-flowers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spirit-of-flowers.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.28.1\r\ndate: Sat, 14 Feb 2026 13:18:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 21 Jan 2026 12:08:24 GMT\r\netag: W/\"6970c1b8-1d9b\"\r\nexpires: Mon, 16 Mar 2026 13:18:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7579,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"cb3e8f773654b53c0fb55cdda6d7de2e","sha1":"9205d3ba52bc8c7b23aa1caa6929995a93c7b9b4","sha256":"9ae5cf8876a0adcf58a0ad8d1b5ef1a6df7d14d21ab807ca49e2429aecc02bf7","sha512":"adaa074925820054902e3f48874de58753d50c709cbed38c8961fc08674618f65313de9ab4dcda4f047a1c167cbdd9ae1b864d06641acce73be6cc5eefd2c819","ssdeep":"192:tIWF4upebeY9ZpjCPdj4Q1guke49FOXMPTtP7/eieFL+3rMVy1on:tIWuupebeY9ZpjCPN4Q1guke49FOXMPc","tlshash":"d4f1631fe7bc276341be30ae6e6ee4c4343e0031a401051aad5e8e5c355a8aa5737f6d","first_seen":"2025-12-13T12:20:17.702048Z","last_seen":"2026-08-20T14:57:39.309543Z","times_seen":459,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/themes/spirit-of-flowers/public/build/assets/app-D-oJRQ_u.js","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spirit-of-flowers.com/","date":"2026-02-14T13:18:59.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spirit-of-flowers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:49:41 GMT","end":"Tue, 28 Apr 2026 13:49:40 GMT"},"fingerprint":{"sha1":"78:91:72:EC:8E:28:DB:97:BD:2F:58:B1:C5:8A:07:7F:19:6F:51:33","sha256":"C4:95:09:A6:1E:0E:B8:1E:2D:20:82:EA:35:2D:59:EE:EA:F9:CA:BA:1F:31:7C:93:5D:C5:96:49:91:93:6F:17"}}},"request":{"raw":"GET /app/themes/spirit-of-flowers/public/build/assets/app-D-oJRQ_u.js HTTP/1.1\r\nHost: spirit-of-flowers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spirit-of-flowers.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.28.1\r\ndate: Sat, 14 Feb 2026 13:18:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 23 Jan 2026 16:48:16 GMT\r\netag: W/\"6973a650-b65b\"\r\nexpires: Mon, 16 Mar 2026 13:18:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46683,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (41462)","md5":"d002b59fe6c74acdb643161bac11f1b5","sha1":"893b79aa7d689bd0a4c88907049a5d5e240f847e","sha256":"d1ea2566804993fb386733e0b5afe20681052133f0d983953c6540ccb9c1bd45","sha512":"e11fb08a6e422f8165ee5c7e1666fe1f555b6c0ab98ffe393ad267a3df17987fd53c1278ae6a5470ab2ab0c86fcf99b9e3ac3ee3a0da13f0d2d58208fff2eb24","ssdeep":"768:0+Eq2U5doTCyewAYgE/+vgDS9NZihUTynnJVxBWhKjZkWZYcbju70iwlAV1Y3SvK:0Hq2T1AvFYDiNMjxBGJXwl4dfMVdy3eR","tlshash":"0a23f9f97396b17183ef00b280bb464af3396854620a5464f768e8de383948d51f7f7a","first_seen":"2026-02-12T21:09:52.687597Z","last_seen":"2026-02-14T13:19:23.876222Z","times_seen":2,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/uploads/2026/01/img_1-532-300x300.jpg","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://spirit-of-flowers.com/","date":"2026-02-14T13:18:59.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spirit-of-flowers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:49:41 GMT","end":"Tue, 28 Apr 2026 13:49:40 GMT"},"fingerprint":{"sha1":"78:91:72:EC:8E:28:DB:97:BD:2F:58:B1:C5:8A:07:7F:19:6F:51:33","sha256":"C4:95:09:A6:1E:0E:B8:1E:2D:20:82:EA:35:2D:59:EE:EA:F9:CA:BA:1F:31:7C:93:5D:C5:96:49:91:93:6F:17"}}},"request":{"raw":"GET /app/uploads/2026/01/img_1-532-300x300.jpg HTTP/1.1\r\nHost: spirit-of-flowers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spirit-of-flowers.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.28.1\r\ndate: Sat, 14 Feb 2026 13:18:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 28 Jan 2026 16:14:37 GMT\r\netag: W/\"697a35ed-5a5f\"\r\nexpires: Mon, 16 Mar 2026 13:18:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23135,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"145a7def54da031a1b48c0a663c2c4d7","sha1":"a8f011014713f93f1baad20946241a51a3333ece","sha256":"0373cfb9f3390c93c52252f28a12a2aa53420f348053dd56afa32538c4650eaf","sha512":"43ae25c1654e9711d2d3c6ce046cc453adfa6625dd6e4944eccb0d6a0d71fef41ad30b7782b98f5ec33421dce211d3cc8b5dee39e91e05e9515cc281b5d9aaec","ssdeep":"384:PAvqu2HLQZHZNikAIwgy/Mvzy8HcFR0MSaA12DWWhMCiNKcBS2dr3+7KdYe:PVuZHZNs//MvmLL0MSaA1lPdKc9vYe","tlshash":"30a2e17bb180e5bbcc207f771e88ac9de1801f827e959ec5a6778c514589ce1f417189","first_seen":"2026-02-12T21:09:52.677606Z","last_seen":"2026-02-14T13:19:23.877356Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/uploads/2026/01/img_2-363-300x300.jpg","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://spirit-of-flowers.com/","date":"2026-02-14T13:18:59.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spirit-of-flowers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:49:41 GMT","end":"Tue, 28 Apr 2026 13:49:40 GMT"},"fingerprint":{"sha1":"78:91:72:EC:8E:28:DB:97:BD:2F:58:B1:C5:8A:07:7F:19:6F:51:33","sha256":"C4:95:09:A6:1E:0E:B8:1E:2D:20:82:EA:35:2D:59:EE:EA:F9:CA:BA:1F:31:7C:93:5D:C5:96:49:91:93:6F:17"}}},"request":{"raw":"GET /app/uploads/2026/01/img_2-363-300x300.jpg HTTP/1.1\r\nHost: spirit-of-flowers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spirit-of-flowers.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.28.1\r\ndate: Sat, 14 Feb 2026 13:18:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 28 Jan 2026 16:08:16 GMT\r\netag: W/\"697a3470-543e\"\r\nexpires: Mon, 16 Mar 2026 13:18:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21566,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"b7e3fb40ed59b0e245ff63460656c05b","sha1":"4f9b75cbceb434b0a2d57c3766aab4fb771ce6d0","sha256":"8741698f95f7e00f5765b47e5c83f61279998483263004b8d64a62a234e514d5","sha512":"f3bf9b0e3e5bb91257926ea49849375ddb2ef09b484c6c640973fd8f987c577f1ddd90d4f1aa3f65fe1c3cbfe41ef4882672fa6c5062d24d4aab7e11aaeb7896","ssdeep":"384:PfF3L8Ol84fclP6X6ndByZMxfbg/9dldaBtHqGu4JYT7Qm+0B5y9V7gptEOhV:Pt3L8OlJfaP66d1KPldaTPuuYsmIV7gv","tlshash":"27a2d0026ff14fa44cbdac704a85904226cc8fa4f6c60c25c672978f5fd89e5c381ed5","first_seen":"2026-02-12T21:09:52.679913Z","last_seen":"2026-02-14T13:19:23.878405Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/wp/wp-includes/js/twemoji.js?ver=6.9","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spirit-of-flowers.com/","date":"2026-02-14T13:18:59.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spirit-of-flowers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:49:41 GMT","end":"Tue, 28 Apr 2026 13:49:40 GMT"},"fingerprint":{"sha1":"78:91:72:EC:8E:28:DB:97:BD:2F:58:B1:C5:8A:07:7F:19:6F:51:33","sha256":"C4:95:09:A6:1E:0E:B8:1E:2D:20:82:EA:35:2D:59:EE:EA:F9:CA:BA:1F:31:7C:93:5D:C5:96:49:91:93:6F:17"}}},"request":{"raw":"GET /wp/wp-includes/js/twemoji.js?ver=6.9 HTTP/1.1\r\nHost: spirit-of-flowers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spirit-of-flowers.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-02-14%2013%3A18%3A59%7C%7C%7Cep%3Dhttps%3A%2F%2Fspirit-of-flowers.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-02-14%2013%3A18%3A59%7C%7C%7Cep%3Dhttps%3A%2F%2Fspirit-of-flowers.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fspirit-of-flowers.com%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.28.1\r\ndate: Sat, 14 Feb 2026 13:18:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 10 Nov 2025 21:06:34 GMT\r\netag: W/\"691253da-9146\"\r\nexpires: Mon, 16 Mar 2026 13:18:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37190,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17064)","md5":"439c2678d36fcdcb5198427ead4c0b03","sha1":"232d225fd6bd269b0238b581bd3cb0d3159d45bf","sha256":"f723dee252d13361a09c3273e8c633a0c8b57454c1f6e2ed8fb237ee0e547369","sha512":"1e371cab981d7d58a0fa63fcf82b9e6bddf008893d9f16c5ac5c3357b2f3536d6b95db7b82f1e829599c39e4f2005f21c31f0e014210a74f2253acc652560c08","ssdeep":"384:Sy3iCACYe9gkFL3pRZTbXU/3j//bEPhXgA5L5GsoGsQkAL3Wx0yzbJFz:2CACYOpD9XU/3j//YpXgAXGdnsmFDz","tlshash":"4cf27f4b63aa4e9b342e37e3ce964f8dd59951072690f078faefb3902f5056642b0dd0","first_seen":"2025-12-03T13:38:32.912271Z","last_seen":"2026-08-17T17:22:06.538718Z","times_seen":1554,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/wp/wp-includes/js/jquery/jquery-migrate.js?ver=3.4.1","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spirit-of-flowers.com/","date":"2026-02-14T13:18:59.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spirit-of-flowers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:49:41 GMT","end":"Tue, 28 Apr 2026 13:49:40 GMT"},"fingerprint":{"sha1":"78:91:72:EC:8E:28:DB:97:BD:2F:58:B1:C5:8A:07:7F:19:6F:51:33","sha256":"C4:95:09:A6:1E:0E:B8:1E:2D:20:82:EA:35:2D:59:EE:EA:F9:CA:BA:1F:31:7C:93:5D:C5:96:49:91:93:6F:17"}}},"request":{"raw":"GET /wp/wp-includes/js/jquery/jquery-migrate.js?ver=3.4.1 HTTP/1.1\r\nHost: spirit-of-flowers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spirit-of-flowers.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.28.1\r\ndate: Sat, 14 Feb 2026 13:18:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\netag: W/\"6482bd64-7cea\"\r\nexpires: Mon, 16 Mar 2026 13:18:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31978,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"e2620f2ae61d84e5edef5a0b7b95cf96","sha1":"c79f1fd304b9452d5b5d73d98ac18c79deccf4dd","sha256":"09f417c2e643b736c19e96b99e166681af1002e9b192b84e4e85b0794e764f7f","sha512":"16bb87ac76cafe4c6b07c6d5d2c5ca4da3dacd17f7373e60155b5d57420d68bf9767a7a166d72e8867bc65c264bce7273cd05c273645027920765ecf99ea4d9c","ssdeep":"768:qS34lhQr7XyDx+0K88PLX45FCOrmLEJWFS0iv6X7LhF:qSIl+r7yGPLwFCOrdI1X","tlshash":"92e2b4ece3ad456e84763261ec3ed3efb33d82a522445654b40dc85c631c47a81aef7a","first_seen":"2023-03-14T16:02:00Z","last_seen":"2026-08-21T20:19:24.062588Z","times_seen":6116,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/themes/spirit-of-flowers/public/build/assets/app-BvP-Q3ul.css","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spirit-of-flowers.com/","date":"2026-02-14T13:18:59.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spirit-of-flowers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:49:41 GMT","end":"Tue, 28 Apr 2026 13:49:40 GMT"},"fingerprint":{"sha1":"78:91:72:EC:8E:28:DB:97:BD:2F:58:B1:C5:8A:07:7F:19:6F:51:33","sha256":"C4:95:09:A6:1E:0E:B8:1E:2D:20:82:EA:35:2D:59:EE:EA:F9:CA:BA:1F:31:7C:93:5D:C5:96:49:91:93:6F:17"}}},"request":{"raw":"GET /app/themes/spirit-of-flowers/public/build/assets/app-BvP-Q3ul.css HTTP/1.1\r\nHost: spirit-of-flowers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spirit-of-flowers.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.28.1\r\ndate: Sat, 14 Feb 2026 13:18:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Jan 2026 16:48:16 GMT\r\netag: W/\"6973a650-bf0f\"\r\nexpires: Mon, 16 Mar 2026 13:18:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48911,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (48910)","md5":"2ee09b23bb52cca048c2c4e4dd3fd729","sha1":"85fd9f98488600b0d13fea79b6b9eb9a9e70c991","sha256":"088608b046fddae1829548b0bef806c70990502019a15068c1d1d2ea745ff3f4","sha512":"05733537e257856c3003ca3207342f30ff8e6ef90a55d76f6677ba6e80cfa453d994944bf222d07165f9dd13071b7e6b3ea816256d616f59ff175469fa8631c7","ssdeep":"384:qkrxiJo0WAis7/VdFL6t3BWPHloyYTWSgNWSgihutanTsgL7PJPGSNjS91KdWSpU:3iFWFA/VVOGianTsgHHjU1xWzBm","tlshash":"6f2372b0f332d47fae2355bea79cf42ca12a64819d2157eaff02d10265d67f21ca1724","first_seen":"2026-02-12T21:09:52.643035Z","last_seen":"2026-02-14T13:19:23.880961Z","times_seen":2,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/uploads/2026/01/img_3-429-300x300.jpg","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://spirit-of-flowers.com/","date":"2026-02-14T13:18:59.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spirit-of-flowers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:49:41 GMT","end":"Tue, 28 Apr 2026 13:49:40 GMT"},"fingerprint":{"sha1":"78:91:72:EC:8E:28:DB:97:BD:2F:58:B1:C5:8A:07:7F:19:6F:51:33","sha256":"C4:95:09:A6:1E:0E:B8:1E:2D:20:82:EA:35:2D:59:EE:EA:F9:CA:BA:1F:31:7C:93:5D:C5:96:49:91:93:6F:17"}}},"request":{"raw":"GET /app/uploads/2026/01/img_3-429-300x300.jpg HTTP/1.1\r\nHost: spirit-of-flowers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spirit-of-flowers.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.28.1\r\ndate: Sat, 14 Feb 2026 13:18:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 28 Jan 2026 16:14:38 GMT\r\netag: W/\"697a35ee-4b89\"\r\nexpires: Mon, 16 Mar 2026 13:18:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19337,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"1909f614e5965c0d18cd209df8b215c5","sha1":"85df79a7c56f1c56426e085e0201f3e4bf659c3d","sha256":"17124c0f0ef41087a24645472b2b7d5e23a157cdc26163d3ef0e594e49cc5157","sha512":"1bc897e5c4062d364b1841433272621bc5b457bcdd3adb52b83bf05506adad575d39cdd103a746999c8812cab2596bec5445c74ae1aec3c3da339e351d36fd51","ssdeep":"384:Pf/o4fnjNOIlxm/KKJmhCMVmutntedqGmrHtLvoK/+8ECow0AV/b1d6g/kAo2JMD:Pf9nJOKiBJmhJVmoswR/+8ECKAV/b1dQ","tlshash":"5692d076ce23d1e75ef72e284686f2a485cc7ec06eaf67445b35d195ce101c6d415cd0","first_seen":"2026-02-12T21:09:52.692638Z","last_seen":"2026-02-14T13:19:23.885793Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/uploads/2026/01/cropped-fav-192x192.jpg","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spirit-of-flowers.com/","date":"2026-02-14T13:18:59.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spirit-of-flowers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:49:41 GMT","end":"Tue, 28 Apr 2026 13:49:40 GMT"},"fingerprint":{"sha1":"78:91:72:EC:8E:28:DB:97:BD:2F:58:B1:C5:8A:07:7F:19:6F:51:33","sha256":"C4:95:09:A6:1E:0E:B8:1E:2D:20:82:EA:35:2D:59:EE:EA:F9:CA:BA:1F:31:7C:93:5D:C5:96:49:91:93:6F:17"}}},"request":{"raw":"GET /app/uploads/2026/01/cropped-fav-192x192.jpg HTTP/1.1\r\nHost: spirit-of-flowers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spirit-of-flowers.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-02-14%2013%3A18%3A59%7C%7C%7Cep%3Dhttps%3A%2F%2Fspirit-of-flowers.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-02-14%2013%3A18%3A59%7C%7C%7Cep%3Dhttps%3A%2F%2Fspirit-of-flowers.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fspirit-of-flowers.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.28.1\r\ndate: Sat, 14 Feb 2026 13:18:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 28 Jan 2026 16:16:47 GMT\r\netag: W/\"697a366f-1434\"\r\nexpires: Mon, 16 Mar 2026 13:18:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5172,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 192x192, components 3","md5":"4e629b3c7343b88632e636cffc227dbb","sha1":"b455b32add8136d977a7cc38697f4359e75ddef4","sha256":"495d68c0e22cddac6a9a524ff913746404d4304bb9faa2ae2bdf02230b9e3b53","sha512":"821566f644cf078048a3d863b710d5fbe944fcc994e9bee53c0bdb7775551b92a1945cb4732dbcd5adc4adef078232cf83c1cc51b2ff43c7a35ee043d6558f2a","ssdeep":"96:3PE7cv+qPtfT5UyqJdD90vOY4hP0+mymBClGCZA1eGiUhqosqvNtg7Cv0yV:3P3AvhPHmNClGfYTOqj/C9V","tlshash":"6cb16b871609814b84275e07bd8abc8db248da0dfcc5537e9031cee3a8332c2ad58c5f","first_seen":"2026-02-12T21:09:52.657705Z","last_seen":"2026-02-14T13:19:23.887076Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/uploads/2026/01/img_1-535-300x300.jpg","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://spirit-of-flowers.com/","date":"2026-02-14T13:18:59.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spirit-of-flowers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:49:41 GMT","end":"Tue, 28 Apr 2026 13:49:40 GMT"},"fingerprint":{"sha1":"78:91:72:EC:8E:28:DB:97:BD:2F:58:B1:C5:8A:07:7F:19:6F:51:33","sha256":"C4:95:09:A6:1E:0E:B8:1E:2D:20:82:EA:35:2D:59:EE:EA:F9:CA:BA:1F:31:7C:93:5D:C5:96:49:91:93:6F:17"}}},"request":{"raw":"GET /app/uploads/2026/01/img_1-535-300x300.jpg HTTP/1.1\r\nHost: spirit-of-flowers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spirit-of-flowers.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.28.1\r\ndate: Sat, 14 Feb 2026 13:18:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 28 Jan 2026 16:14:48 GMT\r\netag: W/\"697a35f8-68f5\"\r\nexpires: Mon, 16 Mar 2026 13:18:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26869,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"83a0a2a703e06816570caee4651b9427","sha1":"b17705eb8c59ef51601d3beb2d0fe86acb2f74ee","sha256":"0a374f758ffde88d31d8235ad5ef726c6a9cbd8dade6db1360f615a3178cfab6","sha512":"fb1724ff0193b1f2ada209a8a57baeaa5eb37d94ff5dd209d75bd12f762aa53fbc163ed512884bc6ab51e05a7e6502f3960ea42c126c67397ce3a4b8456cf199","ssdeep":"768:PKv0Sck28sct1yIK/bzliFmJuHrS11z5qAQX7:PsTck2Xcny9/bzlarq19wr","tlshash":"86c2f1bb7d1782a4dd927e39c6b61a9ac40c24731c02836b07f1fa988d10dc836d2b25","first_seen":"2026-02-12T21:09:52.669397Z","last_seen":"2026-02-14T13:19:23.889126Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T13:18:58.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spirit-of-flowers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:49:41 GMT","end":"Tue, 28 Apr 2026 13:49:40 GMT"},"fingerprint":{"sha1":"78:91:72:EC:8E:28:DB:97:BD:2F:58:B1:C5:8A:07:7F:19:6F:51:33","sha256":"C4:95:09:A6:1E:0E:B8:1E:2D:20:82:EA:35:2D:59:EE:EA:F9:CA:BA:1F:31:7C:93:5D:C5:96:49:91:93:6F:17"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: spirit-of-flowers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.1\r\ndate: Sat, 14 Feb 2026 13:18:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-pingback: https://spirit-of-flowers.com/wp/xmlrpc.php\r\nx-powered-by: Acorn 5.0.5 (Laravel 12.16.0)\r\nlink: \u003chttps://spirit-of-flowers.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://spirit-of-flowers.com/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://spirit-of-flowers.com/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WooCommerce:10.4.3","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":145422,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (59906)","md5":"88df87e1aa46ad6eec3b7786ca01fc61","sha1":"ddeb8e71c2b1410924acf20ddb8b8d7a6c28abae","sha256":"fc6b6cd02e47f0447264e8f5ab3ce962666e552e8e5ab96be8fa6c2369e4c04f","sha512":"bb5757ba60583ca9f5340ecd2a0ce91093cca205de20262d461fc19031f0d4b89a2ba9d16a6e6019e3d9f144da72e662a5e0562bbbc949fedab817e29036fe14","ssdeep":"1536:q9aPCypDBpfJgDEFBAhFmdl7FXgudVcz3aJjyFIeB/k+Z8krkkdDsJ23J3ExzUcc:q9aP7tAZatyRB/kO8krk+D4AcWT","tlshash":"aae3fe30f0e000b73e4f4f3c9585e23976d967525a06abb6b4fca1a84b84af718f655c","first_seen":"2026-02-12T21:09:52.664776Z","last_seen":"2026-02-14T13:19:23.890201Z","times_seen":2,"resource_available":false,"data":null}},"time_used":720,"timings":{"blocked":160,"dns":41,"connect":57,"send":0,"wait":396,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/wp/wp-includes/js/jquery/jquery.js?ver=3.7.1","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spirit-of-flowers.com/","date":"2026-02-14T13:18:59.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spirit-of-flowers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:49:41 GMT","end":"Tue, 28 Apr 2026 13:49:40 GMT"},"fingerprint":{"sha1":"78:91:72:EC:8E:28:DB:97:BD:2F:58:B1:C5:8A:07:7F:19:6F:51:33","sha256":"C4:95:09:A6:1E:0E:B8:1E:2D:20:82:EA:35:2D:59:EE:EA:F9:CA:BA:1F:31:7C:93:5D:C5:96:49:91:93:6F:17"}}},"request":{"raw":"GET /wp/wp-includes/js/jquery/jquery.js?ver=3.7.1 HTTP/1.1\r\nHost: spirit-of-flowers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spirit-of-flowers.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.28.1\r\ndate: Sat, 14 Feb 2026 13:18:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 28 Aug 2023 17:14:24 GMT\r\netag: W/\"64ecd5f0-45a96\"\r\nexpires: Mon, 16 Mar 2026 13:18:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":285334,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"16623e9f7cd802cf093c325c511a739c","sha1":"b364dbd40e67076a03e9d7b061c9b2624d081e31","sha256":"1e7f83052e1e3442c4397ced9555033cd1d3f08444d85960683bcf91c8433cdb","sha512":"44b9d0ed3184fe5f19e650798e6fda22b71a6f316415e08c4ec88af3a4211e9fd335d5f9fc44a070f7b478d7060ae3b665c2d2620bbbce2ea6098bd6826b930c","ssdeep":"6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPf2:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAk","tlshash":"8f54a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","first_seen":"2023-09-10T20:41:57Z","last_seen":"2026-08-21T20:19:24.061645Z","times_seen":10439,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/plugins/woocommerce/assets/js/js-cookie/js.cookie.js?ver=2.1.4-wc.10.4.3","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spirit-of-flowers.com/","date":"2026-02-14T13:18:59.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spirit-of-flowers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:49:41 GMT","end":"Tue, 28 Apr 2026 13:49:40 GMT"},"fingerprint":{"sha1":"78:91:72:EC:8E:28:DB:97:BD:2F:58:B1:C5:8A:07:7F:19:6F:51:33","sha256":"C4:95:09:A6:1E:0E:B8:1E:2D:20:82:EA:35:2D:59:EE:EA:F9:CA:BA:1F:31:7C:93:5D:C5:96:49:91:93:6F:17"}}},"request":{"raw":"GET /app/plugins/woocommerce/assets/js/js-cookie/js.cookie.js?ver=2.1.4-wc.10.4.3 HTTP/1.1\r\nHost: spirit-of-flowers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spirit-of-flowers.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.28.1\r\ndate: Sat, 14 Feb 2026 13:18:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 21 Jan 2026 12:08:24 GMT\r\netag: W/\"6970c1b8-ee4\"\r\nexpires: Mon, 16 Mar 2026 13:18:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3812,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"1e1b3c85b6dc84e534baab74f0c63125","sha1":"12ce2f1d4fdd71172116b7fbf3929579c4a776aa","sha256":"6ff07f1a33ee013d687141ef6380caad32b0da6c5230a256ebae58d7c936f508","sha512":"6aa50a2085eb57dc86edafcfa0e69961dc6f441fbb5de1cdecf6c31a3392da199183f06586be2eeeb758c7128760ac9a47ae5403acdac847bd6b3feee1d3b097","ssdeep":"","tlshash":"877110a8b78d29fb0f061008dd2f64c8b67cd536089a45b5ac9ce167156dc2e13f98be","first_seen":"2024-03-27T15:41:09Z","last_seen":"2026-08-20T14:57:39.312341Z","times_seen":1209,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.js?ver=10.4.3","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spirit-of-flowers.com/","date":"2026-02-14T13:18:59.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spirit-of-flowers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:49:41 GMT","end":"Tue, 28 Apr 2026 13:49:40 GMT"},"fingerprint":{"sha1":"78:91:72:EC:8E:28:DB:97:BD:2F:58:B1:C5:8A:07:7F:19:6F:51:33","sha256":"C4:95:09:A6:1E:0E:B8:1E:2D:20:82:EA:35:2D:59:EE:EA:F9:CA:BA:1F:31:7C:93:5D:C5:96:49:91:93:6F:17"}}},"request":{"raw":"GET /app/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.js?ver=10.4.3 HTTP/1.1\r\nHost: spirit-of-flowers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spirit-of-flowers.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.28.1\r\ndate: Sat, 14 Feb 2026 13:18:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 21 Jan 2026 12:08:24 GMT\r\netag: W/\"6970c1b8-766b\"\r\nexpires: Mon, 16 Mar 2026 13:18:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30315,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (802)","md5":"c1c6dba470210e8583e6b9a2cffdb35d","sha1":"da2b64822e77c73f822c05f6bf5ee33988b580f7","sha256":"a53ba6aff0f509d0b14e8f18068646bd25d80130f66b3dcd9b503d7b128490be","sha512":"d5ceace519750b0fdea6aa1a118d8ff19b23256fa05bce629baf880da5c3322d9ef8466ec56f3665c3e0bf0e5041353bf025b6e966b34f135699d2f54e3ecbb6","ssdeep":"384:1WH89VDpxyY3uBrWia2yiKBzHK0UoFt45DyWEbFSPvAvYraoQCu7ocoAd:0c+kuBrWxzHKLVmb+vAviLEaAd","tlshash":"a6d2421c69b31028556370b8aa9fd4087325e0133999ec197e6c5264bf9ee7d80f1ff9","first_seen":"2024-07-20T12:41:44Z","last_seen":"2026-08-20T14:57:39.241478Z","times_seen":1174,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/plugins/woocommerce/assets/js/frontend/order-attribution.js?ver=10.4.3","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spirit-of-flowers.com/","date":"2026-02-14T13:18:59.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spirit-of-flowers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:49:41 GMT","end":"Tue, 28 Apr 2026 13:49:40 GMT"},"fingerprint":{"sha1":"78:91:72:EC:8E:28:DB:97:BD:2F:58:B1:C5:8A:07:7F:19:6F:51:33","sha256":"C4:95:09:A6:1E:0E:B8:1E:2D:20:82:EA:35:2D:59:EE:EA:F9:CA:BA:1F:31:7C:93:5D:C5:96:49:91:93:6F:17"}}},"request":{"raw":"GET /app/plugins/woocommerce/assets/js/frontend/order-attribution.js?ver=10.4.3 HTTP/1.1\r\nHost: spirit-of-flowers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spirit-of-flowers.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.28.1\r\ndate: Sat, 14 Feb 2026 13:18:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 21 Jan 2026 12:08:24 GMT\r\netag: W/\"6970c1b8-1a41\"\r\nexpires: Mon, 16 Mar 2026 13:18:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6721,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"e0b8d654bc88d8cd97f293855f69e5ef","sha1":"80f94dbe462c24a05b38d67342e6e48c7e03ab45","sha256":"6a5142982b16bb4724432e34af492b4b242d4e29dfdcd3aa80e2529486b9e54c","sha512":"8d35beeefd9ce47bb526217a782fcfe0aefc82f52c46f401d6cccaa71499a0095493e32e3578bd5fff204271fa0355744900135ae857b669a06f7a2c1db4b28f","ssdeep":"192:RSU8WUsUSnCtpZ/ite07NItxr1Odsbt2an:RRUsEDKteE+Wdsbwan","tlshash":"78d1b8abfb6e111146b120e8ce5d61d573ac4439bb408cfef546987a202cc3f417ad2b","first_seen":"2025-06-22T03:49:17.528951Z","last_seen":"2026-08-15T19:02:35.752592Z","times_seen":522,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/uploads/2026/01/img_4-325-300x300.jpg","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://spirit-of-flowers.com/","date":"2026-02-14T13:18:59.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spirit-of-flowers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:49:41 GMT","end":"Tue, 28 Apr 2026 13:49:40 GMT"},"fingerprint":{"sha1":"78:91:72:EC:8E:28:DB:97:BD:2F:58:B1:C5:8A:07:7F:19:6F:51:33","sha256":"C4:95:09:A6:1E:0E:B8:1E:2D:20:82:EA:35:2D:59:EE:EA:F9:CA:BA:1F:31:7C:93:5D:C5:96:49:91:93:6F:17"}}},"request":{"raw":"GET /app/uploads/2026/01/img_4-325-300x300.jpg HTTP/1.1\r\nHost: spirit-of-flowers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spirit-of-flowers.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.28.1\r\ndate: Sat, 14 Feb 2026 13:18:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 28 Jan 2026 16:08:18 GMT\r\netag: W/\"697a3472-4354\"\r\nexpires: Mon, 16 Mar 2026 13:18:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17236,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"ba8df3956bb2863623ec950f8d541d06","sha1":"9112467896304631823783b0652ae252caf97ee7","sha256":"2025addec89f44158a72ad51267ddae86df4db8786a418e70e7a120b03d94462","sha512":"7ae9a81ddf1e9e95133b9a9417c8af5d5ffce32ecd92c43962732a8d2dc926ee6b8249091fb7f87ffe1a232de1175c67b144c2238eda169f35f029c6a54e44b7","ssdeep":"384:PcVOCPi/osBXFHI+P94K8dIxNzMRJKeJXRpNvqJ4x:Pcc/BXJ11x1g/JPx","tlshash":"bd72c05ddb360ae8294caf13686c742f24b53a51655aa2936633c076c0ec6f03b8fdc7","first_seen":"2026-02-12T21:09:52.650913Z","last_seen":"2026-02-14T13:19:23.894063Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/uploads/2026/01/cropped-fav-32x32.jpg","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spirit-of-flowers.com/","date":"2026-02-14T13:18:59.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spirit-of-flowers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:49:41 GMT","end":"Tue, 28 Apr 2026 13:49:40 GMT"},"fingerprint":{"sha1":"78:91:72:EC:8E:28:DB:97:BD:2F:58:B1:C5:8A:07:7F:19:6F:51:33","sha256":"C4:95:09:A6:1E:0E:B8:1E:2D:20:82:EA:35:2D:59:EE:EA:F9:CA:BA:1F:31:7C:93:5D:C5:96:49:91:93:6F:17"}}},"request":{"raw":"GET /app/uploads/2026/01/cropped-fav-32x32.jpg HTTP/1.1\r\nHost: spirit-of-flowers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spirit-of-flowers.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-02-14%2013%3A18%3A59%7C%7C%7Cep%3Dhttps%3A%2F%2Fspirit-of-flowers.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-02-14%2013%3A18%3A59%7C%7C%7Cep%3Dhttps%3A%2F%2Fspirit-of-flowers.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fspirit-of-flowers.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.28.1\r\ndate: Sat, 14 Feb 2026 13:18:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 28 Jan 2026 16:16:47 GMT\r\netag: W/\"697a366f-401\"\r\nexpires: Mon, 16 Mar 2026 13:18:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1025,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 32x32, components 3","md5":"a7a217c61e5e19974d6c060b36abe141","sha1":"4dd06335551abfa9688520e80d02cc742936a6c5","sha256":"3c92575a5287104f63cf487eef1987659f39a60a6099c5c1ad4a39266d4a01c6","sha512":"5714e375f6a6d6c0b46393a9b48b7fd2f8076a66fc95dc0872764eec04d3bdb26f28549a863bb25fd1c00a1941678f8e89cb2ac50ac7a599d2a34ac1dc18c3c4","ssdeep":"","tlshash":"4711542b5b1283a0dd364dba064a124bd2eabf8175e67b146b75c2a1cd614ccd809949","first_seen":"2026-02-12T21:09:52.660293Z","last_seen":"2026-02-14T13:19:23.89503Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spirit-of-flowers.com/app/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=1768997304","fqdn":"spirit-of-flowers.com","domain":"spirit-of-flowers.com","tld":"com"},"ip":{"addr":"194.87.43.204","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spirit-of-flowers.com/","date":"2026-02-14T13:18:59.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spirit-of-flowers.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 13:49:41 GMT","end":"Tue, 28 Apr 2026 13:49:40 GMT"},"fingerprint":{"sha1":"78:91:72:EC:8E:28:DB:97:BD:2F:58:B1:C5:8A:07:7F:19:6F:51:33","sha256":"C4:95:09:A6:1E:0E:B8:1E:2D:20:82:EA:35:2D:59:EE:EA:F9:CA:BA:1F:31:7C:93:5D:C5:96:49:91:93:6F:17"}}},"request":{"raw":"GET /app/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=1768997304 HTTP/1.1\r\nHost: spirit-of-flowers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spirit-of-flowers.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx/1.28.1\r\ndate: Sat, 14 Feb 2026 13:18:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 Jan 2026 12:08:24 GMT\r\netag: W/\"6970c1b8-36b6\"\r\nexpires: Mon, 16 Mar 2026 13:18:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14006,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (10312)","md5":"e2d671c403c7e2bd09b3b298c748d0db","sha1":"d9e1884d4627704102a1e6c19905ca2f00431c6a","sha256":"45173f1550e57be245f3ed3b0f6fde7962e27901d5a04adf9342e546500bed49","sha512":"cee28ff90c4e108f2afbbf51772f294ed1a5b5d179b3c7dec59ee0781f6cb2e3f70a79a8f88e3b6587507c0aea6b2f483dd0d1f1ca753b8ed6670b9ef15c9770","ssdeep":"96:JctcybwYP5GKHxNBQUEr2xT8l/0JYNFvyadAAPOO+yH1:eF7RGKRNQr2Ges","tlshash":"fd5266b1e7b52cf8493989649e70b6d2b5f93080cbd325d9d04ae580719f4aa0bd27cf","first_seen":"2025-09-22T15:19:04.124916Z","last_seen":"2026-08-21T22:39:01.344435Z","times_seen":91349,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spirit-of-flowers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}