{"report_id":"7045afb0-70b6-47f5-b7d0-d26879e8090d","version":0,"status":"done","tags":[],"date":"2026-09-15T18:33:25Z","url":{"schema":"http","addr":"kawawbiurze.live/","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kawawbiurze.live/","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"title":"kawawbiurze.live - sklep z kawą, ekspresy do kawy Saeco, Jura, Nivona","dom":{"size":671676,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53397)","md5":"5636f1fc5181343d829a468524d9f41a","sha1":"9205b6af132c987f7e2fee01a1d22f0b4673052c","sha256":"507cba222953edd571fced3b550004f7cb48a9c9255eb3df44bddb3ca75bad74","sha512":"ab8682cec97404c3630413fd63a366c1f3f9c2a2e634bcb25024bb824b0eb145f7e9f7857b19b7bd00d436ced3998e28bd8a8a5d8c9754994e9bfb1ad1571596","ssdeep":"12288:P0JLHLxuQgiPZYCw/L2aLUKv8yw64SACcBztWG0bfvbZSejFKj7:P0JLrxPZzw/L2aLUKv8yw64SAbs1Seji","tlshash":"29e41af3d17a003b622f62e861d87b5835c7820adbc106f1b7ac932a97d7da1671365c","dom_hash":"domhash2050f9b2a2166e05b0ec4c45dcdf0613","first_seen":"2026-09-15T18:33:40.501033Z","last_seen":"2026-09-15T18:33:40.501033Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kawawbiurze.live/","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-20T18:33:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"d3bo67muzbfgtl.cloudfront.net","ip":{"addr":"143.204.233.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2016-03-12T01:29:45Z","last_seen":"2026-09-09T08:35:56.956043Z","alert_count":0,"request_count":4,"received_data":255691,"sent_data":1933,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":7,"received_data":127808,"sent_data":3864,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":3,"received_data":11656,"sent_data":1584,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-09-13T23:42:47.530174Z","alert_count":0,"request_count":4,"received_data":174961,"sent_data":1934,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"kawawbiurze.live","ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-15T18:30:17.813064Z","last_seen":"2026-09-15T18:30:17.813064Z","alert_count":1110,"request_count":222,"received_data":23999641,"sent_data":132507,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WooCommerce","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]},{"name":"Google Tag Manager for WordPress","description":"Google Tag Manager for WordPress plugin places the GTM container code snippets onto your wordpress website so that you do not need to add this manually.","website":"https://gtm4wp.com","common_platform_enumeration":"","icon":"Google Tag Manager for WordPress.png","categories":["WordPress plugins"]},{"name":"Web Font Loader","description":"WebFont Loader is a versatile JavaScript library that provides enhanced control and flexibility in managing web fonts.","website":"https://github.com/typekit/webfontloader","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]}]},{"fqdn":"ssl.ceneo.pl","ip":{"addr":"5.134.209.153","port":443,"asn":42656,"as":"Allegro sp. z o.o.","country":"Poland","country_code":"PL"},"domain_registered":"2004-09-07","domain_rank":1454655,"first_seen":"2012-10-01T00:05:53Z","last_seen":"2026-09-13T13:50:24.223265Z","alert_count":0,"request_count":13,"received_data":34550,"sent_data":7782,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kawawbiurze.live/","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"65baf0f0aecda570d1b0d268b92a79f2","sha1":"caba5234475eeafe21245de3f9910a478c990b59","sha256":"f54e7f672fa5f7fd0be57f14136838869a060ea283aae5bde83530ec6807f67f","sha512":"28efdddbee46466f1241f811498b1ada2e0761c2f78841d0be3d58115e664ae7b27000271fca8a36ddd31b76f912f406b365fa4ef7931a737619c31624d5d4ab","ssdeep":"","tlshash":"458004f531d140005151d0400100140d7405045714514411f3c0151540f11110451004","size":29,"data":"","first_seen":"2023-05-06T13:03:33Z","last_seen":"2026-09-15T18:33:40.654831Z","times_seen":376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/f239141a52711b7ab1f7f1578ff3899b.js?ver=3899b","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cff12e686e8eeef7545c0d07f2b9bccb","sha1":"2acd4a6fb0f6bcaf803dc29a583ab9e21e0935ce","sha256":"b17a59b0322767b307563a6abb2e5683bb1de4dc74a490ae3cf11277a84b4c46","sha512":"95b630ba5d8825ee567118c147f448ba66102544cf23a0a46d0935d7978152c3d1366ecf0f8efd522ba56d08b0867acdb343213c45374e9214634c7fe6abba0a","ssdeep":"384:8DhC6s2oHyLgbgrzrXKDKhtDdWFl56hbsFCA5isCsWElpAH5rNHC:8Do6SHmK2vdWT56h1GisCsWElpEu","tlshash":"1e72941a335a349f44ead0b6786f610e607a351ac21d54b09669c3f4df74cc3fa3ad2a","size":16888,"data":"","first_seen":"2025-07-01T12:26:32.637375Z","last_seen":"2026-09-15T18:33:40.616504Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-woocommerce.js","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"989d23f083c412cc45c6a43b778aa2b2","sha1":"b06368fd8fd550d80cb22d0f7c14cedcd1060529","sha256":"a8a63553a91615d0593adacea04fc8d73e6897b59454fbf6b6b617310bd49726","sha512":"f95134ce64acac3166248910565807f12a9674b3ed53be91010598872ea205f665442c506da5e8840e82d78ef0eb40d40769540b8192922611ff175e81933c56","ssdeep":"192:Z5jPLsCWS163xXbRK5lZJ6Fs+w2rq8H6Pgd9:vVDaOl/3mqI6Pgd9","tlshash":"3432b6e1d6b394f1a0ff613624d63feabb601889f1ce40535c7dcc1829948539267aee","size":11314,"data":"","first_seen":"2026-07-23T00:51:43.51498Z","last_seen":"2026-09-15T21:16:13.780794Z","times_seen":384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/5a3baad652f9ff81f898fee46cca5d96.js?ver=a5d96","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"425dfe748e74fd4518bbcd08ad5b8abc","sha1":"2dc941b97c6d8b0331fb78d1689c5bde27c4bf2c","sha256":"cd455415981656e0d60e053aac1be7ef50fdb8c0937fbba2e8fcfb8722c1d8e6","sha512":"3668fe25886e4a0f8f28954491f51fe81b9cf87b3e575682b94e22ccbab98b3dbe91dcbdcd0284ae7db9329f88f5b8ab008112ac892103877e67c6146164f86d","ssdeep":"","tlshash":"af2101597245406d00fd2e6c6c9a4b73bb9016775a09cc8798f654304676f0bbd63c7b","size":1388,"data":"","first_seen":"2025-07-07T17:47:21.361025Z","last_seen":"2026-09-15T18:33:40.549243Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/9ac775572cf42ac4b6ef1cd998ef49c3.js?ver=f49c3","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49f8cb0cd523d49104c94c2cecb1ab1d","sha1":"becbde2b9a61f0336593ca7377beadc6ece532c5","sha256":"d7658d6ad271b30c687814939688058b0d9381dc0722e53dcf09f57a0cb76fcb","sha512":"36e2a40f3b6acb6c9e87f0b6281c229522b372eb90a6dd771772a31d7c218867cc0ab39d77c6e93db5b19fac4a2693e10ae0b16f87a2a33e97883933b165e54d","ssdeep":"384:kYpuQ1KFbIUSKgPgaogau6gLT+s/kJ7Y81TdK7I3EGxgXLj:kYpl1KFbIUSKgos56gLT+OW7Y8hdK7IQ","tlshash":"1042b5d0f136587790d61cf211c616c8fdb529caf9d284d016d82f5a1feaa4ba33326e","size":12939,"data":"","first_seen":"2026-09-15T18:30:44.520824Z","last_seen":"2026-09-15T18:33:40.523606Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/877fbca461ed71bc8bac0bf6f92faa1c.js?ver=faa1c","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cfeb660f1bb34a02ba7052b055bae55","sha1":"1185b652b1757e49a8b34f265c88651fcf678e75","sha256":"3264abc0e2c42d073d3dcc597e0050e3a2727ffbb37c74c42574ece0686247ea","sha512":"510147b8eb2e9f821f5f67c2fb3610a85d7982bec97c0cb990b4cab74e7728705a556999a1ea974a33de43d6f06abf4df480b4354826a8bf27b2eca634f70df1","ssdeep":"192:QxscwJLr8s/xD/3bClMgD0y4oiB7TrToqv7KUN7KUgWv0y1N+cymA86nuKhuBj9u:rxX83mXZ7KUN7KUPvF1cyASKhhBr5","tlshash":"c6a20a8eb7c6b3110747707d932fac05557c9ca2a645c4aaf5709888ed34298a273ffe","size":22854,"data":"","first_seen":"2025-07-07T17:47:21.449678Z","last_seen":"2026-09-15T18:33:40.566654Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/fc517bab7523f91089b76d23995feb4a.js?ver=feb4a","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec85b46fcec26d5f1c269f079750dfa6","sha1":"9ab9f6bcf2a6561d5f8a39b8a29b4ce1c90b084f","sha256":"ee5458cd3fc6f7013d6db1ea068ab4fc712913308165045bc060bc231e26a155","sha512":"360b4d5541fd5b1d9152a28a3fbae08aa68a29bdaedf4593557e120e0b39b77b1f07f9e1ea25bda6c9a376086c2ea39d27090a7bebcc0cebb3f595041c4d423f","ssdeep":"768:joEhmCqvnMMuYfxC8zIR73+VqlGBokOl/Ne1Xn6T1f20xBc3XL3Nl+PvnPFnr5RF:f6xzIRHkOZ8q+NlYfPspU2xJj0","tlshash":"6d73a44cba53723542af20e2256f150d2237bb3e600b9268b428cce95eb9d55735bf3d","size":74622,"data":"","first_seen":"2023-11-04T15:09:14Z","last_seen":"2026-09-15T18:33:40.57212Z","times_seen":199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d301deefa48a48bb5199c5954aca5fb9","sha1":"d4c32fd65a7f142272b085c6307fc745452fc4f3","sha256":"dd31e07bbeb9f1203b42ad0ac93770c6605cda3e82bfb676b2e557cca259e5ce","sha512":"c5f7ba9cf40cd19b7c3dbfe5c17520d6bf30dcae7ca2b8517b278a1f441f217d9cc5c4fbfbd96c4323caa2fd6a11545c0b82b9f250b8c59ca31f891fb9262d1e","ssdeep":"","tlshash":"573145d4758715e352c3a47d70bf832c7e342042a84e9e74d61dccc81e7950969f2e0e","size":1748,"data":"","first_seen":"2026-09-15T18:30:44.928075Z","last_seen":"2026-09-15T18:33:40.655361Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"cec17ecc9082a022f890f0826f1e22e9","sha1":"69d5d77c1a4becc589c35339e977f8a6ab0b65e1","sha256":"0c9f72aeb51e4117f4aff55e3b50b6434b5aa37c6d59b841ce3439d2ac1ff6d6","sha512":"f7b1c9812e046025d2d893ec52bc812551b8de0da21cbf17cb9334abe6d7798e2cab7636de02e83859e9366857f2f3a9b0ceed8916c76cc6ce23dea97029d96e","ssdeep":"","tlshash":"f7e06d7226ac3a6b8f4eb698e65d28d3f3c2003784a8c43544e889ee272f0424941d39","size":418,"data":"","first_seen":"2026-09-15T18:30:44.900218Z","last_seen":"2026-09-15T18:33:40.656011Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.ceneo.pl/ct/v5/script.js?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026t=1789497163003","fqdn":"ssl.ceneo.pl","domain":"ceneo.pl","tld":"pl"},"ip":{"addr":"5.134.209.153","port":443,"asn":42656,"as":"Allegro sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3449c18d8beae30651d59133755918b","sha1":"56931a966705d3251fbf64c4918061379eafaed7","sha256":"c995b93eb76d5e71b992b72e41c97c6aa296dfbd95508b420775980bb48349f9","sha512":"b44d2252daf9cbb6030caffb84f1cdd43f32e5bb02626c0749a9e5c5695171a9bc242c44576532bb1f3568ce6fa06131245ce2d1466fc4389d9e3ef8ae214c08","ssdeep":"96:d7V8iaulqW4ubsnLSub9CeACDiMlAl6FYyclPfycwRcDGbK37eAyHy9CjWIch:ZV8iaOqubsOubxACD3lAcYzlP7PD8mKo","tlshash":"6191c81a79e3316543da40d912bb2109f13d05693c5494e081b9e8af3e33e6e43b7f4e","size":4418,"data":"","first_seen":"2026-09-15T18:30:44.560162Z","last_seen":"2026-09-15T18:33:40.599377Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3bo67muzbfgtl.cloudfront.net/edrone_2_0.js?app_id","fqdn":"d3bo67muzbfgtl.cloudfront.net","domain":"d3bo67muzbfgtl.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.233.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a30bf78441dd1213021d77df99e7909","sha1":"9996e095bc955825e459415c84b2de109e8c0788","sha256":"c2dc1938d3d978e45242cece1a8f1c62e100bad93efb6066204d19e06e7c3f71","sha512":"cbdf6f68cfcffc53114ea18b7b957327f675f2f3d71fcacb8800f112053a46d7ffb5f592037c773757d859659d125ff663214ddc2d85372bd43db5f5a97ad9f2","ssdeep":"768:W1swp4OhX2BNOb/JIqIprCaIsIlVIpIdqD6yQSgGN+NMtWsNaxhShmsDNg3o6cc6:sLhmBNObJIqIprXIsIlVIpIdm6DGZ8sH","tlshash":"0403d791b47ad1246077313464ae1a8cfc7c18aa5ec5848573d9fd742bb0e4fb22bb2d","size":38628,"data":"","first_seen":"2026-09-15T18:30:44.677661Z","last_seen":"2026-09-15T18:33:40.613584Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/942080fb03405861cded1c3fb4806430.js?ver=06430","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a4911b661558ef5806f039e214d46e3","sha1":"1415cd822084ddb8d33072c6f88e2d5b9aec693a","sha256":"413d0fb7795d35265f4f346f3361bdbe53cba8a3e214b9b4edba765ae898ea15","sha512":"dabd32bbc2ab7aeb8be57c0ce63e565bee73a2ff3bbb392f721a92de34c720a215b87d31341cdf78e5241091c9b39d0fd30339038befdcfeede79511128792f0","ssdeep":"384:Y50Yf5kE+xUvCleyZ9iX1zD6vlXA5JGhER3CEHZcir74ROnEkMcykuVlT+aSXd7o:K0YfNvF69Y1zD6vlw5VDciHjnFPa8Fxm","tlshash":"eaa2e968b4d2191b20a7916d001ad799367760662613e76832fce4f52f3cf9232bbd74","size":21346,"data":"","first_seen":"2025-07-01T12:26:32.656626Z","last_seen":"2026-09-15T18:33:40.61791Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/eec719d721671f6428f4cb927e3560f5.js?ver=560f5","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"576a5ab746f23df9a2373a8f8dd436f4","sha1":"e10e1a41aa6bcf7dd757acb38796fa8fbb50375e","sha256":"9f555e8065651a0aaea79ed3fd3af76ec68e16a4aa9b9e15b0187b0419aadcb0","sha512":"a59a85906f2a9c1ac16a8d2d86da2b04d2b0194306c51de1690a32340df5eed929aae611e81ebc8562ea48c9e8196ca85b24a33aca08a85e7bc76d17677b38c1","ssdeep":"768:zZ05/QWiE03KzS3nWAZIdJcFcDcoc1cBcAc2czcHcfPfJhkZwRXCZY2PZgg74nly:yjzpCJhkZwRXJcggUnOqTWp9","tlshash":"ad43c6b6945060fe117b44f5f07b6764792b0e9ab2026ca58b19056b392cde803f7fec","size":55228,"data":"","first_seen":"2026-09-15T18:30:44.449467Z","last_seen":"2026-09-15T18:33:40.547604Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHdjX2FkZF90b19jYXJ0X3BhcmFtcz17ImFqYXhfdXJsIjoiL3dwLWFkbWluL2FkbWluLWFqYXgucGhwIiwid2NfYWpheF91cmwiOiIvP3djLWFqYXg9JSVlbmRwb2ludCUlIiwiaTE4bl92aWV3X2NhcnQiOiJab2JhY3oga29zenlrIiwiY2FydF91cmwiOiJodHRwczovL2thd2F3Yml1cnplLnBsL2tvc3p5ay8iLCJpc19jYXJ0IjoiIiwiY2FydF9yZWRpcmVjdF9hZnRlcl9hZGQiOiJubyJ9","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b454e44a40254ef8af393abce86fbf83","sha1":"c9330b338fdea1f6c0055f082a9dd9f8ea122e73","sha256":"82a0d8781c8243e6aaa156639eda04b288034962a0ec6f0b17f8f5f4b28e8616","sha512":"bb318d5b0d65a1599ad9505005a40b503c8e1fca90b3091ef1529711bb6329b6dbb9a5d726b6bf6627c8e658a68b7f4c83aff5cec1580f158db8962edbe47235","ssdeep":"","tlshash":"78d0a7a8029dcd4763d17fd8108434e2b0f21027e5a89825898cbc984701541cd0015f","size":225,"data":"","first_seen":"2026-09-15T18:30:44.901682Z","last_seen":"2026-09-15T18:33:40.656592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"939bd98972a479cc03f48f7571a5a66b","sha1":"0c2c28016f75cb0648985bd36f1b229798d7744a","sha256":"192d186f4ce59b77da54625abee038357e165f9b20ab14366a32855cd2834396","sha512":"a329de3f441d463fc81ed1f106f593ccd805782caf23f02d5ac3142a3d550726ee70450ba6a7f1b3c54a0cc958ada6d08528e4da7f93394ebe7a75a96d45676f","ssdeep":"96:yRWwvxZ1m1XBv2Z1m8PevnZ1mYipcvyZ1md0+v9Z1AduvSZ17KO9MvpdZ1ht3vpL:yA3YuMlILiO+HRxI2s6MdAdGIVUF","tlshash":"9152b0fbe3bea53fd790e7b050c73599d8c00a6342f5ac61495daa0793bb2934383649","size":14194,"data":"","first_seen":"2026-09-15T18:30:44.930068Z","last_seen":"2026-09-15T18:33:40.657204Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc0923c33f2f758c84c52fbb61c834a3","sha1":"b058be2d1733bff3d424d94ace699f13151e3df7","sha256":"d37ef4938c8ae1d3621058c0b807b594bdff045977dab405590883e514289ac3","sha512":"428f2cdc01d9aa9d3dc8ed5a91cbbc7bc7f1e0e05118f0d8a5e817f78b4348022cc0f7219d8362cd7295faca28e22392b2766cbeabb3b65d2387366e142294eb","ssdeep":"","tlshash":"f4d0c77df0585e5020c2607fb471a016521791b9bd941130d75ebc49ff08be546afeeb","size":215,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-15T20:38:02.040518Z","times_seen":33167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"71a969fb57b8a734694ed9cc597a3d15","sha1":"11a14b98c52167e5727a0fdfd0d29d6da876a6db","sha256":"06f89ef77ee6b196770332acc3e5a9946a55f3924717f778874f7a0ba1f6b00d","sha512":"0c7be9810c063e319a24e0db600f81c4db03d4d1150c721c1c687c240ed8024b234c7751455c65c0ce5ae1ff580a80fcf51f6e002ed0dde1d52d26ea527250dc","ssdeep":"","tlshash":"f04110ae352a08358be331ee2f7d760ca8301224e46eedf704da440809e4f7a4b57c95","size":1945,"data":"","first_seen":"2026-09-15T18:30:44.867518Z","last_seen":"2026-09-15T18:33:40.658395Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b34e30f6e39d097fbe1e32efd839adf6","sha1":"10e6d5ddbaf35b73cbc509ead81591f1cf8a1c33","sha256":"e9c4a71788ab2d4233bd8302ecc95c5c0e83f60cae9b32236f9ace4a2f18be7a","sha512":"6633f8267def21abcaf6ad4c20c263398a4691f8f6ff96a8045516378ad13224e7ccea62b3325259ab969d7ef1c3535d89ae72c2895c30266d7d3e4f25a85db3","ssdeep":"","tlshash":"7bf0b4650d1d492013ddd8849e9a8eb09778b0897c8cc8c37c6d307c4382bda5ad0d28","size":545,"data":"","first_seen":"2026-09-15T18:30:44.868825Z","last_seen":"2026-09-15T18:33:40.658918Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c53737b857a091b887f0d3d563b4b8cc","sha1":"853d0de5c0277f1a2bed4cc77e63032776e92a31","sha256":"428f5c5de6413eed58199f9c95db6c9c1130dc223367db164160a6187de2fbc2","sha512":"dd30d8e2f1fad60b21e236b279651808c2d91bb80201364c525ebc27c58cac4747f6b6056b7f79dca8cb5dcf0a3c6f2871ac38b22f41b733dd79a998aa5951cd","ssdeep":"","tlshash":"659002145494d5a76d410a201c00015362221a61415524507008a22b2e8060d4a41224","size":49,"data":"","first_seen":"2026-09-02T08:37:53.323629Z","last_seen":"2026-09-15T18:33:40.659439Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9fa2ebff896e5b9947ca1beb1a2a976e","sha1":"916848e0d2f4b3af6469ca0ce5297066226fd6a6","sha256":"fb57df7be13b35a45b61c5b26fc49b8954fc1ec07e8086804757228b05cf3b0e","sha512":"5fbea251189c280ba960ec81fdfc2aaa68cf53c5333710943e7f7afdb2c6bf40c14b308430ac0c2693c552b2f1822fab5689f20174b72bb0590d0dfc7439076a","ssdeep":"","tlshash":"fc21e11801389f798be96f582f8e211eede3d54156ec281cff8c5d1964c652ce72808d","size":1183,"data":"","first_seen":"2026-09-15T18:30:44.871007Z","last_seen":"2026-09-15T18:33:40.660242Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6b0732c934f48d209968065d2f9e28e8","sha1":"2c09a88107816196d1940e62b4c330f99ccd002e","sha256":"9a16836b98eda0f710b9f54dc33f55f2d6a3801bfb9ca632c31adc2d818c196b","sha512":"f3bea7ce11c5ced8c8b9fe1e6d01b0a5c5067893bc351c95a3e9e970fbbe8152ed36ce857181fa70558ab90933f8419f1ecbf8716cbc3b02ac391c88e7f40f77","ssdeep":"","tlshash":"9bd0a7611f72a67100a8455dff02f853b58e8f21c450f4b97040567c50d6c40d36b8a4","size":228,"data":"","first_seen":"2023-03-07T12:33:51Z","last_seen":"2026-09-15T19:23:35.208751Z","times_seen":1239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"db89040408d21db649455564f36ab97d","sha1":"7a2574928a798cdd7acc1b9f0fb757bbe0f85d53","sha256":"947c01befcc6446c4cd3d3f22b2219242fe83d274ffe96aa8bd4e6cfd3f0c431","sha512":"5bd43c8b30a536b2125324c74006e4703ade9c832efda3913c53ff4c55d9f1b3d73599d48b53fbdc314ae4914daa1f61947e0e64d33d5f85f0db39ba93b1c23f","ssdeep":"","tlshash":"f4b0929e92a82bb433b3aa3834a6a3939d6a9486c02a6019885768050428cb08090585","size":111,"data":"","first_seen":"2025-12-15T07:44:14.652164Z","last_seen":"2026-09-15T20:34:07.461336Z","times_seen":630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c565a7bf60690779203b3bad86a01a23","sha1":"93d8fd870ed2e037dc729e81868a3f2187167824","sha256":"ceb7fda52512ac6b4b2524e8dbf61e3e436cdf75a143b80d9a2fc8e1412c6437","sha512":"628f10336b7da401740270f164a79139b69c0127016c16e744f0082243efebcb3847fbe16e0ce1f0ab4a7d611ab83b133621014ffe81fb55e674a17bf838a2d1","ssdeep":"","tlshash":"cb3113375a2dc0bd47cfe3c49e7c6e0fa0dc3515c0989018deba9d1886e81165b5864b","size":1548,"data":"","first_seen":"2026-09-15T18:30:44.873939Z","last_seen":"2026-09-15T18:33:40.661752Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6e046cdac9b4ff5e3639ab0d23c69be","sha1":"0fc52572a736150833b1742722adacf8fbbd8bfe","sha256":"037efb8bba78546055a2f119dd75e4f8baa61e30f041b6a4267ce425666f2c41","sha512":"d6297a696887859cfd941a8d2b7860b746caad2edbf03f516849506d78301d30aa7a0236d76880d15614f35c97c7df2c07ca65ee3f695ac8c55ef5de0451108c","ssdeep":"","tlshash":"30f0287ecb9c483dd6f232dc1f7ebeda786d1130804aadb25964490418e8a4b8f59d91","size":615,"data":"","first_seen":"2026-05-18T10:59:25.149335Z","last_seen":"2026-09-15T18:33:40.662333Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d72b80690ba108f701c1b1a5e697720","sha1":"befbf4e1dec83cfd6b3a327a909be07a4f8ab490","sha256":"0d8bef99a34b9446ad386668c9742d804417dad6f930213a1dd1cbb8dacbd6e3","sha512":"7cc76f2ee11c4395caa4a50a63bbd1668733e4f8ba3d89189a8014364a7e93873434b7b7b7c7ab37f624d4558e064d913657c064dcc9b35f892a0f05e0991130","ssdeep":"192:q6e4j3qVXlu798fbuEO4C5/hsNs35PhSkzISM8Z:bel29YFts/Swau","tlshash":"62f153497542b57f393b7071d0af220b313970a3a84b4861e9b8f6d87c789792a23d7d","size":8109,"data":"","first_seen":"2025-07-25T05:28:04.240916Z","last_seen":"2026-09-15T20:49:56.132441Z","times_seen":30015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ef81b3fde3dd9d70c012aa312111307","sha1":"295a8732e32ea2fdac1b515d435aed5a833743f5","sha256":"eacbc25d78bff522e35cd8727d70cccfc796a9cf6d61125a011633b21c8f606c","sha512":"477e1ab7787e7e40c00d04140fe16ca6a4c9535e8649f559843400e050cbbd6df9017ef98d81119a5aec4c3f5b9e46a5332c3ea53529418067e1ca74240bdf1a","ssdeep":"","tlshash":"9431fe7ef5291a36099560fdf28ae341a030b09adc418024efb5cc5da5cce9549abdf2","size":1793,"data":"","first_seen":"2026-08-06T04:56:32.667202Z","last_seen":"2026-09-15T18:33:40.663751Z","times_seen":868,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-09-15T20:47:17.822587Z","times_seen":201713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/26b78685cdec801543bb1420aab325fd.js?ver=325fd","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9d262981bb66c07f08fde92c8dab6ba","sha1":"e733643f0e98191ce14a2716c22df94607565d43","sha256":"614a29bb16bdf4f8aada51c1579f2e6880f23d0673e76ad1ba48dc17b4134594","sha512":"91159391b0886c990c20fc71605d2b870c70c103476674edadde88ccd94954eca495f46c83e9c1fc6574a6aabccaf1eb418fba5054241129346ae9e6f892089b","ssdeep":"96:SSzLhwYGhTuUrTEBzA/c+GmDycbbyJWqbGsrjn:hPhhGhT13YzAdymSGyn","tlshash":"8391a54af150603348fe796b646f5a0b2b30ae429e2fd458d94c04940973e97b92f98c","size":4607,"data":"","first_seen":"2026-04-06T06:25:59.181797Z","last_seen":"2026-09-15T18:33:40.626568Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHdwRGF0YT17ImJhc2VVcmwiOiJodHRwczovL2thd2F3Yml1cnplLnBsIn07dmFyIHdwRGF0YT17ImJhc2VVcmwiOiJodHRwczovL2thd2F3Yml1cnplLnBsIn0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a98eee018a305ebc461472a6e82fc9a5","sha1":"84de357913b3919ae595932c7f55f4a4af9e89e2","sha256":"3d9e21e1d8456cd7db00cce20339ca7b0b7fa5efb8787a2bcd8e3f43f55e391a","sha512":"eeb301318ae4eb2aa3b767bc0c3e804a45d5db21f89449f43fc90d53582576e2306c63c4b5cf9c402deedb3d986aee75ee0ba4c53edc77fe31a050359f7a56de","ssdeep":"","tlshash":"68b00272058e80659b4763f0628ef4284142451a14d4550144469a1512274506405401","size":95,"data":"","first_seen":"2026-09-15T18:30:44.882295Z","last_seen":"2026-09-15T18:33:40.664748Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5e7c8329411f61e365d70d5bd8d94b9","sha1":"9b07c6b45e87fcc3341bb16357fc45adf75c18dd","sha256":"afea61698edb3940ce41515774a05f7106ff825f63168528b7e654eaf976227e","sha512":"16591c7529ca7efaa116d18dd4f5edf926fd6de409c5c7c866505b498d7b1777ab0fc89b1711a6deeb7a5d7b4ec6570c31147825ecafad174088f725715ed864","ssdeep":"","tlshash":"842103254c5b093717a7b2f569d93a4994af06f901e06e1088dc891c03d8f8edd87548","size":1349,"data":"","first_seen":"2026-09-15T18:30:44.934698Z","last_seen":"2026-09-15T18:33:40.665329Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHNycF9lbmhhbmNlZF9wYXJhbXM9eyJzcnBfd2NfdmVyc2lvbiI6IjExLjAuMSIsImFqYXhfdXJsIjoiaHR0cHM6Ly9rYXdhd2JpdXJ6ZS5wbC93cC1hZG1pbi9hZG1pbi1hamF4LnBocCIsImZwX3BhZ2VzX2FuZF9wb3N0c19zZWFyY2hfbm9uY2UiOiJjMWQ4YmNjYzU0Iiwic2VhcmNoX25vbmNlIjoiOTkyYzg0ZjM0YiIsInNlYXJjaF9jdXN0b21lcnMiOiJiMmI0ZjkxZDQyIiwic2VhcmNoX3Byb2R1Y3RzIjoiOTU2YjQ2NTY1MyIsImkxOG5fbm9fbWF0Y2hlcyI6Ik5vIG1hdGNoZXMgZm91bmQiLCJpMThuX2FqYXhfZXJyb3IiOiJMb2FkaW5nIGZhaWxlZCIsImkxOG5faW5wdXRfdG9vX3Nob3J0XzEiOiJQbGVhc2UgZW50ZXIgMSBvciBtb3JlIGNoYXJhY3RlcnMiLCJpMThuX2lucHV0X3Rvb19zaG9ydF9uIjoiUGxlYXNlIGVudGVyICVxdHklIG9yIG1vcmUgY2hhcmFjdGVycyIsImkxOG5faW5wdXRfdG9vX2xvbmdfMSI6IlBsZWFzZSBkZWxldGUgMSBjaGFyYWN0ZXIiLCJpMThuX2lucHV0X3Rvb19sb25nX24iOiJQbGVhc2UgZGVsZXRlICVxdHklIGNoYXJhY3RlcnMiLCJpMThuX3NlbGVjdGlvbl90b29fbG9uZ18xIjoiWW91IGNhbiBvbmx5IHNlbGVjdCAxIGl0ZW0iLCJpMThuX3NlbGVjdGlvbl90b29fbG9uZ19uIjoiWW91IGNhbiBvbmx5IHNlbGVjdCAlcXR5JSBpdGVtcyIsImkxOG5fbG9hZF9tb3JlIjoiTG9hZGluZyBtb3JlIHJlc3VsdHNcdTIwMjYiLCJpMThuX3NlYXJjaGluZyI6IlNlYXJjaGluZ1x1MjAyNiJ9","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6a7950b903e9483b14a5be3c64e9886","sha1":"0aad020c37774ed9c9382ae1620133f3a7603fb7","sha256":"be793002687f6ab5d185b8307590c2c0348226b7e686652cbe8ce516a53881fe","sha512":"82cb4364ca2b09c32fd19e9b2673a22fb654eb8a813c2029475409eed0625c3bd3c0304b70afe58df5117721cb3cee8172cd74ebad83c1f5f3d5ccf5e4f6f056","ssdeep":"","tlshash":"8401bd1f5ab36c658285418169acbf62dcea066773a4480b700cf5642245edd240244e","size":756,"data":"","first_seen":"2026-09-15T18:30:44.923038Z","last_seen":"2026-09-15T18:33:40.665916Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHdjX2NhcnRfZnJhZ21lbnRzX3BhcmFtcz17ImFqYXhfdXJsIjoiL3dwLWFkbWluL2FkbWluLWFqYXgucGhwIiwid2NfYWpheF91cmwiOiIvP3djLWFqYXg9JSVlbmRwb2ludCUlIiwiY2FydF9oYXNoX2tleSI6IndjX2NhcnRfaGFzaF9kMjdhNjEyMTllY2Y2YTIzYmZkMmQyZGNkOTRiODg2YyIsImZyYWdtZW50X25hbWUiOiJ3Y19mcmFnbWVudHNfZDI3YTYxMjE5ZWNmNmEyM2JmZDJkMmRjZDk0Yjg4NmMiLCJyZXF1ZXN0X3RpbWVvdXQiOiI1MDAwIn0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"815894d8d158401d6f4ecb77a2eaed40","sha1":"0d7f03c6ef1e800551cd3c855b7741934deb6b1c","sha256":"cecc3aaaf074245c4e51ad2600d7a7a51ef3e98dfc6de9be0f60a680546a6875","sha512":"965b3a20303a4ce457a6ac21a02f0ac39e4aacafbbf1e6f486d2caf2b087135b05289b4aaf9f42b320d875f8bcef0df4f877204ff99d7f7d8a255f632aec9409","ssdeep":"","tlshash":"d0d05e83abf488c37cc6a9c1601a627673796227a19c999205549cf89765a03da1092e","size":260,"data":"","first_seen":"2026-09-15T18:30:44.910492Z","last_seen":"2026-09-15T18:33:40.666458Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/e9d68b0659a28ce8382f76f341650870.js?ver=50870","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"73dcf1072af1f64ef05cc8861120e8d6","sha1":"074db6a35af3c41ed29f0463d28ea19bd1bacb66","sha256":"c5c8fb82d490b89200d9417e80c1a96b84c885b2ee61f4a888f79fadaa90e02b","sha512":"dbe5aae373b1203116d36fcf9c4b95000b89d48f0554ee2a048f20e7cb7dad4a3df59fdef9cb0ec226b7e5a96fa2200d7f6e0c7019423fb772a9aa92f0454f19","ssdeep":"96:8mJQb8DHwbTtwqfDZa27MXi/NCa2St01Zyw6VfQ0GfV5VO:FKwWpwQFa2N/NCa2St01Zyw6VY9fV5VO","tlshash":"649173ceb121e4b693a22d82602fda850533383ff08694f8248aa6e51f359456577f3f","size":4352,"data":"","first_seen":"2025-12-11T02:31:21.624153Z","last_seen":"2026-09-15T18:33:40.560574Z","times_seen":1738,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,V2ViRm9udENvbmZpZz17Z29vZ2xlOntmYW1pbGllczpbIlJ1YmlrOml0YWwsd2dodEAwLDMwMC4uOTAwOzEsMzAwLi45MDBcdTAwMjZkaXNwbGF5PXN3YXAiXX19O2lmKHR5cGVvZiBXZWJGb250PT09Im9iamVjdCImJnR5cGVvZiBXZWJGb250LmxvYWQ9PT0iZnVuY3Rpb24iKXtXZWJGb250LmxvYWQoV2ViRm9udENvbmZpZyl9","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c923b69a560e9c48f324ba9c6a15c02","sha1":"5c1f0ada680ae24d4505c4c4f7236026b5404bf2","sha256":"e0113345fe1ead0201cb05f68c3c8e6cb337511d689225ff438ea855cd10f72f","sha512":"d85a1748928763151cfb4a3cfd90da357e45c31788d325902c836edaddc12859fd54e2ae051dba5efb6a4a70dd9939d643720fc1948bb0ac6565db1098a65a5c","ssdeep":"","tlshash":"7bc012e7550da54b45da903c1237afd1fc25675700cc114425e452e9cdddd9c6c32e12","size":186,"data":"","first_seen":"2026-09-15T18:30:44.889885Z","last_seen":"2026-09-15T18:33:40.667043Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/plugins/litespeed-cache/assets/js/webfontloader.min.js","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"45943f1d780bd7d9db946bdc5ed14a5a","sha1":"41a42d3c32fe16108eb653ae903ae1fb86b7e5a8","sha256":"6f58202a14e2dcb4c672d6e9f0881ddc2b4e88225a97aadd940400a7377ee02d","sha512":"673c809a69dc340bd57d95d2fbf6a43354c141a7de33c4983309d8b4ba5182316a5c4b9872053f9d4badaab4924031a34f71f146d0fb00ef627c4f7aa8f65b62","ssdeep":"192:Y3YEHIcPziAZGmm62zVOr+rdmLdOSjTIghu3oHMBoateK3JELi/QFjOfDzry:YbocLiAZGmr2zUyhmPTIghu0MK/K32E8","tlshash":"0942a7597251b53d42a310b317af010666367b2e2c0184ad7a5de9e4ac70efa226ff7c","size":12098,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-09-15T18:33:40.53505Z","times_seen":8702,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/9b4d378cded4a8d22dec63ef9054967d.js?ver=4967d","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80c1fec48691198a3564ac7630159f51","sha1":"bd74ae1c75271ff9d08799e8d63c243d85c6e1ed","sha256":"57ec09d64627bab3880b6f8d44a9082dbf69e290b4def4ae68186b80063f99b2","sha512":"cd8a1008fca251191775bdd2a1c1bdd1253226aacc97b539099770178cd8dcf216a0a8cd5005ed07ffacd5399e82d47e9f074679729e10e1405435ab2630a4b3","ssdeep":"","tlshash":"4721dfc4f2f5d8110a834078699b1b44f237aa7d65b9804838a5d2e3ec787d983777b8","size":1361,"data":"","first_seen":"2024-08-20T15:08:04.836955Z","last_seen":"2026-09-15T18:33:40.559359Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/d61abd2265ffc3a274b7e1352829749b.js?ver=9749b","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cac4ed79b3817d554d6f0350076fde3c","sha1":"bd0fc5933d767e0edae600d81ee730fd6f1e4bf1","sha256":"d90607cc5675f1a12fefa5400ad5001f45220d02b02e032bb23ef530a2eb2b76","sha512":"ade52275c3041753656d425a6e28987bb2e95a6dca32c79e9c161f1d57fade92825dcdf9f17f4a41d6be8e35612830869485c2674ec1b65e79f1e7b8f02b81bd","ssdeep":"96:cgKwUSPE/U2tBKGdo31bP8PvRIG/dU6p3PLfqzRWqw/mCkjtCk8ttfNjgfN0:ceITC1bUnVUODMNjtOtfNUfN0","tlshash":"f8a1b848729764858adb60d8147e38297a76ad5d8989c4fafd3284ac84ffb8c1072d3d","size":4639,"data":"","first_seen":"2025-06-23T04:04:48.49845Z","last_seen":"2026-09-15T18:33:40.630763Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/1bf5e27c9f4f6764cbce06cbfc7b2eb0.js?ver=b2eb0","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9712f1856bdbb392807576f8e2b30a9b","sha1":"a25e17b173219ffdd037bdb1090c149a27b5c7ce","sha256":"0e4ce9053e5a16a6c9e42b855b89fd81385eef8b47e88accfe660659471f7f03","sha512":"4bd45035670ff396f3cec669284825e3cc5dafdce402a25f5619833c47028b5d1a769dd8a00801b8afd8a45ece800f5ee7430a5b63398ba960ae7639961d7fa1","ssdeep":"","tlshash":"b3e0920efacd226a56d3307c3b3f9946973a6e335a059909b85391900eac07f3523c3d","size":387,"data":"","first_seen":"2025-11-03T06:26:55.246135Z","last_seen":"2026-09-15T18:33:40.589843Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-15T20:50:07.270185Z","times_seen":434771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/5cca72d561adb090b90857794df5ce23.js?ver=5ce23","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"705d7c101b107356620cc2b60b2af516","sha1":"ccbbd6c33e748ed40bf721bd2c57240c4dcdf7e7","sha256":"074aba01b782e3e4ea26a6017b3cf64ecb7e7136cee3867ead492561b263d231","sha512":"01421603498e22c68ab7a08006ec57a2b89510fa84781b8c99e4d4a241d033ce9a8b4cc2c6bae5364143fe70e323efb64d1a6baa0c1a02fe5ff94e191e5b73c6","ssdeep":"","tlshash":"6211cc5e2c60d99100f5fba32837fa0c20a76c863a51dc60d4d16d9e9d7c3459f1b80c","size":1015,"data":"","first_seen":"2025-07-01T12:26:32.689636Z","last_seen":"2026-09-15T18:33:40.546526Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/6dbf5bc7fea67fc2fe01898339c59c87.js?ver=59c87","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"94158aa7dbb041e67ea413cb3d16dbbf","sha1":"4ca181ad7627cba45a1c2fd63efea21569046955","sha256":"e0ef8fb2e04bec41638d3faa5db2df52480c966946aec97b18f1c83b9b8b475d","sha512":"d3d3739c92c55ef84f901828900e7d214e04b2c3f0b5a7dc3d572ed204421714b1fdd1f727c8d0d289771be5d125c425a5c799693d6058540cb72d0da318f8ed","ssdeep":"","tlshash":"3a31ed04634d58636f3fb22b10d66504f9e56fefc50ac042359691bcadb8e456372a37","size":1680,"data":"","first_seen":"2026-01-21T16:23:28.384593Z","last_seen":"2026-09-15T18:33:40.504152Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/badd587e842f03ab0cb88e8fc1fe9425.js?ver=e9425","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60948f6d78008176f894f9eefaf3af8d","sha1":"ab977a7ec4b93f47a2c744ac67be345c6d316095","sha256":"f266695689ff2188e07aedba552bc01fe0252ba06918110d1a1ed48948907e2c","sha512":"263bd1de134351cb3727a905511b3a8f3fe0a811fde328978656653c971aa075d29181b87df3c9bb00c9cc2e89bb8e01bdf3b76d5e801f95eb0192c69aa89b03","ssdeep":"96:vZ2BZKvpX1qNBGid8VbTistlg5gmQfzHudD+OlDftagG+G/3MloF3/A/AH:vZ2BZKBGB9iROMi5gmHD+FkG/MlM3I/M","tlshash":"feb1e0632b1a2c79d9cac5ad10aa16402614d187b5c1fdbc7d74d8c6c9f088b32b96fd","size":5208,"data":"","first_seen":"2025-07-07T17:47:21.354413Z","last_seen":"2026-09-15T18:33:40.601173Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,KGZ1bmN0aW9uKHcsZCxzLGksZGwpe3cuX2NlbmVvPXcuX2NlbmVvfHxmdW5jdGlvbigpe3cuX2NlbmVvLmU9dy5fY2VuZW8uZXx8W107dy5fY2VuZW8uZS5wdXNoKGFyZ3VtZW50cyl9O2NvbnN0IGY9ZC5nZXRFbGVtZW50c0J5VGFnTmFtZShzKVswXSxqPWQuY3JlYXRlRWxlbWVudChzKTtqLmRlZmVyPSEwO2ouc3JjPSJodHRwczovL3NzbC5jZW5lby5wbC9jdC92NS9zY3JpcHQuanM/YWNjb3VudEd1aWQ9IitpKyImdD0iK0RhdGUubm93KCkrKGRsPyImZGw9IitkbDonJyk7Zi5wYXJlbnROb2RlLmluc2VydEJlZm9yZShqLGYpfSkod2luZG93LGRvY3VtZW50LCJzY3JpcHQiLCI0ZDYxYzczNC1lNjc2LTRmYTMtYTQxOS0xZGM4NzczOTkwYTAiKQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"348474f555533bd32ba6ba4c74a946fa","sha1":"74d7c750e7272f5ee822af3062d40d265146a5ad","sha256":"6bbfe76dc33529361c2cc76ae5507e0f06f89f805a2ca56d75cb86af62f1ea3e","sha512":"b353aca97bac60d12bd73c6a59ac7c2edc4002c5be8f57b5b4be11850faed635c2562101b8a79e5fcb6adb43b5fd528e771a5ed4cab125d40f5d581687026fca","ssdeep":"","tlshash":"4fe0680e941460c212ec56bba3f76a0c31226248e89244974bb9c4ae3736f934d0ab18","size":367,"data":"","first_seen":"2026-09-15T18:30:44.927038Z","last_seen":"2026-09-15T18:33:40.667604Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,d2luZG93LndwcGQ9eyJkYXRhIjp7ImFqYXhVcmwiOiJodHRwczpcL1wva2F3YXdiaXVyemUucGxcL3dwLWFkbWluXC9hZG1pbi1hamF4LnBocCIsImxvY2FsZSI6InBsX1BMIiwibGFuZyI6InBsIn19","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"16678e1e2eac76294012326ad173d60a","sha1":"06b7fc746332fd57ee3e158020feaa7e34ea0fef","sha256":"2492e1d0a8a6009df560a07e088ee684fc7c0791eb6056d023c0f2f9cb08a1d3","sha512":"e8fb653cbd347203adb2e9c3fd671ae377dbdde3aba23e10fc7cbfb03e7245679148181c842325c6f599f41d7dfbce079703768f8cbd3e99142fde409ac19179","ssdeep":"","tlshash":"d3b022b33c880e0b80eccff00e08bb22a0c020000e803a0003aea3200a8e30fcc008ef","size":114,"data":"","first_seen":"2026-09-15T18:30:44.913314Z","last_seen":"2026-09-15T18:33:40.668295Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/e76eac4c88f19242dba893b529d25a3b.js?ver=25a3b","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"737eabc5c3c8fd20b78acc31843d10e4","sha1":"92b3fb441847c83c59f6e849d4e74121addad518","sha256":"6cc9a80b0b6fba9af3298bb09c8dcd5457f875a37003c9c31833bfea8835e6e2","sha512":"9c0f3ff581ebcf86286cc4477721fcc70eb268e29c462012cd926626ed501f8b73dd768664e487491d26baac968933b2f7dd2429b31040d258159fcd6cdb89c1","ssdeep":"","tlshash":"0f2121dae848111a51c7246c70e7131c32bdd354d0108528b92ee9df29f5bc9647eb70","size":1193,"data":"","first_seen":"2023-03-07T22:39:39Z","last_seen":"2026-09-15T18:33:40.558215Z","times_seen":723,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHB3Yl9hamF4X29iamVjdD17ImNhcm91c2VsX3ByZXYiOiJcdTAwM0MiLCJjYXJvdXNlbF9uZXh0IjoiXHUwMDNFIn0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfef46513b341ffd6d05cf615b018393","sha1":"1d570dbbd15cd55041593ac57f92c3b96ed1aee6","sha256":"ea04dda040f58d59f3f0aea292551a73c06f4b9dc727cba670e8d7683873b800","sha512":"fa1476e535963d973bdf1db2daedbd6e30baf3a791653ae7fad569a5ac2a93d238ce648491eae43694ccb01b2257a0a7f7d90916ac915b95c3c4de95251b87bb","ssdeep":"","tlshash":"fba002207a0ac8674c8302268d27421fb48aab5925415da0dbf7dd40c751402c9b9d8f","size":71,"data":"","first_seen":"2025-12-21T18:15:08.122857Z","last_seen":"2026-09-15T18:33:40.669058Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/themes/enfold/js/avia-js.min.js","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b75d7a960412bcef94e81e0e41759d0a","sha1":"a982c50f9029629ece7b508f32b45e37d007727c","sha256":"d9ea20211068d114e67e60e94eb02dfbcb0778b4872153d3008a79778354928d","sha512":"f36e858838eda6cc6436c17b6f7931cf2f996730222b7c4107ceb9d65b7f3ad2edd7936fa40d9c63229303bbb71578fe8cf42c1616c36e39c8045b1af142cce1","ssdeep":"","tlshash":"732133862075a065d1b9812af1b541c2b0f81dd8315df044a3bdf4b52e61c5fe27bbf6","size":1339,"data":"","first_seen":"2025-06-19T09:00:45.586098Z","last_seen":"2026-09-15T18:33:40.545556Z","times_seen":344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/2b80758cd63157cd4ab2bcafce57e6ed.js?ver=7e6ed","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"04466d186b1dbc78abe9c7b8b80467d0","sha1":"5654c91400708278f86e644b0c8ac7835e4a2347","sha256":"ff6238de7b557de4e826a8f7bdb9b58e319237e83cd8bd7e17f3b54936424f74","sha512":"f3f11ad77da9b89a7e5942b0fb1483c52e17991c9bd8634ccde2c8d56541da5f6843601a6e23f8a9d5b36589fbef53fd31d82a566689718a7a3f52e4c4f535ab","ssdeep":"192:OoDTUD0fRPJMJpLrcc1SehNhz5YKsYLPehNhzfivnQnLrQzx/4I3yJmuiAJ67tuj:L3U+hivQnLrQzx/4I3yJ3iAJ9j","tlshash":"1972328dbd60eaab21eb717738ffb98431611c211384ca21e49d0a1d4fa8f497d1fe59","size":17520,"data":"","first_seen":"2025-07-01T12:26:32.725617Z","last_seen":"2026-09-15T18:33:40.52739Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/d6a3a4c6f28351acaa331dcea2e12a20.js?ver=12a20","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c36a0145b06f33ec83ed96b75dc5bc0","sha1":"4a68aa6165d392494a3826c8737e3955d1735d62","sha256":"6562c065727f5ecbbca42e74d7fa8ee4e42158c0a534ac8939312e9b816f02d3","sha512":"614946bc4d43177b038e56defbf4fe3959834a7a2f87697f0abca7b4ab2a26a46ea68a7cdda88f2cf7b398e21971e2b353473e7706bf617d8457411ec164bced","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmsc:lPBIt8I5h5t1qkOLCMsc","tlshash":"23921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","size":20218,"data":"","first_seen":"2023-03-07T14:00:10Z","last_seen":"2026-09-15T18:33:40.565912Z","times_seen":694,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/59c51d6eaa4cb33475a8d8e3d66d21b8.js?ver=d21b8","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8febc92f99c2aeaa04808f0231164b1c","sha1":"91d7c46f06862f2cab09584d3562e5751d8681a1","sha256":"9c95d41f10b01d356159e0fa814dbd7088f696d622124598533ef97022a1632a","sha512":"4f01a5504b0885b16d89885602db66da14a376805c91f6a6c1f03db4b9ade2b806de04def0f9e67b00da954044b062c6cdb6b0d90fe6d6d5d306cbecd9c43524","ssdeep":"192:mEPKasXzHz9D5/6J8bvctcfq7T5EsvfikrCeexsvfip9Y8pY7pZpzbhHyQ8HFl8I:mESjzHz9Dpm8L2cfq7T5EsvCeexsvfiL","tlshash":"b1027189760174221b9f90fad91f434aa3375828b40580bdb0d4d4ee28f252d777bfba","size":8969,"data":"","first_seen":"2025-01-07T15:38:30.269049Z","last_seen":"2026-09-15T18:33:40.64501Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/38f37c7c2dce0500c6c05df4a018b1e5.js?ver=8b1e5","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d1a517d9c6062ccca6dbc982e50f7e6","sha1":"67ae4563a0b2a93ed63b2125c2dce3d1c3aea97b","sha256":"9220c5a1090193c17c83e170be6bec8771c3665031e9389e4e7428e75fe2ece9","sha512":"74b21b4a966b3559b61e6b73956f7790c250e2f042af5accdb22fa18190519d537935b61e8510c8b2cdc09d6cb50288dbd08e2c4f96fbfc893ac52fa871f3752","ssdeep":"","tlshash":"b3213018e3253481a3fa7dec005f4002a12ddc77d2438d4692e7ceaa46fee202a75d3a","size":1150,"data":"","first_seen":"2025-07-07T17:47:21.373279Z","last_seen":"2026-09-15T18:33:40.555805Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/143b6399555909908b18c39c7556d1ba.js?ver=6d1ba","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2af095c67026488767ef068973d8cf9","sha1":"d53f69743a7c7322f05383ae11113d5bd5b1dffd","sha256":"4d7c6223f78823799b7a5134ad9a32205f55dd7d0df4d3bd5f1de080dc63beb7","sha512":"b2e84ad9e33918666f9d329a1c0c7ad05d90f07ec3a20ced67ea879fdb7693a1311b8117b3bd43e8dae666b17f68f58a7b4844f1deccb25c92659f55cccb084b","ssdeep":"192:x9cCxjlRE8iST7TMcPvedRUtV7uLEUfHqo/gH5P5AxTov7fG3ex2NrMO:x9RjlRE8iSf4cPmgtV7uoOKIgxaxTovo","tlshash":"7812e96831f3215780b7b1907cf7e38f73b2553c648798d1d0acd4692aacd7a2622f09","size":9638,"data":"","first_seen":"2023-08-29T20:44:31Z","last_seen":"2026-09-15T18:33:40.527902Z","times_seen":4468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/7f3909d726db8e0143cc133d1fb94be6.js?ver=94be6","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a81fb88243dd86fd00dbdc39ed5902bd","sha1":"4af19fd36c4cc0b87c0b48f1c73830dd48bb69d9","sha256":"4195f94060a1abda9366ed8ece389b9b6cd73b61975425df3c4f16e581d633f7","sha512":"6f90a3f2ee2581fe1ab59694e4e8874955390f16c0cb00affa89c13d59ace721cbb3aa0a670dfdca7531b3ddfabcf56c91c2cf8a4e5eed1a28230014a3c9ad20","ssdeep":"","tlshash":"2f61444df760117141afb2752dafb80d62b368751e020120a47b66750ebeb8e73e3e5d","size":3330,"data":"","first_seen":"2025-10-10T13:13:00.550518Z","last_seen":"2026-09-15T18:33:40.622971Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.ceneo.pl/shops/sw.js?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0","fqdn":"ssl.ceneo.pl","domain":"ceneo.pl","tld":"pl"},"ip":{"addr":"5.134.209.153","port":443,"asn":42656,"as":"Allegro sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfb8bf227f2ac0e9a84d1af28b9e1ed6","sha1":"b3c2bdd35074146d545fc57afc107bfc462674de","sha256":"4a26c2fead456ba88352906a459107c6a7f0729ce934ffdb105a82a094b92d7e","sha512":"425dd57ff89661a54d2373d3cadac04804d7696863380047eb5eedf5e79f683faf008a52bda7b2131f7ab3ee20911b6649d5339164530cd07932db9e032fb47b","ssdeep":"","tlshash":"ad8174a97505172543da847f51ba13287030e91eee0c40c48cf5983a75e9edd6277bbe","size":3967,"data":"","first_seen":"2026-09-15T18:33:40.521295Z","last_seen":"2026-09-15T18:33:40.521295Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3bo67muzbfgtl.cloudfront.net/edrone_subscription.js","fqdn":"d3bo67muzbfgtl.cloudfront.net","domain":"d3bo67muzbfgtl.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.233.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4244894e2efd38bd31819da6a784e66e","sha1":"a7e71711820b22a8e5a64167e84f13464a9fd182","sha256":"447613d70134e3a26994f444690f5c6d51ae8a806b86ab854245067858e81849","sha512":"755b48e83ea3a5137d35caf3209c952a68614ae7265af9513f311b5208f090023c27d6d59aeb56e6fdc127f7b8312f0c85ed927efd1cbf6586abbe6f5692690e","ssdeep":"192:FyOcBwSu8Yfirx3pppfyOcpL4ON/yKNzr4k8SyuRjy7CG9JMDNL4OggO2jjsziSM:ypppHc+fwpN222memNEEHPsu","tlshash":"98522f9956bf21709267207c4fcb1045f634a04b6945ce5d7e9c83949fc8eb8a2f3fa8","size":13282,"data":"","first_seen":"2026-04-17T18:48:40.866426Z","last_seen":"2026-09-15T18:33:40.650616Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIE15QWpheD17ImFqYXh1cmwiOiJodHRwczovL2thd2F3Yml1cnplLnBsL3dwLWFkbWluL2FkbWluLWFqYXgucGhwIiwic2VjdXJpdHkiOiI4Mzg5NTM5YzZjIn0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b6ff06d3fc5b84996d31ba97e8047eb","sha1":"35670536de316d574ced77b68a134ec4ff236658","sha256":"88d639dcb86feaa9f824b3a817f2d2ee09c2c25d7e0f03d7f09c18405373698e","sha512":"44e4eb65049c6fc80643aa435f25385e9bf32d782628eb1b9943c0cdcd729d400a224b9526ddc3c9c616648825595ebd7516084ec87059a2ecc5422493ec5115","ssdeep":"","tlshash":"cdb012b3055c4eb6d7d16be101a4691e407326316aa134015dc28a449208c10ce05482","size":95,"data":"","first_seen":"2026-09-15T18:30:44.892188Z","last_seen":"2026-09-15T18:33:40.669835Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,ZG9jdW1lbnQuYWRkRXZlbnRMaXN0ZW5lcignRE9NQ29udGVudExvYWRlZCcsZnVuY3Rpb24oKXtjb25zdCBwcmljZVRoPWRvY3VtZW50LnF1ZXJ5U2VsZWN0b3IoJ3RoLnByb2R1Y3QtcHJpY2UnKTtpZihwcmljZVRoKXtwcmljZVRoLnRleHRDb250ZW50PSdDZW5hIHphIHN6dHVrxJknfQpjb25zdCBzdWJ0b3RhbFRoPWRvY3VtZW50LnF1ZXJ5U2VsZWN0b3IoJ3RoLnByb2R1Y3Qtc3VidG90YWwnKTtpZihzdWJ0b3RhbFRoKXtzdWJ0b3RhbFRoLnRleHRDb250ZW50PSdTdW1hJ319KQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"29c8655a72441ed86250ef1ed3151614","sha1":"44038857fbcf833b9bf74613f6c00f3c65e440d0","sha256":"a36b24c9d829591b63adbe4400ae225773cc225a2fd243220fee054fd0a13549","sha512":"77375261ad62f485e3f9255b38b065fb7559a869d8f45bcb83191645d46a86a58f60b7f5d6558fbd6b9f2d66798c8ced33933a8f8290ab8d5d058bccd5ef2999","ssdeep":"","tlshash":"44d0c220b634087a535489b2a59493937ff5304f79839057058ca4893cd0f5803b089a","size":274,"data":"","first_seen":"2026-09-15T18:30:44.88367Z","last_seen":"2026-09-15T18:33:40.673644Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHlpdGhfaW5mcz17Im5hdlNlbGVjdG9yIjoibmF2LnBhZ2luYXRpb24iLCJuZXh0U2VsZWN0b3IiOiJuYXYucGFnaW5hdGlvbiBhLm5leHRfcGFnZSIsIml0ZW1TZWxlY3RvciI6Ii5wcm9kdWN0IiwiY29udGVudFNlbGVjdG9yIjoiLnByb2R1Y3RzIiwibG9hZGVyIjoiaHR0cHM6Ly9rYXdhd2JpdXJ6ZS5wbC93cC1jb250ZW50L3VwbG9hZHMvMjAyNC8wMy9sb2FkaW5nLWthd2EuZ2lmIiwic2hvcCI6IiJ9","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"92e5d4af8794354a451343855c5c3721","sha1":"58f9ec2901e48778dfc3de5c9d62908e0645ce70","sha256":"cdb5de6df8315136f64cbddde264a9a427d0f74f5c18ecc05b7a416307a5b8e8","sha512":"5dcac7eba7fd9a4bbb5fd8567570a7af65e471c50b5d4bb65687fdfb42bebb63bdd999dec8fc9cee90eeba6dcd2e0f49c8c2c7d32c03f50ba3dea4eef0e094c1","ssdeep":"","tlshash":"bbd0a7b58a7ec57c476b577304c02c58ecc1419fc3444f8a72d8009c49c0618831287a","size":234,"data":"","first_seen":"2026-09-15T18:30:44.884763Z","last_seen":"2026-09-15T18:33:40.674376Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIF93cG1lanNTZXR0aW5ncz17InBsdWdpblBhdGgiOiIvd3AtaW5jbHVkZXMvanMvbWVkaWFlbGVtZW50LyIsImNsYXNzUHJlZml4IjoibWVqcy0iLCJzdHJldGNoaW5nIjoicmVzcG9uc2l2ZSIsImF1ZGlvU2hvcnRjb2RlTGlicmFyeSI6Im1lZGlhZWxlbWVudCIsInZpZGVvU2hvcnRjb2RlTGlicmFyeSI6Im1lZGlhZWxlbWVudCJ9","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"39641f44d701ee33f0970f0254fc04a4","sha1":"aac308838d7e60c01fa3c9b30abe74aa2cf325b4","sha256":"dee9f63cb492dca3bc1d9e18ea3080be0f4643424737ee90f43d2d16448cdf94","sha512":"0825bc2ba9949da78400fa3eba17d98b2669c815787efd2a0e272bcd0a838bca7dfa0b02bd4c0c9393fc42fe100cd981819e3bd72c4ecb3e851b753f9cc22c34","ssdeep":"","tlshash":"21c012d46f29421402db451d5605460d864e4fb705029e7faeb8696a0aafe846152a31","size":192,"data":"","first_seen":"2025-12-03T00:35:47.980985Z","last_seen":"2026-09-15T18:33:40.675145Z","times_seen":524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/c6459a7e4540e02b86f543543fd40e19.js?ver=40e19","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"325d7d7b5e160e2b7a37a51e4fa404b1","sha1":"d81d9f03ae8bec2174b568260f179a4c7f238697","sha256":"d2e43acbde1a19336cffb7dbaa6d41dec3f922c4f1e4aedbfbf2d3d55390834e","sha512":"5e0466ce5df7fea4d881c38892d822c3167ddb01280d2037087ace8d637bdd0133db73cf7b4e0666cc07d46167cfd0e487117e8a32f7e2cc480abcffb8373b27","ssdeep":"","tlshash":"6a6110087bd6b19764ebd078f2dff25d3039656b5488c070a00d86948a7fc8af67ad28","size":3310,"data":"","first_seen":"2025-07-01T12:26:32.707172Z","last_seen":"2026-09-15T18:33:40.51594Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,KGZ1bmN0aW9uKCQpe2Z1bmN0aW9uIGF2aWFfYXBwbHlfcXVhbnRfYnRuKCl7alF1ZXJ5KCIucXVhbnRpdHkgaW5wdXRbdHlwZT1udW1iZXJdIikuZWFjaChmdW5jdGlvbigpe3ZhciBudW1iZXI9JCh0aGlzKSxtYXg9cGFyc2VGbG9hdChudW1iZXIuYXR0cignbWF4JykpLG1pbj1wYXJzZUZsb2F0KG51bWJlci5hdHRyKCdtaW4nKSksc3RlcD1wYXJzZUludChudW1iZXIuYXR0cignc3RlcCcpLDEwKSxuZXdOdW09alF1ZXJ5KGpRdWVyeSgnPGRpdiAvPicpLmFwcGVuZChudW1iZXIuY2xvbmUoITApKS5odG1sKCkucmVwbGFjZSgnbnVtYmVyJywndGV4dCcpKS5pbnNlcnRBZnRlcihudW1iZXIpO251bWJlci5yZW1vdmUoKTtzZXRUaW1lb3V0KGZ1bmN0aW9uKCl7aWYobmV3TnVtLm5leHQoJy5wbHVzJykubGVuZ3RoPT09MCl7dmFyIG1pbnVzPWpRdWVyeSgnPGlucHV0IHR5cGU9ImJ1dHRvbiIgdmFsdWU9Ii0iIGNsYXNzPSJtaW51cyI+JykuaW5zZXJ0QmVmb3JlKG5ld051bSkscGx1cz1qUXVlcnkoJzxpbnB1dCB0eXBlPSJidXR0b24iIHZhbHVlPSIrIiBjbGFzcz0icGx1cyI+JykuaW5zZXJ0QWZ0ZXIobmV3TnVtKTttaW51cy5vbignY2xpY2snLGZ1bmN0aW9uKCl7dmFyIHRoZV92YWw9cGFyc2VJbnQobmV3TnVtLnZhbCgpLDEwKS1zdGVwO3RoZV92YWw9dGhlX3ZhbDwwPzA6dGhlX3ZhbDt0aGVfdmFsPXRoZV92YWw8bWluP21pbjp0aGVfdmFsO25ld051bS52YWwodGhlX3ZhbCkudHJpZ2dlcigiY2hhbmdlIil9KTtwbHVzLm9uKCdjbGljaycsZnVuY3Rpb24oKXt2YXIgdGhlX3ZhbD1wYXJzZUludChuZXdOdW0udmFsKCksMTApK3N0ZXA7dGhlX3ZhbD10aGVfdmFsPm1heD9tYXg6dGhlX3ZhbDtuZXdOdW0udmFsKHRoZV92YWwpLnRyaWdnZXIoImNoYW5nZSIpfSl9fSwxMCl9KX0KJChkb2N1bWVudCkucmVhZHkoZnVuY3Rpb24oKXskKGRvY3VtZW50KS5vbignZGd3dFdjYXNEZXRhaWxzUGFuZWxMb2FkZWQnLGZ1bmN0aW9uKCl7YXZpYV9hcHBseV9xdWFudF9idG4oKX0pfSl9KGpRdWVyeSkp","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"876dd22837a12b15185d5dd45e8f167c","sha1":"fb9d234165aba67962b0ca381e2c34096d340dcd","sha256":"d384409775bb41d41157d3f80fd9de9bd823e7664b0bef6bf0847be72afa3c2a","sha512":"8552c10a4e95d45744ab895097500bbf46ca43e5f6d644fa5e6e33ab823384de9098d4808fa94436f267384449d9ef9877ba3522637e8d276b00b2ebd8eccfbb","ssdeep":"","tlshash":"98113538a65069a93a3653e2907e6f11306f9891a50644acd58724f23f35e103669e6e","size":1020,"data":"","first_seen":"2026-09-15T18:30:44.878338Z","last_seen":"2026-09-15T18:33:40.67569Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/2f8d52af5e7f9103e13988711f991a8d.js?ver=91a8d","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d2eb626147a55b0aac50b528c77f52c","sha1":"964d5180ce85536acc29b91483ce768accf90578","sha256":"5beb63de67d351eace05556208479daf1dd460531af183ae591b134a3c99e1f6","sha512":"b3e6b1a080b10680269aa247c19a2d6455168b603e7462c3c38234500e33974f77ba818d8d35db5845cc07e73a0054cd6c7cca387534de7bad7c60e81131cc42","ssdeep":"","tlshash":"f2518335b001a826c37782d997aba651b335662d760290dca19c8cb43a39c0b7972cbf","size":2441,"data":"","first_seen":"2026-02-07T04:48:35.459834Z","last_seen":"2026-09-15T18:33:40.576134Z","times_seen":1431,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/7007e4852bcb8114bd9ae725d9c0245e.js?ver=0245e","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce02ff980839899816632f5def2ee303","sha1":"21db2fb7e9dd18ce8f061fed1e0ac44b68bcc759","sha256":"75f6a371b822d7e60f873bf07448ee27b6d17abf537a40c5e015cf06422d3176","sha512":"28fb48cbd8416e851b12cb65db93118fe5cbade85cffa43baa07bc5798215287ae6647683e663f6bd54f123dcc93165e8a309b04a7defdb283a7e51b82fb51d1","ssdeep":"","tlshash":"16110488b316686c41ff2172399f359119119f594009a80f899e74a06fe8e9960bbf2f","size":901,"data":"","first_seen":"2025-11-03T06:26:55.174596Z","last_seen":"2026-09-15T18:33:40.5841Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/248c4b3e714ed64587bdf4245162fde5.js?ver=2fde5","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12d7e7b68c1b9212e72b951ed6ddf9b6","sha1":"c432b54d9747a02ad5cdcedb2d97c10ef9143e86","sha256":"ad41c5f4ec3d8b10f0124453a87602dd3bc5391baca520ed7ab4fc9322533e42","sha512":"32ed883897729fed18225b725f6eceb784aa931c2ca0f367b5e0b023c6286001cedb2f89d4657074e3b17f570bab2cc3d037a16d0d86ec96a0cae3f13b78de26","ssdeep":"1536:L/bvBouCbBZO2Npv/VbbLI2Vj91cqd+3Va1h9slWE:L/bZolP1rc9WE","tlshash":"5963d948b14271b791fb14a670db62093d716f28d80722e1336bc5615a3bfc3619fbe9","size":68913,"data":"","first_seen":"2025-11-23T04:47:34.540091Z","last_seen":"2026-09-15T18:33:40.51071Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/af534397320ca88b40572dea2d12e698.js?ver=2e698","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"794c32fbbdfbb488b065b582facea1d6","sha1":"18418401fd9704cb0479a27382bbfd1361a90cb6","sha256":"843abd3b5ed496861416ac80916d30c51f135c92edbbf812ab106306ed07caef","sha512":"6f1925ee2233c0214e65860fa1fcd127a1c009b5802bc3f34db8a344cb8de74c4ec05c445e41ccf12440fc1398b71133a6198bd2eb3845f573360db0406bc357","ssdeep":"384:Kbroi4IJAJW68RddRHXOvC2xQ+n//Y3C9DFvw9z/2s4LN2ZsZw:KQDCMQ+n/rRFo92saNlZw","tlshash":"88921b58f1a3b21783ab75b86c5f240c3b72a626c907c0057659d8e86cfde84a127f3c","size":20728,"data":"","first_seen":"2025-01-07T15:38:30.214379Z","last_seen":"2026-09-15T18:33:40.573947Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/9153a5185dc8fbabd16845ab48bf69f7.js?ver=f69f7","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f48530a5168cbb27c427868deb844da0","sha1":"e242442aa2e345b3a0fc03889bb07ae847643c30","sha256":"ce6bb90f8f07116f1e8e05f997c09429b68c3f5e5209d84f0562eace5531987a","sha512":"ad4b5c6d31f53520f26270cfbdfacad40cb7d4ec778ec06b03cb1b7dcd45678e9dec7161e95db631f36ea3c1a6b21206d1d2caea354b920df196dcf9a20ef551","ssdeep":"768:6ovEZXteTlaCaedY5+R5SHf7QQipB72z1EuPLkhDWucxooq7:6JZXteTlaCaedY5+R5AipBqz+cxooq7","tlshash":"9cf2c51e30007d2a927b51a6053a3a179233095fad50c11cbd6ea6ee5b7cc4573befb2","size":36750,"data":"","first_seen":"2025-04-30T09:58:43.668306Z","last_seen":"2026-09-15T18:33:40.595519Z","times_seen":679,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/3e808a3e0288d743ec10c77e7c6b0384.js?ver=b0384","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4f6a0930e7ca0e04d7a9bafe8176491","sha1":"42fe8bec70615328b5daef1a4fcafab7b09725e2","sha256":"aa45c0927773d20985d270042cbf7ccf8a47ad49757a5840c448232f9687b56d","sha512":"7550b8650a932b4fd35a4b21539d9c9d31b3a963f242dc5f8d5938c1b4953b2a2db23f905a79b7278e43ed6a59566b52f3ed0306c04790107a2a27ccf874e4e9","ssdeep":"96:C2Od0nwC38gKXsbnb+/UfeNAMdBMQmuEJU1FVBskozslStcEA3oUHO8LHUhOgRAT:NwC38gKXkOUfNxLEFRt3oUL0hOgm/b","tlshash":"5ae1622873a43077c48bb067b25b27595432b2777604eb3a210f7d7c1a5dd82528bf3a","size":7003,"data":"","first_seen":"2025-07-01T12:26:32.615817Z","last_seen":"2026-09-15T18:33:40.513032Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,KGZ1bmN0aW9uKCQpeyQod2luZG93KS5vbignbG9hZCcsZnVuY3Rpb24oKXskKCcuZGd3dC13Y2FzLXNlYXJjaC1lbmZvbGQtd3JhcHBlcicpLm9uKCdjbGljaycsZnVuY3Rpb24oKXtyZXR1cm4hMX0pfSl9KGpRdWVyeSkp","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b66db5b082ec65ac110a1095dfc5f8b","sha1":"8a4b1df263f38fdba6cff6a566690d0ada6ed79b","sha256":"b7a029b6146de8409b10b01663c39a1b172e4312df3c51eba24e318c3c773fb0","sha512":"3b102d42c47b3987e53c8ece59a5706969356ab37fb1ff2dde6d0f6a944a7945835ea054d2250791561e5b804f88ea381507ecea75f7f7467dcc0e222c650b8b","ssdeep":"","tlshash":"c3b02b0f7831703700213c2c503f360527270b410c020a2143c000f03d3500f807758c","size":126,"data":"","first_seen":"2026-09-15T18:30:44.907272Z","last_seen":"2026-09-15T18:33:40.676709Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGF3ZHJfcGFyYW1zPXsiYWpheHVybCI6Imh0dHBzOi8va2F3YXdiaXVyemUucGwvd3AtYWRtaW4vYWRtaW4tYWpheC5waHAiLCJub25jZSI6IjI2ZjI3NzU0NTUiLCJlbmFibGVfdXBkYXRlX3ByaWNlX3dpdGhfcXR5Ijoic2hvd193aGVuX21hdGNoZWQiLCJyZWZyZXNoX29yZGVyX3JldmlldyI6IjAiLCJjdXN0b21fdGFyZ2V0X3NpbXBsZV9wcm9kdWN0IjoiIiwiY3VzdG9tX3RhcmdldF92YXJpYWJsZV9wcm9kdWN0IjoiIiwianNfaW5pdF90cmlnZ2VyIjoiIiwiYXdkcl9vcGFjaXR5X3RvX2J1bGtfdGFibGUiOiIiLCJhd2RyX2R5bmFtaWNfYnVsa190YWJsZV9zdGF0dXMiOiIwIiwiYXdkcl9keW5hbWljX2J1bGtfdGFibGVfb2ZmIjoib24iLCJjdXN0b21fc2ltcGxlX3Byb2R1Y3RfaWRfc2VsZWN0b3IiOiIiLCJjdXN0b21fdmFyaWFibGVfcHJvZHVjdF9pZF9zZWxlY3RvciI6IiJ9","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3e75d09e3f9e715b905839001e3e604","sha1":"86ade6db7ead9254a660296a72248757208c2986","sha256":"7f773f158d3b4346e2d7df46366e383494a59fa9a3eef196a6abaa64900db437","sha512":"9621ab8a27b78564ea6e84edd9e4c8f47182d50aedf713a2637deee4a0c43d2468dd42c4449e0ce1fc5975d8cf95a5f1e7b3c4b918e7353cb146fe8ce167b20c","ssdeep":"","tlshash":"73f0a370f231db3528dec276c46c5e5df4c1517b10dd0821fa94cd180d94644c70d84d","size":450,"data":"","first_seen":"2026-09-15T18:30:44.903161Z","last_seen":"2026-09-15T18:33:40.678169Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/35c4f2c65f05836a861847e11b9ebadd.js?ver=ebadd","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6348dd1b70644d781b4bf7b6b56b3fdc","sha1":"7baf9223b31c2b28a2356690ae7c53199b1386d0","sha256":"e709ec7ea8a0889d33f7ba3ee32b1f41b02e5a857b509468fce7c52716965399","sha512":"539b77d189dffdcb25bd5ce5bd24797bdcac12ae40622885db0432417b4f6cdd09d8a63768c33a0de02d5d744a2a91989efcbfd3670971d451e7660d24ccfe6d","ssdeep":"","tlshash":"29513fc8f266b2b35fb73677289f87c47235e23301954448b47aa1e25f64d02623b51e","size":3020,"data":"","first_seen":"2025-03-17T12:42:58.167678Z","last_seen":"2026-09-15T18:33:40.525714Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/cmplz-cookiebanner-js-extra","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f0d69ce8f2b1a703234e50534ddab","sha1":"06ce4056af1d1454fca6cb4924bf98718a83005d","sha256":"6c1d3e07fa84265ddec208486defc70e9f3200ae2ce03ccf6695534774164b1c","sha512":"39aeefc7305890c1e86cc96e03330543f42244f0bde34d669ad8c47e06cf3038f74828d4d4194358d520a54aebbef95671d81e5be2e4ee81ad4fa12abac4af72","ssdeep":"","tlshash":"b871f127da2dc0bd86cfe3f49e7c6e0fa0dc3515c0989018daba9d1886e81165b5864b","size":3650,"data":"","first_seen":"2026-09-15T18:30:44.926154Z","last_seen":"2026-09-15T18:33:40.679064Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/8dcc229beb67a607cf4332efabc65e53.js?ver=65e53","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef82bb8b86d8ffff3cac4cf5e5ba7ad7","sha1":"4caf6ab11839898c65eba8e41553b9020833dd00","sha256":"488001d3195108d60396d2f7f99e8465f8c94f885aa6d4dc05508973b29ce00f","sha512":"4c25836bcff43e9c7324018b91759482657ac1e4a1798e086632ff08de8a34ba4f9c47b34e8f86c49b7e9bae5097d51d2e94305f5015d9dbdf7af7dd156dabb2","ssdeep":"768:/pRAA7wYe9crf/avvvKSGVHDKAuFj+2xJEy:fAYwB9c2CSGVcj+2xJEy","tlshash":"bbc20a4df312617141fba1b9702f260911329866a10144f8347ecbe4ed7ef95a2e7fba","size":26275,"data":"","first_seen":"2025-07-07T17:47:21.383616Z","last_seen":"2026-09-15T18:33:40.64146Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"01fbba843d1320c1f909517357486e9c","sha1":"8a8b418ccba8d244b90c819c02977c417f590624","sha256":"b9b100fe5916f0d70239d147ce7a1cdc9e2425557f09a7392907985d7ba50a4f","sha512":"bc89b817c552267e564787fb4bb0a879e97ac4a1a7f3ddfa8371025845095537645fcfd4eefad05cbfc78125d9784e54880037a1a7db37e87e81da3df80a455a","ssdeep":"","tlshash":"5251bc9d803078bb1b2883d9ac7c879db0eecb9bc41650916bff4dc97287c2565314ad","size":2855,"data":"","first_seen":"2026-02-20T20:34:58.675345Z","last_seen":"2026-09-15T18:33:40.679935Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGRnd3Rfd2Nhcz17ImxhYmVscyI6eyJwcm9kdWN0X3BsdSI6IlByb2R1a3R5IiwidmVuZG9yIjoiU3ByemVkYXdjYSIsInZlbmRvcl9wbHUiOiJTcHJ6ZWRhd2N5Iiwic2t1X2xhYmVsIjoiU0tVOiIsInNhbGVfYmFkZ2UiOiJQcm9tb2NqYSIsInZlbmRvcl9zb2xkX2J5IjoiU3ByemVkYXdhbmUgcHJ6ZXo6IiwiZmVhdHVyZWRfYmFkZ2UiOiJXeXJcdTAwZjNcdTAxN2NuaW9uZSIsImluIjoidyIsInJlYWRfbW9yZSI6ImtvbnR5bnV1aiBjenl0YW5pZSIsIm5vX3Jlc3VsdHMiOiJcIlx1MDAzQ3BcdTAwM0VOaWUgbW9cXHUwMTdjZXN6IHpuYWxlXFx1MDE3YVxcdTAxMDcgcHJvZHVrdHU/XHUwMDNDL3BcdTAwM0VcXHJcXG5cdTAwM0N1bFx1MDAzRVxcclxcbiAgXHUwMDNDbGlcdTAwM0VTcHJhd2RcXHUwMTdhIGN6eSB3cGlzdWplc3ogcG9wcmF3blxcdTAxMDUgbmF6d1xcdTAxMTkgcHJvZHVrdHVcdTAwM0MvbGlcdTAwM0VcXHJcXG4gIFx1MDAzQ2xpXHUwMDNFTmFwaXN6IGRvIG5hcyBcdTAwM0NhIGhyZWY9XFxcInNrbGVwQGthd2F3Yml1cnplLnBsXFxcIlx1MDAzRXNrbGVwQGthd2F3Yml1cnplLnBsXHUwMDNDL2FcdTAwM0VcdTAwM0MvbGlcdTAwM0VcXHJcXG4gIFx1MDAzQ2xpXHUwMDNFbHViIFphZHp3b1xcdTAxNDQgXHUwMDNDYSBocmVmPVxcXCJ0ZWw6KzQ4IDc5MC04MDAtMTAzXFxcIlx1MDAzRSs0OCA3OTAtODAwLTEwMyBcdTAwM0MvYVx1MDAzRVx1MDAzQy9saVx1MDAzRVxcclxcblx1MDAzQy91bFx1MDAzRVwiIiwibm9fcmVzdWx0c19kZWZhdWx0IjoiQnJhayB3eW5pa1x1MDBmM3ciLCJzaG93X21vcmUiOiJab2JhY3ogd3N6eXN0a2llIHByb2R1a3R5Iiwic2hvd19tb3JlX2RldGFpbHMiOiJab2JhY3ogd3N6eXN0a2llIHByb2R1a3R5Iiwic2VhcmNoX3BsYWNlaG9sZGVyIjoiU3p1a2FqIHByb2R1a3RcdTAwZjN3Iiwic3VibWl0IjoiIiwic2VhcmNoX2hpc3QiOiJUd29qYSBoaXN0b3JpYSB3eXN6dWtpd2FuaWEiLCJzZWFyY2hfaGlzdF9jbGVhciI6Ild5Y3p5XHUwMTViXHUwMTA3IiwibW9iX292ZXJsYXlfbGFiZWwiOiJPcGVuIHNlYXJjaCBpbiB0aGUgbW9iaWxlIG92ZXJsYXkiLCJwb3N0X3R5cGVfcG9zdF9wbHUiOiJXcGlzeSIsInBvc3RfdHlwZV9wb3N0IjoiV3BpcyIsInBvc3RfdHlwZV9wYWdlX3BsdSI6IlN0cm9ueSIsInBvc3RfdHlwZV9wYWdlIjoiU3Ryb25hIiwidGF4X3Byb2R1Y3RfY2F0X3BsdSI6IkthdGVnb3JpZSIsInRheF9wcm9kdWN0X2NhdCI6IkthdGVnb3JpYSIsInRheF9wcm9kdWN0X3RhZ19wbHUiOiJUYWdpIiwidGF4X3Byb2R1Y3RfdGFnIjoiVGFnIiwidGF4X3B3Yi1icmFuZF9wbHUiOiJNYXJraSIsInRheF9wd2ItYnJhbmQiOiJNYXJrYSJ9LCJhamF4X3NlYXJjaF9lbmRwb2ludCI6Imh0dHBzOi8va2F3YXdiaXVyemUucGwvd3AtY29udGVudC9wbHVnaW5zL2FqYXgtc2VhcmNoLWZvci13b29jb21tZXJjZS1wcmVtaXVtL2luY2x1ZGVzL0VuZ2luZXMvVE5UU2VhcmNoTXlTUUwvRW5kcG9pbnRzL3NlYXJjaC5waHAiLCJhamF4X2RldGFpbHNfZW5kcG9pbnQiOiIvP3djLWFqYXg9ZGd3dF93Y2FzX3Jlc3VsdF9kZXRhaWxzIiwiYWpheF9wcmljZXNfZW5kcG9pbnQiOiIvP3djLWFqYXg9ZGd3dF93Y2FzX2dldF9wcmljZXMiLCJhY3Rpb25fc2VhcmNoIjoiZGd3dF93Y2FzX2FqYXhfc2VhcmNoIiwiYWN0aW9uX3Jlc3VsdF9kZXRhaWxzIjoiZGd3dF93Y2FzX3Jlc3VsdF9kZXRhaWxzIiwiYWN0aW9uX2dldF9wcmljZXMiOiJkZ3d0X3djYXNfZ2V0X3ByaWNlcyIsIm1pbl9jaGFycyI6IjIiLCJ3aWR0aCI6ImF1dG8iLCJzaG93X2RldGFpbHNfcGFuZWwiOiIxIiwic2hvd19pbWFnZXMiOiIxIiwic2hvd19wcmljZSI6IjEiLCJzaG93X2Rlc2MiOiIiLCJzaG93X3NhbGVfYmFkZ2UiOiIiLCJzaG93X2ZlYXR1cmVkX2JhZGdlIjoiIiwiZHluYW1pY19wcmljZXMiOiIiLCJpc19ydGwiOiIiLCJzaG93X3ByZWxvYWRlciI6IjEiLCJzaG93X2hlYWRpbmdzIjoiMSIsInByZWxvYWRlcl91cmwiOiJodHRwczovL2thd2F3Yml1cnplLnBsL3dwLWNvbnRlbnQvdXBsb2Fkcy8yMDI0LzAzL2xvYWRpbmcta2F3YS5naWYiLCJ0YXhvbm9teV9icmFuZHMiOiJwd2ItYnJhbmQiLCJpbWdfdXJsIjoiaHR0cHM6Ly9rYXdhd2JpdXJ6ZS5wbC93cC1jb250ZW50L3BsdWdpbnMvYWpheC1zZWFyY2gtZm9yLXdvb2NvbW1lcmNlLXByZW1pdW0vYXNzZXRzL2ltZy8iLCJpc19wcmVtaXVtIjoiMSIsImxheW91dF9icmVha3BvaW50IjoiNzY4IiwibW9iaWxlX292ZXJsYXlfYnJlYWtwb2ludCI6Ijk5MiIsIm1vYmlsZV9vdmVybGF5X3dyYXBwZXIiOiJib2R5IiwibW9iaWxlX292ZXJsYXlfZGVsYXkiOiIwIiwiZGVib3VuY2Vfd2FpdF9tcyI6IjEwMCIsInNlbmRfZ2FfZXZlbnRzIjoiMSIsImVuYWJsZV9nYV9zaXRlX3NlYXJjaF9tb2R1bGUiOiIiLCJtYWduaWZpZXJfaWNvbiI6Ilx0XHRcdFx0XHUwMDNDc3ZnXG5cdFx0XHRcdFx0Y2xhc3M9XCJcIiB4bWxucz1cImh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnXCJcblx0XHRcdFx0XHR4bWxuczp4bGluaz1cImh0dHA6Ly93d3cudzMub3JnLzE5OTkveGxpbmtcIiB4PVwiMHB4XCIgeT1cIjBweFwiXG5cdFx0XHRcdFx0dmlld0JveD1cIjAgMCA1MS41MzkgNTEuMzYxXCIgeG1sOnNwYWNlPVwicHJlc2VydmVcIlx1MDAzRVxuXHRcdFx0XHRcdFx1MDAzQ3BhdGggXHRcdFx0XHRcdFx0ZD1cIk01MS41MzksNDkuMzU2TDM3LjI0NywzNS4wNjVjMy4yNzMtMy43NCw1LjI3Mi04LjYyMyw1LjI3Mi0xMy45ODNjMC0xMS43NDItOS41MTgtMjEuMjYtMjEuMjYtMjEuMjYgUzAsOS4zMzksMCwyMS4wODJzOS41MTgsMjEuMjYsMjEuMjYsMjEuMjZjNS4zNjEsMCwxMC4yNDQtMS45OTksMTMuOTgzLTUuMjcybDE0LjI5MiwxNC4yOTJMNTEuNTM5LDQ5LjM1NnogTTIuODM1LDIxLjA4MiBjMC0xMC4xNzYsOC4yNDktMTguNDI1LDE4LjQyNS0xOC40MjVzMTguNDI1LDguMjQ5LDE4LjQyNSwxOC40MjVTMzEuNDM2LDM5LjUwNywyMS4yNiwzOS41MDdTMi44MzUsMzEuMjU4LDIuODM1LDIxLjA4MnpcIi9cdTAwM0Vcblx0XHRcdFx0XHUwMDNDL3N2Z1x1MDAzRVxuXHRcdFx0XHQiLCJtYWduaWZpZXJfaWNvbl9waXJ4IjoiXHRcdFx0XHRcdTAwM0Nzdmdcblx0XHRcdFx0XHRjbGFzcz1cIlwiIHhtbG5zPVwiaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmdcIiB3aWR0aD1cIjE4XCIgaGVpZ2h0PVwiMThcIiB2aWV3Qm94PVwiMCAwIDE4IDE4XCJcdTAwM0Vcblx0XHRcdFx0XHRcdTAwM0NwYXRoICBkPVwiIE0gMTYuNzIyNTIzLDE3LjkwMTQxMiBDIDE2LjU3MjU4NSwxNy44MjUyMDggMTUuMzYwODgsMTYuNjcwNDc2IDE0LjAyOTg0NiwxNS4zMzUzNCBMIDExLjYwOTc4MiwxMi45MDc4MTkgMTEuMDE5MjYsMTMuMjk2NjcgQyA4Ljc2MTMyMzcsMTQuNzgzNDkzIDUuNjE3MjcwMywxNC43NjgzMDIgMy4zMzI0MjMsMTMuMjU5NTI4IC0wLjA3MzY2MzYzLDExLjAxMDM1OCAtMS4wMTQ2NTAyLDYuNTk4OTY4NCAxLjE4OTgxNDYsMy4yMTQ4Nzc2XG5cdFx0XHRcdFx0MS41NTA1MTc5LDIuNjYxMTU5NCAyLjQwNTY0OTgsMS43NDQ3MjY2IDIuOTY0NDI3MSwxLjMxMzA0OTcgMy40NDIzMDE1LDAuOTQzODczNzkgNC4zOTIxODI1LDAuNDg1Njg0NjkgNS4xNzMyNjUyLDAuMjQ3NTgzNSA1Ljg4NjI5OSwwLjAzMDIyNjA5IDYuMTM0MTg4MywwIDcuMjAzNzM5MSwwIDguMjczMjg5NywwIDguNTIxMTc5LDAuMDMwMjI2MDkgOS4yMzQyMTMsMC4yNDc1ODM1IGMgMC43ODEwODMsMC4yMzgxMDExOSAxLjczMDk2MiwwLjY5NjI5MDI5IDIuMjA4ODM3LDEuMDY1NDY2MlxuXHRcdFx0XHRcdDAuNTMyNTAxLDAuNDExMzc2MyAxLjM5OTIyLDEuMzQwMDA5NiAxLjc2MDE1MywxLjg4NTg4NzcgMS41MjA2NTUsMi4yOTk4NTMxIDEuNTk5MDI1LDUuMzAyMzc3OCAwLjE5OTU0OSw3LjY0NTEwODYgLTAuMjA4MDc2LDAuMzQ4MzIyIC0wLjM5MzMwNiwwLjY2ODIwOSAtMC40MTE2MjIsMC43MTA4NjMgLTAuMDE4MzEsMC4wNDI2NSAxLjA2NTU1NiwxLjE4MjY0IDIuNDA4NjAzLDIuNTMzMzA3IDEuMzQzMDQ2LDEuMzUwNjY2IDIuNDg2NjIxLDIuNTc0NzkyIDIuNTQxMjc4LDIuNzIwMjc5IDAuMjgyNDc1LDAuNzUxOVxuXHRcdFx0XHRcdC0wLjUwMzA4OSwxLjQ1NjUwNiAtMS4yMTg0ODgsMS4wOTI5MTcgeiBNIDguNDAyNzg5MiwxMi40NzUwNjIgQyA5LjQzNDk0NiwxMi4yNTU3OSAxMC4xMzEwNDMsMTEuODU1NDYxIDEwLjk5NDE2LDEwLjk4NDc1MyAxMS41NTQ1MTksMTAuNDE5NDY3IDExLjg0MjUwNywxMC4wNDIzNjYgMTIuMDYyMDc4LDkuNTg2Mzg4MiAxMi43OTQyMjMsOC4wNjU5NjcyIDEyLjc5MzY1Nyw2LjI2NTIzOTggMTIuMDYwNTc4LDQuNzU2MjkzIDExLjY4MDM4MywzLjk3MzczMDQgMTAuNDUzNTg3LDIuNzE3ODQyN1xuXHRcdFx0XHRcdDkuNzMwNTY5LDIuMzcxMDMwNiA4LjY5MjEyOTUsMS44NzI5MTk2IDguMzk5MjE0NywxLjgwNzYwNiA3LjIwMzc1NjcsMS44MDc2MDYgNi4wMDgyOTg0LDEuODA3NjA2IDUuNzE1Mzg0MSwxLjg3MjkyIDQuNjc2OTQ0NiwyLjM3MTAzMDYgMy45NTM5MjYzLDIuNzE3ODQyNyAyLjcyNzEzMDEsMy45NzM3MzA0IDIuMzQ2OTM1Miw0Ljc1NjI5MyAxLjYxMzgzODQsNi4yNjUyMzk4IDEuNjEzMjcyNiw4LjA2NTk2NzIgMi4zNDU0MjUyLDkuNTg2Mzg4MiBjIDAuNDE2NzM1NCwwLjg2NTQyMDggMS41OTc4Nzg0LDIuMDU3NTYwOFxuXHRcdFx0XHRcdDIuNDQ0Mzc2NiwyLjQ2NzEzNTggMS4wOTcxMDEyLDAuNTMwODI3IDIuMzg5MDQwMywwLjY4MTU2MSAzLjYxMzAxMzQsMC40MjE1MzggelxuXHRcdFx0XHRcdFwiL1x1MDAzRVxuXHRcdFx0XHRcdTAwM0Mvc3ZnXHUwMDNFXG5cdFx0XHRcdCIsImhpc3RvcnlfaWNvbiI6Ilx0XHRcdFx0XHUwMDNDc3ZnIGNsYXNzPVwiXCIgeG1sbnM9XCJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2Z1wiIHdpZHRoPVwiMThcIiBoZWlnaHQ9XCIxNlwiXHUwMDNFXG5cdFx0XHRcdFx0XHUwMDNDZyB0cmFuc2Zvcm09XCJ0cmFuc2xhdGUoLTE3LjQ5ODgyMiwtMzYuOTcyMTY1KVwiXHUwMDNFXG5cdFx0XHRcdFx0XHRcdTAwM0NwYXRoIFx0XHRcdFx0XHRcdFx0ZD1cIm0gMjYuNTk2OTY0LDUyLjg4NDI5NSBjIC0wLjk1NDY5MywtMC4xMTEyNCAtMi4wNTY0MjEsLTAuNDY0NjU0IC0yLjg4ODYyMywtMC45MjY2MTcgLTAuODE2NDcyLC0wLjQ1MzIzIC0xLjMwOTE3MywtMC44NjA4MjQgLTEuMzg0OTU1LC0xLjE0NTcyMyAtMC4xMDY2MzEsLTAuNDAwODc3IDAuMDUyMzcsLTAuODAxNDU4IDAuNDAxMTM5LC0xLjAxMDU5NSAwLjE2NzE5OCwtMC4xMDAyNiAwLjIzMjYwOSwtMC4xMTgzNTggMC40Mjc3NzIsLTAuMTE4MzU4IDAuMjgzMzc2LDAgMC4zODYwMzIsMC4wNDE4NiAwLjc1NjExMSwwLjMwODMzNiAxLjQzNTU1OSwxLjAzMzY2NSAzLjE1NjI4NSwxLjM5ODkwNCA0Ljg5MTQxNSwxLjAzODI0NSAyLjEyMDMzNSwtMC40NDA3MjggMy45Mjc2ODgsLTIuMDUzNjQ2IDQuNjEwMzEzLC00LjExNDMzNyAwLjI0NDE2NiwtMC43MzcwODEgMC4yOTE1MzcsLTEuMDUxODczIDAuMjkzMTkyLC0xLjk0ODM1NSAwLjAwMTMsLTAuNjk1Nzk3IC0wLjAwOTMsLTAuODUyMjggLTAuMDgwNiwtMS4xODk1NTIgLTAuNDAxNDI2LC0xLjg5OTQxNiAtMS42NTc3MDIsLTMuNTI4MzY2IC0zLjM5MjUzNSwtNC4zOTg5MzIgLTIuMTM5MDk3LC0xLjA3MzQzMSAtNC42OTcwMSwtMC43OTE5NCAtNi42MTMxMzEsMC43Mjc3NTcgLTAuMzM3ODM5LDAuMjY3OTQ1IC0wLjkyMDgzMywwLjg5MDg1NyAtMS4xOTE5NTYsMS4yNzM1NyAtMC42Njg3NSwwLjk0NCAtMS4xMjA1NzcsMi4yOTgyMTMgLTEuMTIwNTc3LDMuMzU4NTkgdiAwLjIxMDM1OCBoIDAuODUwNDM0IGMgMC44MjUxMSwwIDAuODU0MTE5LDAuMDAyNSAwLjk3NDE3OCwwLjA4MzEzIDAuMTYzMDI1LDAuMTA5NTE2IDAuMjQ2OTkyLDAuMzMzODg4IDAuMTgyODc3LDAuNDg4Njc2IC0wLjAyNDU1LDAuMDU5MjcgLTAuNjIxNDgsMC42OTM1NzcgLTEuMzI2NTEsMS40MDk1NyAtMS4zNjUyNzIsMS4zODY1IC0xLjQyNzQxNCwxLjQzNjk5NCAtMS42Nzk1MDQsMS4zNjQ2OTYgLTAuMTUxNDU1LC0wLjA0MzQ0IC0yLjczNzAxNiwtMi42MjQyOTEgLTIuNzkwMDQzLC0yLjc4NDk2NCAtMC4wNTQyNSwtMC4xNjQzOCAwLjAyNDI1LC0wLjM3MzM3MyAwLjE3OTQ4MywtMC40Nzc4MzQgMC4xMjAwOTUsLTAuMDgwODIgMC4xNDg3MTcsLTAuMDgzMjcgMC45NzA3NzksLTAuMDgzMjcgaCAwLjg0NzAzNSBsIDAuMDIzMzgsLTAuMzU1MDc0IGMgMC4wNzkyNCwtMS4yMDM2NjQgMC4zMjU1NTgsLTIuMTUzNzIxIDAuODE5MDgzLC0zLjE1OTI0NyAxLjA4MzA0NywtMi4yMDY2NDIgMy4xMTc1OTgsLTMuNzk2NTUgNS41MDEwNDMsLTQuMjk4ODExIDAuNzk1NDEyLC0wLjE2NzYxNiAxLjg4MDg1NSwtMC4yMTEzMTMgMi42NzIyMTEsLTAuMTA3NTc2IDMuMzM0NjU5LDAuNDM3MTM2IDYuMTQ3MDM1LDMuMDYwODEgNi44MTE3OTMsNi4zNTQ3NDEgMC42MDE3MTMsMi45ODE1NDEgLTAuNTQxNjk0LDYuMDI1NzQzIC0yLjk2NzQzMSw3LjkwMDQ3NSAtMS4xMjcyNzcsMC44NzEyMTcgLTIuNDQxMzA5LDEuNDA3NTAxIC0zLjg5MzEwNCwxLjU4ODg1NiAtMC40NDczMDksMC4wNTU4OCAtMS40NTI3MTgsMC4wNjI0MiAtMS44ODMyNjgsMC4wMTIyNSB6IG0gMy4zNzUwMTUsLTUuMDg0NzAzIGMgLTAuMDg2MDgsLTAuMDMyMDYgLTIuODgyMjkxLC0xLjY5MDIzNyAtMy4wMDc3MDMsLTEuNzgzNTg2IC0wLjA2MTg3LC0wLjA0NjA1IC0wLjE2MDE5NCwtMC4xNjk4MzUgLTAuMjE4NTA3LC0wLjI3NTA3OCBMIDI2LjYzOTc0Niw0NS41NDk1NzcgViA0My43MDQ1MiA0MS44NTk0NjQgTCAyNi43NDksNDEuNzA1MzA3IGMgMC4xMzg0MDgsLTAuMTk1Mjk0IDAuMzEzMDYsLTAuMjg5MTU1IDAuNTM4MDQ2LC0wLjI4OTE1NSAwLjIzMTYzOCwwIDAuNDM4NDk5LDAuMTA5NTUxIDAuNTYzNTUzLDAuMjk4NDUyIGwgMC4xMDAxOSwwLjE1MTM0MiAwLjAxMDUzLDEuNjEwODk4IDAuMDEwNTMsMS42MTA4OTggMC4yNjI2MDcsMC4xNTQ0NzggYyAxLjU3OTk2MSwwLjkyOTQwOCAyLjM5OTQ0NCwxLjQzMjk0NyAyLjQ2MjQ5NiwxLjUxMzEwNiAwLjI1MzU4MiwwLjMyMjM3NiAwLjE0MDg3NywwLjgxNjM4MiAtMC4yMjY4NjcsMC45OTQ0MDQgLTAuMTQ4Mzc5LDAuMDcxODMgLTAuMzc3NTQ2LDAuMDk0NzcgLTAuNDk4MDk4LDAuMDQ5ODYgelwiL1x1MDAzRVxuXHRcdFx0XHRcdFx1MDAzQy9nXHUwMDNFXG5cdFx0XHRcdFx1MDAzQy9zdmdcdTAwM0Vcblx0XHRcdFx0IiwiY2xvc2VfaWNvbiI6Ilx0XHRcdFx0XHUwMDNDc3ZnIGNsYXNzPVwiXCIgeG1sbnM9XCJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2Z1wiIGhlaWdodD1cIjI0XCIgdmlld0JveD1cIjAgMCAyNCAyNFwiIHdpZHRoPVwiMjRcIlx1MDAzRVxuXHRcdFx0XHRcdFx1MDAzQ3BhdGggXHRcdFx0XHRcdFx0ZD1cIk0xOC4zIDUuNzFjLS4zOS0uMzktMS4wMi0uMzktMS40MSAwTDEyIDEwLjU5IDcuMTEgNS43Yy0uMzktLjM5LTEuMDItLjM5LTEuNDEgMC0uMzkuMzktLjM5IDEuMDIgMCAxLjQxTDEwLjU5IDEyIDUuNyAxNi44OWMtLjM5LjM5LS4zOSAxLjAyIDAgMS40MS4zOS4zOSAxLjAyLjM5IDEuNDEgMEwxMiAxMy40MWw0Ljg5IDQuODljLjM5LjM5IDEuMDIuMzkgMS40MSAwIC4zOS0uMzkuMzktMS4wMiAwLTEuNDFMMTMuNDEgMTJsNC44OS00Ljg5Yy4zOC0uMzguMzgtMS4wMiAwLTEuNHpcIi9cdTAwM0Vcblx0XHRcdFx0XHUwMDNDL3N2Z1x1MDAzRVxuXHRcdFx0XHQiLCJiYWNrX2ljb24iOiJcdFx0XHRcdFx1MDAzQ3N2ZyBjbGFzcz1cIlwiIHhtbG5zPVwiaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmdcIiB2aWV3Qm94PVwiMCAwIDE2IDE2XCJcdTAwM0Vcblx0XHRcdFx0XHRcdTAwM0NwYXRoIFx0XHRcdFx0XHRcdGQ9XCJNMTQgNi4xMjVIMy4zNTFsNC44OTEtNC44OTFMNyAwIDAgN2w3IDcgMS4yMzQtMS4yMzRMMy4zNSA3Ljg3NUgxNHpcIiBmaWxsLXJ1bGU9XCJldmVub2RkXCIvXHUwMDNFXG5cdFx0XHRcdFx1MDAzQy9zdmdcdTAwM0Vcblx0XHRcdFx0IiwicHJlbG9hZGVyX2ljb24iOiJcdFx0XHRcdFx1MDAzQ3N2ZyBjbGFzcz1cImRnd3Qtd2Nhcy1sb2FkZXItY2lyY3VsYXIgXCIgdmlld0JveD1cIjI1IDI1IDUwIDUwXCJcdTAwM0Vcblx0XHRcdFx0XHRcdTAwM0NjaXJjbGUgY2xhc3M9XCJkZ3d0LXdjYXMtbG9hZGVyLWNpcmN1bGFyLXBhdGhcIiBjeD1cIjUwXCIgY3k9XCI1MFwiIHI9XCIyMFwiIGZpbGw9XCJub25lXCJcblx0XHRcdFx0XHRcdCBzdHJva2UtbWl0ZXJsaW1pdD1cIjEwXCIvXHUwMDNFXG5cdFx0XHRcdFx1MDAzQy9zdmdcdTAwM0Vcblx0XHRcdFx0Iiwidm9pY2Vfc2VhcmNoX2luYWN0aXZlX2ljb24iOiJcdFx0XHRcdFx1MDAzQ3N2ZyBjbGFzcz1cImRnd3Qtd2Nhcy12b2ljZS1zZWFyY2gtbWljLWluYWN0aXZlXCIgeG1sbnM9XCJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2Z1wiIGhlaWdodD1cIjI0XCIgd2lkdGg9XCIyNFwiXHUwMDNFXG5cdFx0XHRcdFx0XHUwMDNDcGF0aCBcdFx0XHRcdFx0XHRkPVwiTTEyIDE0cS0xLjI1IDAtMi4xMjUtLjg3NVQ5IDExVjVxMC0xLjI1Ljg3NS0yLjEyNVQxMiAycTEuMjUgMCAyLjEyNS44NzVUMTUgNXY2cTAgMS4yNS0uODc1IDIuMTI1VDEyIDE0Wm0wLTZabS0xIDEzdi0zLjA3NXEtMi42LS4zNS00LjMtMi4zMjVRNSAxMy42MjUgNSAxMWgycTAgMi4wNzUgMS40NjMgMy41MzdROS45MjUgMTYgMTIgMTZ0My41MzgtMS40NjNRMTcgMTMuMDc1IDE3IDExaDJxMCAyLjYyNS0xLjcgNC42LTEuNyAxLjk3NS00LjMgMi4zMjVWMjFabTEtOXEuNDI1IDAgLjcxMy0uMjg4UTEzIDExLjQyNSAxMyAxMVY1cTAtLjQyNS0uMjg3LS43MTNRMTIuNDI1IDQgMTIgNHQtLjcxMi4yODdRMTEgNC41NzUgMTEgNXY2cTAgLjQyNS4yODguNzEyLjI4Ny4yODguNzEyLjI4OFpcIi9cdTAwM0Vcblx0XHRcdFx0XHUwMDNDL3N2Z1x1MDAzRVxuXHRcdFx0XHQiLCJ2b2ljZV9zZWFyY2hfYWN0aXZlX2ljb24iOiJcdFx0XHRcdFx1MDAzQ3N2Z1xuXHRcdFx0XHRcdGNsYXNzPVwiZGd3dC13Y2FzLXZvaWNlLXNlYXJjaC1taWMtYWN0aXZlXCIgeG1sbnM9XCJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2Z1wiIGhlaWdodD1cIjI0XCJcblx0XHRcdFx0XHR3aWR0aD1cIjI0XCJcdTAwM0Vcblx0XHRcdFx0XHRcdTAwM0NwYXRoIFx0XHRcdFx0XHRcdGQ9XCJNMTIgMTRxLTEuMjUgMC0yLjEyNS0uODc1VDkgMTFWNXEwLTEuMjUuODc1LTIuMTI1VDEyIDJxMS4yNSAwIDIuMTI1Ljg3NVQxNSA1djZxMCAxLjI1LS44NzUgMi4xMjVUMTIgMTRabS0xIDd2LTMuMDc1cS0yLjYtLjM1LTQuMy0yLjMyNVE1IDEzLjYyNSA1IDExaDJxMCAyLjA3NSAxLjQ2MyAzLjUzN1E5LjkyNSAxNiAxMiAxNnQzLjUzOC0xLjQ2M1ExNyAxMy4wNzUgMTcgMTFoMnEwIDIuNjI1LTEuNyA0LjYtMS43IDEuOTc1LTQuMyAyLjMyNVYyMVpcIi9cdTAwM0Vcblx0XHRcdFx0XHUwMDNDL3N2Z1x1MDAzRVxuXHRcdFx0XHQiLCJ2b2ljZV9zZWFyY2hfZGlzYWJsZWRfaWNvbiI6Ilx0XHRcdFx0XHUwMDNDc3ZnIGNsYXNzPVwiZGd3dC13Y2FzLXZvaWNlLXNlYXJjaC1taWMtZGlzYWJsZWRcIiB4bWxucz1cImh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnXCIgaGVpZ2h0PVwiMjRcIiB3aWR0aD1cIjI0XCJcdTAwM0Vcblx0XHRcdFx0XHRcdTAwM0NwYXRoIFx0XHRcdFx0XHRcdGQ9XCJNMTcuNzUgMTQuOTUgMTYuMyAxMy41cS4zNS0uNTc1LjUyNS0xLjJRMTcgMTEuNjc1IDE3IDExaDJxMCAxLjEtLjMyNSAyLjA4Ny0uMzI1Ljk4OC0uOTI1IDEuODYzWm0tMi45NS0zTDkgNi4xNVY1cTAtMS4yNS44NzUtMi4xMjVUMTIgMnExLjI1IDAgMi4xMjUuODc1VDE1IDV2NnEwIC4yNzUtLjA2Mi41LS4wNjMuMjI1LS4xMzguNDVaTTExIDIxdi0zLjFxLTIuNi0uMzUtNC4zLTIuMzEyUTUgMTMuNjI1IDUgMTFoMnEwIDIuMDc1IDEuNDYzIDMuNTM3UTkuOTI1IDE2IDEyIDE2cS44NSAwIDEuNjEzLS4yNjIuNzYyLS4yNjMgMS4zODctLjczOGwxLjQyNSAxLjQyNXEtLjcyNS41NzUtMS41ODcuOTYyLS44NjMuMzg4LTEuODM4LjUxM1YyMVptOC44IDEuNkwxLjQgNC4ybDEuNC0xLjQgMTguNCAxOC40WlwiL1x1MDAzRVxuXHRcdFx0XHRcdTAwM0Mvc3ZnXHUwMDNFXG5cdFx0XHRcdCIsImN1c3RvbV9wYXJhbXMiOnt9LCJjb252ZXJ0X2h0bWwiOiIxIiwic3VnZ2VzdGlvbnNfd3JhcHBlciI6ImJvZHkiLCJzaG93X3Byb2R1Y3RfdmVuZG9yIjoiIiwiZGlzYWJsZV9oaXRzIjoiIiwiZGlzYWJsZV9zdWJtaXQiOiIiLCJmaXhlciI6eyJicm9rZW5fc2VhcmNoX3VpIjohMCwiYnJva2VuX3NlYXJjaF91aV9hamF4IjohMCwiYnJva2VuX3NlYXJjaF91aV9oYXJkIjohMSwiYnJva2VuX3NlYXJjaF9lbGVtZW50b3JfcG9wdXBzIjohMCwiYnJva2VuX3NlYXJjaF9qZXRfbW9iaWxlX21lbnUiOiEwLCJicm9rZW5fc2VhcmNoX2Jyb3dzZXJzX2JhY2tfYXJyb3ciOiEwLCJmb3JjZV9yZWZyZXNoX2NoZWNrb3V0IjohMH0sInZvaWNlX3NlYXJjaF9lbmFibGVkIjoiIiwidm9pY2Vfc2VhcmNoX2xhbmciOiJwbC1QTCIsInNob3dfcmVjZW50bHlfc2VhcmNoZWRfcHJvZHVjdHMiOiIxIiwic2hvd19yZWNlbnRseV9zZWFyY2hlZF9waHJhc2VzIjoiMSIsImdvX3RvX2ZpcnN0X3ZhcmlhdGlvbl9vbl9zdWJtaXQiOiIxIn0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7aed579ca567c510d1a58715cf8d47fa","sha1":"2af3efc2ee1181cdc288717cc773a749382e0166","sha256":"92a42bdd0409f74ff20d483683f779c329d1b7b811c27101eb966b4f81776c5a","sha512":"570e25cd99851f6d02ad0b1c8dd0b4e9da841fc380ba385ce0ad38e6fb7821754889a723a239d8e44ed402bdcf19f9a9581d6d9fff0a7548dbacbc5fa23c3c1e","ssdeep":"192:K5uHRje6M2teQRhcLTrFX9/aW6EMZYDHHvqdYvMrXxS3Q9HA5ne9BLBmOFU53/oO:K5wnRiJzMmLtvMlS3Qtkeh6v","tlshash":"3c22f999c3f8d694a56f8760dcb0ac5c358f28a238646594cefe2c68d1bede4d740d4c","size":10658,"data":"","first_seen":"2026-09-15T18:30:44.925184Z","last_seen":"2026-09-15T18:33:40.681319Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbc714fd9894f639a33b2653a6ba22a2","sha1":"4097beb01152575ee99e99a1a6cc7934dd1042e4","sha256":"2e23b6964e07b9f31e5fafde31ea79aafbe05c07844aa46b66cc9d87d3c09a43","sha512":"6055dc20740e6204893040dc219693c87de7fe056c29189e00a7c6f0713e29fdb8c467a1ac1d31aea017ea34a0630f99e24bc05f83b979566e940d1bea366f86","ssdeep":"192:14Xy39dhHxtxdwim5pVLDvuIkEurThxHtw5pVLzr4pyThHxtxdw3v5pVLDvuIkEf:p956LDxlLERLDxERLDxKLLLf","tlshash":"ae727d40f184637b48fe4167b91acd29ebda075a841784b6f6d296b28cfd500334fae7","size":16246,"data":"","first_seen":"2026-09-15T18:30:44.879449Z","last_seen":"2026-09-15T18:33:40.682675Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e40eb829d04f716d68208a263db0363","sha1":"8526a0916ed2e4b018e4638d77bbe60d213864df","sha256":"b32be6dbb742e87c9df2e56ec6ebc81398abee0fb6683074251acd24f3501df2","sha512":"1ff3a697fc283423d8073acd26e3c8ed8591b9980c69e88b837df8b899de4f33723cd9db707679bcd89399f58c96a1f4209597648b371a182e2e3fd5e08a9199","ssdeep":"","tlshash":"4811c410809dd634069aa2fa20d103db78a111cdb9040abe4f2cd95e7e1e8ff16206fe","size":973,"data":"","first_seen":"2026-09-15T18:30:44.888801Z","last_seen":"2026-09-15T18:33:40.68335Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/784ce96bceeb286faf3b3392dba105ad.js?ver=105ad","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8e700054016daeef658a1eb4e7f659a","sha1":"02c7d90c53dd4b7e0798946ef63c0a16703bc4a3","sha256":"4ac68d937e60146e186906ebd9a4c0e0173d9950d1e377ba0ded25e36bf9a4cb","sha512":"d32bb00f2984b9ed7a8553712107c30af814ffd8f480b6e7b1ef9c3fd04335d3c492ca0f86a0dfbc0828164c627ff2fe2109003a67a8e1fbda7238b35ae7bb7f","ssdeep":"","tlshash":"6a31b6d93095a8da06171490463f1207f2f91e27eecd98906264e8f50bb077a01ebf6b","size":1722,"data":"","first_seen":"2024-03-29T16:52:43Z","last_seen":"2026-09-15T18:33:40.580632Z","times_seen":4339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHNjcj1kb2N1bWVudC5jcmVhdGVFbGVtZW50KCdzY3JpcHQnKTtzY3Iuc3JjPSgnaHR0cHM6Jz09ZG9jdW1lbnQubG9jYXRpb24ucHJvdG9jb2w/J2h0dHBzOi8vJzonaHR0cDovLycpKydzc2wuY2VuZW8ucGwvc2hvcHMvc3cuanM/YWNjb3VudEd1aWQ9NGQ2MWM3MzQtZTY3Ni00ZmEzLWE0MTktMWRjODc3Mzk5MGEwJztzY3IudHlwZT0ndGV4dC9qYXZhc2NyaXB0Jztkb2N1bWVudC5nZXRFbGVtZW50c0J5VGFnTmFtZSgnaGVhZCcpWzBdLmFwcGVuZENoaWxkKHNjcik=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bc0a7395f872a19c09bec2c9861bd8a","sha1":"b6aa9fc8d03be9890ab7a3195879896c43bc0b10","sha256":"4ee65a0c0fa9b95f961f5c1efd9d269582ebadd9975ba1ed81356689a10dd8e1","sha512":"d2df5aabc02c7e30a22e36a720fd606dfd11771a44a90efffdbf6e41aeae6f90abfe6bc5c806938d5d2bc1296ce838558e29210d687f3d1f24b4ff1535278bce","ssdeep":"","tlshash":"2ad02bef1946506802cc8243f075fa59e4b572ad4e11e105c0accc3e7814f959526a98","size":269,"data":"","first_seen":"2026-09-15T18:30:44.905906Z","last_seen":"2026-09-15T18:33:40.684026Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/fc2cbbabf2d6a9ba503ab632373dee01.js?ver=dee01","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"289187a246d57f75b9158ed93594b516","sha1":"49ed34df71411fac35efa76590127550d1973a37","sha256":"e79afba73efe1cb1e36a8137160cad3c891128e61d3f5644b40bc260407801bb","sha512":"79b0f66038f0595e39793a77462305ea1eae2fb163611460cf173bac125fae0a913f4a304f0f91757814d2d98ea91b5ea1e000411bfb817660c9a4e4f47e8d74","ssdeep":"","tlshash":"7251542ab300b1b222efb1f4465a70041122756cc61088c97d74c69b06b9ebd74aaf3f","size":2901,"data":"","first_seen":"2025-09-27T14:46:41.054099Z","last_seen":"2026-09-15T18:33:40.517743Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3bo67muzbfgtl.cloudfront.net/edrone_add_to_cart.js","fqdn":"d3bo67muzbfgtl.cloudfront.net","domain":"d3bo67muzbfgtl.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.233.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4802353031fa5c64d3577cd3b236b2cb","sha1":"e1634b44e7f706ad1208b49c6550eb2739b266f7","sha256":"edab01b03747ed1e22fb7998a7c5b08b9172ecce5a7f4f377fac686f1ca34fd9","sha512":"0a8bcfaf64afb8fc5ac816cdf2985bfa6824efc3ade5903511145b31ea1145712fe01b50410cc2f234af0ce40267d60de40672e33e58deebc537278d0336f211","ssdeep":"","tlshash":"1a61ded4e0792e31475289bc16cb444f7a0648077894f8443f8c59ca1fe9d5e83fba8e","size":3186,"data":"","first_seen":"2023-10-21T08:19:29Z","last_seen":"2026-09-15T18:33:40.510227Z","times_seen":385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-ecommerce-generic.js","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d48860f3a5866271825eda535d8804f0","sha1":"b899fdfa6a5e6c0d85168e15a0396e79ab49ece4","sha256":"106ca65012aff09dbcc88081bc5100244dd5cce0e32e1ff9d9f7bf13628c238d","sha512":"cefde040f6fd7beffe3b53997b12e0e03d365227d52dc0ebaf33597676dcd99dc03fde42c6664b9431932d7505517b76a14f553d7d54d0c3fa21f6010c1da217","ssdeep":"","tlshash":"b32103c276b7e0b349ed08054c7ef71bb1611f8a345cd042e905a6b42ae4dfbb009d35","size":1356,"data":"","first_seen":"2026-07-23T00:51:43.706039Z","last_seen":"2026-09-15T21:16:13.776725Z","times_seen":402,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.ceneo.pl/shops/Widget/Content?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026contentId=ceneo-widget-small","fqdn":"ssl.ceneo.pl","domain":"ceneo.pl","tld":"pl"},"ip":{"addr":"5.134.209.153","port":443,"asn":42656,"as":"Allegro sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab08b250741f2557747059eb91d82526","sha1":"6177cedc32c4c77de721bf75141cbfa0071d41fd","sha256":"1665c407cbb46c505c472a0256339ec9356fc72684bd5d5c4b90920b285f011d","sha512":"38167a2d978e90ede92fe12783d559b4eaecbf66512fe1aad5a9fa5dfcddc440e30a515f4691885f0ddb3159ea986026ebd1ec67ea157b3dfd2d7ab668f17b08","ssdeep":"","tlshash":"8af0243ab5a9257486676b23313a72c53431c04aa40208857a4e399c1ff4ac960b6fa5","size":501,"data":"","first_seen":"2026-06-12T04:03:09.195178Z","last_seen":"2026-09-15T18:33:40.684701Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/plugins/woo-fly-cart/assets/perfect-scrollbar/js/perfect-scrollbar.jquery.min.js","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87583eea85683b0972c2e0f6068615e8","sha1":"d06d4edb1752c34bcc9d73ac926dd6068b6455e4","sha256":"52021253d22a3ebd3cde96cb996eae15dba9aae3218b87d464f80226dcb9faae","sha512":"161b71c0349d3faefd1c0b6b7a505da97a1294fdb517189d8ef14793f89f9beb497ccfa333fc8bd4119a1c18225540d38e85d6a6bfc1d2c554835d8f1bace6f2","ssdeep":"384:RCnffouNtwIXhqsXmcRxo3kfZNUF/UF1xcjhUrAXo2G2nyvuJisJv4HRVgyoL3HH:RC4uNtwIYsVAXQ3oLVl","tlshash":"f6b28208b21430a092ff319dd4cf870e71724553b74fa5d0a490dfb8a9b47ba6362b6e","size":25332,"data":"","first_seen":"2023-03-07T12:08:24Z","last_seen":"2026-09-15T18:33:40.573422Z","times_seen":2592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,KGZ1bmN0aW9uKCl7dmFyIGh0bWw9ZG9jdW1lbnQuZ2V0RWxlbWVudHNCeVRhZ05hbWUoJ2h0bWwnKVswXTt2YXIgY29va2llX2NoZWNrPWh0bWwuY2xhc3NOYW1lLmluZGV4T2YoJ2F2LWNvb2tpZXMtbmVlZHMtb3B0LWluJyk+PTB8fGh0bWwuY2xhc3NOYW1lLmluZGV4T2YoJ2F2LWNvb2tpZXMtY2FuLW9wdC1vdXQnKT49MDt2YXIgYWxsb3dfY29udGludWU9ITA7dmFyIHNpbGVudF9hY2NlcHRfY29va2llPWh0bWwuY2xhc3NOYW1lLmluZGV4T2YoJ2F2LWNvb2tpZXMtdXNlci1zaWxlbnQtYWNjZXB0Jyk+PTA7aWYoY29va2llX2NoZWNrJiYhc2lsZW50X2FjY2VwdF9jb29raWUpe2lmKCFkb2N1bWVudC5jb29raWUubWF0Y2goL2F2aWFDb29raWVDb25zZW50Lyl8fGh0bWwuY2xhc3NOYW1lLmluZGV4T2YoJ2F2LWNvb2tpZXMtc2Vzc2lvbi1yZWZ1c2VkJyk+PTApe2FsbG93X2NvbnRpbnVlPSExfWVsc2V7aWYoIWRvY3VtZW50LmNvb2tpZS5tYXRjaCgvYXZpYVByaXZhY3lSZWZ1c2VDb29raWVzSGlkZUJhci8pKXthbGxvd19jb250aW51ZT0hMX1lbHNlIGlmKCFkb2N1bWVudC5jb29raWUubWF0Y2goL2F2aWFQcml2YWN5RXNzZW50aWFsQ29va2llc0VuYWJsZWQvKSl7YWxsb3dfY29udGludWU9ITF9ZWxzZSBpZihkb2N1bWVudC5jb29raWUubWF0Y2goL2F2aWFQcml2YWN5R29vZ2xlV2ViZm9udHNEaXNhYmxlZC8pKXthbGxvd19jb250aW51ZT0hMX19fQppZihhbGxvd19jb250aW51ZSl7dmFyIGY9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgnbGluaycpO2YudHlwZT0ndGV4dC9jc3MnO2YucmVsPSdzdHlsZXNoZWV0JztmLmhyZWY9J2h0dHBzOi8vZm9udHMuZ29vZ2xlYXBpcy5jb20vY3NzP2ZhbWlseT1MYXRvOjMwMCw0MDAsNzAwJmRpc3BsYXk9YXV0byc7Zi5pZD0nYXZpYS1nb29nbGUtd2ViZm9udCc7ZG9jdW1lbnQuZ2V0RWxlbWVudHNCeVRhZ05hbWUoJ2hlYWQnKVswXS5hcHBlbmRDaGlsZChmKX19KSgp","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d7da5aa1b6ecf3f85398abbaea9a1f6","sha1":"73e93ef8558a23688066a4e5c475fedf48849b55","sha256":"e56590223a19077b1940e38948004df98610f297d64e19a3e2b3e7997721c0b8","sha512":"cdd3938a78753383f26b49795ade07860d3e1bc955a38d2a7b5d5d94f575af52bc554df765d251ad26bc0f0fd63f7d79e02d34dd880a2eb42f0c26ed012ddfcc","ssdeep":"","tlshash":"a3117db6346c41bd1685126e35beeb42786285136d01a528f4b4bc3014f2e872c1de6b","size":975,"data":"","first_seen":"2025-06-24T03:13:12.817483Z","last_seen":"2026-09-15T18:33:40.686237Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"33a688969ef2c6e5ab3d6aebf2f483ec","sha1":"4465fcaf52dd5b68b93973cec97a3d5dfefa2a23","sha256":"7f3a5aa4dcb3c0912452ca3c83baa8113278b60b4037bd1580338dca32d58d71","sha512":"733baeaf9aeaf3cb618ee41855eb66d38cadb7312dcc931b5691fa837e4d61b9caa8a632a35b85bf5b8221851594205030a85b84c987847d1740c64f5d0c8725","ssdeep":"","tlshash":"612131a97744f4362350293862ff5247a5be3533298a8462c808ccd0ad79fc86036f8d","size":1353,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-15T18:33:40.687797Z","times_seen":7811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/84c29754c881c216b65e05d4b466d71e.js?ver=6d71e","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c8e88a8adeb4d82d2409148aea8bb80","sha1":"51cf306d61a06b8197944b666544beca79c94745","sha256":"d47b392256f57ed9f3ddf004156d57245ffe7665f8a9decdd63fa39524b84ee0","sha512":"01b8a8cdef35da4837e1f67b2cd3a7b30966ae8e27edb5d54944c8e484727cb274fff84f1074e26978bf6f89947221b233e7db8671c7e8683ecc58daf9cd6a60","ssdeep":"","tlshash":"bd31ac3df1b157250cbea3b481f7f3ca247204952a1364a0c4b5d0a595f78423cafd9c","size":1478,"data":"","first_seen":"2025-09-20T01:47:34.906113Z","last_seen":"2026-09-15T18:33:40.592083Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e10857e278a430f0b9ad53a02ab3334","sha1":"f4738cb2eea9ed9a193621fff796270c6ad2dd62","sha256":"34d8673925f6719f1aae5128a4a6ced3607ca1659800bc86e8695be9104cd48c","sha512":"969246842289ad569c6aa4554d0dde865190250b3036a79eda219410a1f271654898b55d50d974c7003764bbdb3791b28ec78198212df27ba62a49f7efb0bc1b","ssdeep":"","tlshash":"9a0126b33cfad86406906abe367be3e81ba050421928c60459ddcdec4a24fe64c12c2d","size":686,"data":"","first_seen":"2026-09-15T18:30:44.893351Z","last_seen":"2026-09-15T18:33:40.68848Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/00e18008b4e5030ebc9431d01d589c85.js?ver=89c85","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1af295ca6b0ada9bc8d9800177d9ef42","sha1":"58aa780a65d4c671dc9e0e6f2e10b3c967e5ddb6","sha256":"47f666ad20c302f7c1c29496dfdc15ed6d25c5461773ad5b4d6fcf8af2955802","sha512":"39dbe88925376a6d50e0849c0331b0a8a975b27b6eafe0928e38e6cbf09dd5f53e51b4123ee4a40b174805c4568edce3194a53ec0f8bb797689f38608d31b976","ssdeep":"192:ch1T4KTWdMh7Fel2MJJnK+YM8QeMzFrR4JBuK6kCsCs:ux74KM2MJJn/YM7eMzFaJBuKnCsR","tlshash":"47f1ea89e35181f2919f71ad51af9a0252b69e37d708454034b50df52d3afe432e2f2f","size":7848,"data":"","first_seen":"2025-07-07T17:47:21.403621Z","last_seen":"2026-09-15T18:33:40.611384Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/4b0e692e7a950b72522d99e231de46b9.js?ver=e46b9","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"355813d1e5b680203e029575ed680e22","sha1":"488ee5fd086e014c62d79b72c92269e2b387c836","sha256":"769ef2735f6cc96772a8b39f8346cc717878e9118be785be75f83f988acef7ea","sha512":"eb49dd1c43487d3d68066a66e9495425326009ad3aac03fb7caea32937c32dd85e0fb395af0382a35ed10ef58da972e0ddb990b2867143a9bc419a812b3e05c0","ssdeep":"","tlshash":"bf515543f4a0a45a02ab91b4903b2143f2ab257c0641dc6066d3995477eda4e47efe9c","size":2973,"data":"","first_seen":"2026-07-06T03:24:59.531923Z","last_seen":"2026-09-15T18:33:40.583013Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/4c99cfd6b0c4b63a9b730c9a4520f822.js?ver=0f822","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"51f55b903492a2e5d1db8fa8ba88e813","sha1":"87229051bcba805648e433f91445cdc8227827d4","sha256":"990f58dde2f1d4e70bcf833cd9775c2a3545830b8a6ff33e3954d5fbe4bfcbb5","sha512":"10a7be21d9c9d53c7bd75e9832c3639c815740444bf424abd306eb12a9fcf3a7eb1091e4755e0c45049dc952401a3b93659104a13966bb697714b36ac35ecea2","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvs:iS33ZdvK47ku","tlshash":"c1a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf4a8d8da3c7eea95173f79","size":21466,"data":"","first_seen":"2025-04-16T09:36:44.42814Z","last_seen":"2026-09-15T18:33:40.610895Z","times_seen":7111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/b7a479726e19577f682425000dc1a061.js?ver=1a061","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"63cee1c6f90dc8cd487dc59c51a13af2","sha1":"d422dcbb85e10dd91fc2395974d859a8abdca28b","sha256":"cf3d041daf2c2f5cd70ab572733e5f7f28b610f6f5a8d483e5142ca249b56b11","sha512":"8cb947b141fc242f4d76752fe5ae8b64987e1f9056bc59555951c89eee6555751c5b30a6b35710654dbb7d0351c6e263642745b03f7a8a063673cdc7662a6290","ssdeep":"384:r8/oH5FC4HHCnwrmPmOATTo9jdG+/eKLHASGYsk82bVzRVgf38bFSkXElh:k4HHCnwrmPmOZtLHB8OROEbcvv","tlshash":"75b26116a3a03a72cfe7255e3f0fc5054ab3d785e406c83c7d7d42481a952897f27aea","size":25342,"data":"","first_seen":"2025-12-21T18:15:07.964727Z","last_seen":"2026-09-15T18:33:40.540711Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"073630af354d503aeb13d5116f0b5a1d","sha1":"6bfb4dae0cc9f4af5a8e418070b62c19729bd865","sha256":"48b50c9d702e461d08e15e1fcb693e36a4c14acd93007880b84c56d89caffc9e","sha512":"65e202c9392d707b4a25e72268badf92e6f52fe1e1456353e300aec447c67bd262f7503ce049bfeaec89f55286a0e29b2131f494812e2526032305651abdbd36","ssdeep":"","tlshash":"db116fdaecf34842ea6ee2e438f6b3377fa25d70f151889197c515381885c65362bd00","size":855,"data":"","first_seen":"2026-09-15T18:30:44.896624Z","last_seen":"2026-09-15T18:33:40.689255Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/2d121a1865d7576eae7f206b7b2e31eb.js?ver=e31eb","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87cb3b604758bcdd31f7d2608d2b68a3","sha1":"c8d496525edf8c65e42424074238ddec83f95ed7","sha256":"51c4f3f99aa68090a506d120f5694b95cd8bdf9865817de18fac341973b9e28e","sha512":"8b01e181f2a6db75ec55eacbd5b1b85ba1b2bec059c24b4180860ce7edf46abb13062447f0f32b78f2a86b2c868edd387b0eef3d17a427282f9870b138f2108e","ssdeep":"96:BygZro9ssOK6doITQK15dO8FwJU8tQXj4dP18yUYNNWlxsC+5FjlIVwqpwLDZRv7:Bv09soYVEo5dCN98MNgxsTDZ4e7","tlshash":"6cd1744df2b621e805ba3474b83b67917433dc76660381a4187350662f79f8532a3f7e","size":6450,"data":"","first_seen":"2025-09-27T14:46:40.891015Z","last_seen":"2026-09-15T18:33:40.524653Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-includes/js/jquery/jquery.min.js","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-15T20:49:56.103392Z","times_seen":1057547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,ZG9jdW1lbnQuYWRkRXZlbnRMaXN0ZW5lcignRE9NQ29udGVudExvYWRlZCcsZnVuY3Rpb24oKXtkb2N1bWVudC5xdWVyeVNlbGVjdG9yQWxsKCdsaS5jbXBsei1tYW5hZ2UtY29uc2VudCBhJykuZm9yRWFjaChmdW5jdGlvbihsaW5rKXtsaW5rLmFkZEV2ZW50TGlzdGVuZXIoJ2NsaWNrJyxmdW5jdGlvbihlKXtlLnByZXZlbnREZWZhdWx0KCk7ZS5zdG9wUHJvcGFnYXRpb24oKTt2YXIgYnRuPWRvY3VtZW50LnF1ZXJ5U2VsZWN0b3IoJ2J1dHRvbi5jbXBsei1tYW5hZ2UtY29uc2VudCcpO2NvbnNvbGUubG9nKCdidG4gZm91bmQ6JyxidG4pO2lmKGJ0bilidG4uY2xpY2soKTt9KX0pfSk=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"506afceeea60fded2f00c2c776f10197","sha1":"544ed30d9a3d78b84d83821bccb7d025ebd1a058","sha256":"5c46c7f9569a1368dbb19fd7c2d23e8e17c3ac09af64cdadd466aaa8ae78350a","sha512":"797921f2c3b655c60be23aae9457d6070ffef9424774108c905b5587cfcceae84a73889e3c0284dd45bb757aea740baa82ad09528f77de1973904dc2aa9cf49d","ssdeep":"","tlshash":"64e07d193ab40b3507d7fb7ffb6faf8aa433104b1481a10540650cc91cda98541d0d6b","size":332,"data":"","first_seen":"2026-09-15T18:30:44.932783Z","last_seen":"2026-09-15T18:33:40.690043Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/cmplz-cookiebanner-js-after","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1efbb9f0b1c820b91928ac2183774e3f","sha1":"a65502b376572f454eaa052239cb4b2ea95f237a","sha256":"b03319292d5400d973d3f39f311d2cd465ac3956b6d948832328f8a3a716b4cf","sha512":"ced9e2b43d0aebace93c7ed061d21a926a7bb3138b8fce92fd40bd085aebad285d64797a7202b13a6785c69bf99bef5f88d404b4caf225cfffdf4236ab418bad","ssdeep":"","tlshash":"bb517d7dcb9c483dd2f232fc1f3ebeda746c0130c046acb25964490418e8a4b8f58d51","size":2718,"data":"","first_seen":"2026-09-15T18:30:44.864427Z","last_seen":"2026-09-15T18:33:40.690671Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGNvbmRpdGlvbmFsX3NoaXBwaW5nX3NldHRpbmdzPXsidHJpZ2dlcl9maWVsZHMiOltdfQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a5c1437bc901d4c5aabd802baf017b6","sha1":"14aa05294e3211d2386f4c77fef324e96c4902d7","sha256":"b7a6c29903929c92c9832e9002168304e2b45f41569603b34dd99251c38d96b1","sha512":"5816c8142c5cf256b716fe44bdc40e41e043137d9daca72b13986b4e6617f756c949d5ac0a3c496a0c12292e95472a831a87cfc528f42e35b5d8f25602c56aad","ssdeep":"","tlshash":"4f9002d241bc0405044e5030e05ab14b61a041046af69071d57105e613761546c96c42","size":55,"data":"","first_seen":"2025-09-20T01:47:35.002069Z","last_seen":"2026-09-15T18:33:40.692069Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/73186e13c70275e0a5d59729a777454f.js?ver=7454f","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0ca9b9d997765c56dd87ac8818501e4","sha1":"59316f94cf9b6e4edc640f7ba1e8f2f2a0d7be0c","sha256":"d19499e9329bcf3e54f07277b5054757455e619fdab4eb5ebfb36d437b3b427f","sha512":"c67edd8aa66a791cf2aca1fba9251c6d0a0d43d7dfba7f22db1393e513fa8060c3a2e277970f95b41230a79562a4534bbb283cfaa7c19b96f00f0cd0fa37c091","ssdeep":"","tlshash":"0d3114519d0c7834136d148a97fbef6173707d73284da02a776cb83c16fc68b96424a8","size":1686,"data":"","first_seen":"2024-08-19T15:07:01.492947Z","last_seen":"2026-09-15T18:33:40.625262Z","times_seen":249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIG5vZGU9ZG9jdW1lbnQuZ2V0RWxlbWVudHNCeUNsYXNzTmFtZSgnd29vY29tbWVyY2UtbWVzc2FnZScpWzBdO2lmKG5vZGUmJmRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdweXNfbGF0ZV9ldmVudCcpKXt2YXIgbWVzc2FnZVRleHQ9bm9kZS50ZXh0Q29udGVudC50cmltKCk7aWYoIW1lc3NhZ2VUZXh0KXtub2RlLnN0eWxlLmRpc3BsYXk9J25vbmUnfX0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"21ceeb60b38c2cd5bef5b71f623f6202","sha1":"3c85d4517b3e91c36e40b243231969fb6a630900","sha256":"d4c496b04e9a854ddbdeb71c19edfd6d14d40b00c06c9edf6a8aef3cbd524b2e","sha512":"199e79091636fb56fb859de5ad0b30991f7a7bfdecd61233e854f55d012f95355bb7435414a7ef5c505005787ffc677abd23837ee04f872f0e255b033844e1ad","ssdeep":"","tlshash":"92d012a3754a9e3909df253b3aa836c57d2501857e1972038c2d2c554678d810534b99","size":203,"data":"","first_seen":"2023-03-11T09:44:14Z","last_seen":"2026-09-15T18:33:40.692718Z","times_seen":539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/80c13b409700f04b4db41967a3917186.js?ver=17186","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e0b41fe8da8ea3bb006734757240e78","sha1":"63c543517703c82ebb8b8390ae47920ae6a92acd","sha256":"b32a805a1e35f9fc29c30ae56a423b25add3d19e1f1cf9a8e76e2bc9f389aed1","sha512":"c1012b43fefbfddcc51e98b96f00458b09b142b3b3d685ab14cbee38810da092e60665e016cc17120586eba71aa6526208cfcc3deaa1fd7a58993a4a6c70ed7c","ssdeep":"","tlshash":"f421e14c7201e07545d3bc79849f2d5107bbb5f6ec01c652b461454c875cbada127e47","size":1113,"data":"","first_seen":"2026-09-15T18:30:44.485354Z","last_seen":"2026-09-15T18:33:40.537178Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/cbb970c2760bc144db21b3c7ebbe2d83.js?ver=e2d83","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e87b2127f830d89facf266fe37d3a086","sha1":"2397f4a6cd27ba5c2802680d042841ce10d3b24a","sha256":"7aa9b279d28f8bdfda02627f5192a3358b69d0405b01bb7db8b2dcb4f8ddd7e7","sha512":"a1b6206bd844b595ba368a3a2f7a072ebb8415d8fd38f0385d05b6a3e573a757de6ce92bff868158e3161d60170ad1c6c960e8264a4208b007efe760229fe049","ssdeep":"3072:cWdIxUMz/tGzT3+XtHi2iX6JPMupdggt1YHWyFxAcDHzEJLDnWTnWNBEBysX6qMX:dwhggc1lK","tlshash":"94f31849718473b246c720ee653f1b0e7137ce69d009d060a936faf61eb8f8a512bf65","size":158007,"data":"","first_seen":"2023-03-08T14:31:01Z","last_seen":"2026-09-15T18:33:40.504712Z","times_seen":724,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/34104112b9f44ecb3cc7f5efcc75b2e2.js?ver=5b2e2","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b58cbcc12e9be38ec1eb3b6a4f4a9ca9","sha1":"8ea553f171b856da116e1ad5bc5663f76f5aa7d8","sha256":"e99ed022823364257494d44baab30772a58effe4368f0ae09ceca737cacff64e","sha512":"9f90dee2e944ff413f63ea4498a246fe8851eb6161a4b8354c5ea101405daa20a7cc749663b5a097aff5321372d4423d3a1b6cbfe7e62d235acc0aecc793289c","ssdeep":"192:c+tyxFsK15PqmHApEiO5qirN9NvwIZ/o9SVTnpv2Uv01X5dTyeaSAsn3Q94znh/E:fcxz15y0Aup","tlshash":"70e1548473b7ec575186a316c1ee1e03441eb59922b0a86fb72dd2de4ca8b4e103e777","size":7378,"data":"","first_seen":"2025-07-07T17:47:21.47006Z","last_seen":"2026-09-15T18:33:40.589308Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/defddbe2bc0b422048da5637ff996767.js?ver=96767","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7567564e26d80b7a9595ebd9c12ee8f8","sha1":"18465eb10f8903b7cd58d4b4b9c97dbe39ea9ac6","sha256":"20113d5c5ce2953074ed1df9fad90bc55aad416e8b95f2efd5645ad190740c9d","sha512":"5d6d9bdceea00549fbcfc7f6f6caba4599f909e6833ce11171071737d9a4dd7a5a472022aab9d70a05eaeafc2b383d0651ec32e2f0fc3c6a773101f749cc0046","ssdeep":"","tlshash":"7f11f3d43e84757909d75428a47f0b18a0fb4d76804e0db0ee54b63e7d7cd409196a4a","size":1109,"data":"","first_seen":"2023-06-16T22:08:36Z","last_seen":"2026-09-15T18:33:40.525168Z","times_seen":692,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/cfe037e165396f2477b07c4a726e9789.js?ver=e9789","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ab998aea0e73345487e37165e081a9d","sha1":"b8281bfd37c97bf666ee6a9bc75d666bb8ce75d2","sha256":"593945e5c350aac05fa57e6b08eacd18a2fa26ca18f609991cf6460f327acfe4","sha512":"8f948ec2567cbf9eaaed61820e9a342d899a2d34e54a9ed92f127f3dc05fe92af2f54de26a7e3ddecf82dbba8849306f1cbc120660b3fe4471f328aee611b420","ssdeep":"","tlshash":"bc01fe40bcea552a507362895deede34f3bd6c28d6009d10e2f254fbac39d620ca09dc","size":682,"data":"","first_seen":"2026-04-28T14:10:11.873556Z","last_seen":"2026-09-15T18:33:40.541223Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3bo67muzbfgtl.cloudfront.net/externals/67a5fd48c9a56.js","fqdn":"d3bo67muzbfgtl.cloudfront.net","domain":"d3bo67muzbfgtl.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.233.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"51eb4a10e1d011cfb5bb34a68a8e186b","sha1":"e1853e57f672ccf2d0841e6e8bc9f8abd3aa40d9","sha256":"43f148898aecb603906e08e2a48491df74ea952da56b04f9c4d47a3e8ef8832f","sha512":"d348fcc97f78e2b635e8bdf7dd825f537038390ec72f09c1c63bceb15908da248555aadd5713a2dddbaf9a23d115a3dbcdbd4688c3d9d370a2d837fd7db0d35c","ssdeep":"6144:2w5ZQIXkBvrbnMjF9mebIbUgPrDw5uiRAhFgZ:2w3ZOrbnMjF9mebIbUgPrDDiRAh+","tlshash":"451407cdb6d6b06113e724b5803f650ef23a3a596c4e8450f222e4d67d7998e9223f7c","size":198652,"data":"","first_seen":"2026-09-15T18:30:44.574303Z","last_seen":"2026-09-15T18:33:40.51544Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"332a9735c5b3da5be808f159db2e2ccf","sha1":"2387d1efbcc561ea833aa24836df1c39a1ea799b","sha256":"9a0bbd1d15f8f4938e4e3fcb6ae3b5aa4c9622f2041336256827797c3bd96af8","sha512":"8e0c44566f10d3a1f270c816ef457a2ad8121f763f46cb98a029426138ef5caa95aba0934d9acd56cd90c928d269d365225c1094792ee9a47d6210b10211c615","ssdeep":"1536:DL3dUa2dOjYjUgAmPgU6aKLHXdAU7GMEBvOeTtWGqc3lL:fEOjYhT6zXdGMEBvOehlR","tlshash":"1a831bc8729a787213dac1b4a07f5353b3297d35584c8850e527d8663a7ce878273fba","size":86603,"data":"","first_seen":"2026-09-02T13:37:56.882331Z","last_seen":"2026-09-15T21:11:57.134688Z","times_seen":20152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/dd28f1ab2cf6d1b13fa7acef6bd8cb66.js?ver=8cb66","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f700409e0c67e5f135e5051d5978d1a2","sha1":"4523bc1a173e4aad929a7b0ca63624027e6a01b5","sha256":"dc65cd168c6d2f58b50970262683e878f6724ee2d1fff392e834fa0789690443","sha512":"5ed9efc5babdb95e6bb52feebc92b8096044a06e01b950bb9e2bc3cf9a781aaab7ba58fefb83ab0599be06a0b96b4da22eaaad989610bb9c8439ddfc9ec1e8ab","ssdeep":"","tlshash":"dff0f008511cc46b1d3ba76730ea5808bdd16bff455dfe0388a8a0bc7fa021da351a39","size":538,"data":"","first_seen":"2024-08-29T17:29:45.585817Z","last_seen":"2026-09-15T18:33:40.621965Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/c62fd0b0d776ce9d94ce6e00a875887d.js?ver=5887d","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"917e7cb4af609e70237205067ac86ec0","sha1":"e8ae86471eb0f261f0925f36e70bfd0f6f8a1d2e","sha256":"d616b6bda0e1d217bf602ef6539d988933f1bd487bcdececd7d0b5ef3f4cc00e","sha512":"a6f1bf239f5389e941fc63960cf8bc3df20cf1216b6e696d89873440058cc19aade02b34da878184ff5af72125f02bb7f7cce6f199223d4e4d46615ccb8a3fce","ssdeep":"96:ZqGQlcdUo2dbu+rybu2ybFybsfb88b5mtbueEyJSak0TOiwbTlSkM35Vkmh:E9lcyfZrEu2EFEw8m5mxBTOiwFSkM3Yc","tlshash":"91a122a673601ad71bef10ed5896d003b0ea1238c52dc8c4e17269f68df4fca7d2665e","size":5058,"data":"","first_seen":"2025-07-07T17:47:21.460335Z","last_seen":"2026-09-15T18:33:40.632292Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/8d2667dc825ba8e442bf7fab147c6eff.js?ver=c6eff","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9f02dfd34a6e2ce542ab58f3f6aed6e","sha1":"6643d34a1d73ef4b17b38eb648a45450cc6d5ddc","sha256":"3cd2d490c2f1a6051b2cfb0dfddcee66461df03e46450992911efd56c17d168c","sha512":"c7dc5bc72027228886975fcfa969fc9968c1060cba018c4cc9dcd0ef983cf7cb776370ba051b6b05347fc7c60aaf16abeea88264fe97ba45565cb46dc65d4437","ssdeep":"","tlshash":"0f114c48710775fa5abb315a20fae581981d6cb1c42668f978b501f4467edf4323273f","size":879,"data":"","first_seen":"2025-10-10T13:13:00.566118Z","last_seen":"2026-09-15T18:33:40.528546Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/f0f2fbc4b02848325d84a17e504af1b1.js?ver=af1b1","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3befc34cd7da3ea0039cd387865e80c4","sha1":"67b1b0aca9f764cd7358665ad2f95bd268988304","sha256":"b8364483c91f09f9e6990eb3fea5c69be517ff832b9459598a0b323bf5bc4a65","sha512":"8c6965b2ef825e17a6dcbb37de1847ddbe9a3258d830535fdd6d778744d0acf6d06523a49c309fe4dc58dcd93fa4792dab0c09e20dc3af80c516997f861382d3","ssdeep":"","tlshash":"b0d05b0cf5cdb09f078335725a3f5949d937592414545969ec6331d45e3802e6733d7e","size":281,"data":"","first_seen":"2025-09-27T14:46:41.024399Z","last_seen":"2026-09-15T18:33:40.514285Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/4a0f1e6e5810464b1ab8c809f3f7c811.js?ver=7c811","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce5b9f4bce5d179d0765275f9436e637","sha1":"f92b0191abacabdd5d3ca1478231ff9396d0ace2","sha256":"6ad5808d8912d57c68f3be04c757e6fe362bfa5c27c7201a71fe6d3d19077c6e","sha512":"13b35fae2eb5fecea0a7de6dec8266ea7e22c58e50e68fb6e5d8ca1c401a934a296baeaa4b7fbb1ab22251199786c9ef30e7546828a66a11cb6bf33285faf7e5","ssdeep":"96:7N9zXFLW2HL/Oc4ix77TMAzKn59TUUajSuUc8PtdvNbRpcdVxcgKYxQXW2qI0aq+:7N9JLbixiFeUUXu5atJNAu4dT8","tlshash":"0c12760bb6c5a15942eb94fd166b3005303aa55e6406c778f073faddddb8f4a20239bd","size":9390,"data":"","first_seen":"2025-07-07T17:47:21.488188Z","last_seen":"2026-09-15T18:33:40.590443Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/plugins/complianz-gdpr-premium/cookiebanner/js/complianz.min.js","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"087de03e5dc079a0742ac8478a5f8c87","sha1":"b14ad9cfa3fa6ae9381806189e7f35f543d185ed","sha256":"fe345dc92f2c901c2eccac134294ff2216e70177dd054ba6f104af6015959ee9","sha512":"5742b4c16babac5856080614523b47dff4f3dff7cc102a3a5474ab1e0c82de4a1e987327beb303775042727b35d3f2498f6916c6283117415725dce206c437ef","ssdeep":"768:k4cjy6JZaYSJjv+YfzwLpstNyuGFGgxesKNVhIkYJO2ybEXoHHFC1aRHQpmiVKbX:IZal8OHQpmZNemLECFKAJ","tlshash":"3903e8b93a9c90b416ee87ed37abab48e4303961dc0fc8609565dc542258dc70f9bfb1","size":40647,"data":"","first_seen":"2025-10-07T21:11:17.93794Z","last_seen":"2026-09-15T18:33:40.623497Z","times_seen":8369,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/5d102a15d6599ba994f5f03611352408.js?ver=52408","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"30a15ce2c76947830524c0ba3727de1b","sha1":"433b3016b5e368d0a9e3b7ac86477089929af69c","sha256":"22c3ac6da7f0bc281cb3a5070f7911b2ded612fb9f858c06d5dcb9b96c8ef7cb","sha512":"e399d2ab6305c5d24f420f5841f7802e949e700ccc11ad0a940b499bbdac24c025ee1c86166a0ab6f510db559e0089158caa6da8f238b2f1554e2586c56ded2e","ssdeep":"","tlshash":"28014c3a712052330cbd7d6090f7c7431632a4920d8bb560855819b44bf6c537f5fc8d","size":846,"data":"","first_seen":"2025-01-14T13:43:51.283702Z","last_seen":"2026-09-15T18:33:40.53556Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHdjX2VuaGFuY2VkX3NlbGVjdF9wYXJhbXM9eyJhamF4X3VybCI6Imh0dHBzOi8va2F3YXdiaXVyemUucGwvd3AtYWRtaW4vYWRtaW4tYWpheC5waHAiLCJzZWFyY2hfY3VzdG9tZXJzX25vbmNlIjoiYjJiNGY5MWQ0MiJ9","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"adc20f26972e5a01607ff1432c4dcd15","sha1":"91bde46aaa24e885080d6cfb1f4777a4cc9acc02","sha256":"bd6ea0831a496a54a9929f695e4a1b77d2fb61c9cdd893180bc5258e52f6ecb2","sha512":"8b9768337549311f4a6529c74fcee33a287c8ab1d01be6d1d2e78e9d88a40c0549420db2a736c200ee5ea5c7b08e19882f92814a991d9011ef55c0366dade1be","ssdeep":"","tlshash":"deb09b7149545f756bd17fd11468662784f15027b5900c45b65ad588570c9494c4150b","size":129,"data":"","first_seen":"2026-09-15T18:30:44.924176Z","last_seen":"2026-09-15T18:33:40.694063Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,ZG9jdW1lbnQucXVlcnlTZWxlY3RvckFsbCgnLmRnd3Qtd2Nhcy1zZWFyY2gtZW5mb2xkLXdyYXBwZXInKS5mb3JFYWNoKCh3cmFwcGVyKT0+e2lmKHdyYXBwZXIucGFyZW50RWxlbWVudCl7d3JhcHBlci5wYXJlbnRFbGVtZW50LmNsYXNzTGlzdC5hZGQoJ2lnbm9yZV9tZW51Jyl9fSk=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e5e38fdf9449ea28e1c91235494063f","sha1":"17c585b2e80546c8bfc84e9492ab3a1f6b5986ed","sha256":"2f58d1dfdea774bd40f0b7896772aaa3a47d51c67e5b1307318fdda577d4ad26","sha512":"87fb7afb4dd955a63aaaad8990e7a047da7e704eacfd9655de647873fcecf0d349ac09ae907c3d45f082580580be29ca0c8e22ce0f9d9c78c6dd1f341fb3887d","ssdeep":"","tlshash":"41c08c033070603208ee1eaeb0f81bcc79b1012858c2013d40f08b5c47f2e8303308c9","size":161,"data":"","first_seen":"2026-09-15T18:30:44.933705Z","last_seen":"2026-09-15T18:33:40.694733Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,KGZ1bmN0aW9uKCl7dmFyIGM9ZG9jdW1lbnQuYm9keS5jbGFzc05hbWU7Yz1jLnJlcGxhY2UoL3dvb2NvbW1lcmNlLW5vLWpzLywnd29vY29tbWVyY2UtanMnKTtkb2N1bWVudC5ib2R5LmNsYXNzTmFtZT1jfSkoKQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"12d5206ce84aaf3f8932743c6060018b","sha1":"74b0b3d8572408b45e33d3ab7d68486a62ac77fb","sha256":"c961c13ec5b0b257ee7049bdeb1078def025e3ee6c02ca609b6a45e2ca48056f","sha512":"dea6be0ca1c0be69d778c2c9397d7919535e13736d27ad78d373e1a7114f6838495b7e953fb4540a7424bfef63519ca4e952706dd644741a565d48c2865b15c6","ssdeep":"","tlshash":"35b0922b354409e4128b35e018ef93e53d32a488b9516814e8bab509d0948ca2802ed9","size":121,"data":"","first_seen":"2023-03-07T01:19:01Z","last_seen":"2026-09-15T19:23:35.164679Z","times_seen":8390,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-contact-form-7-tracker.js","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"272f14f5de9caca54765bb008b7e660d","sha1":"d7aa9b9adadc5479280063509b0cf2a978059b5c","sha256":"dd202417d77b3a8ad724878247a98b47591f62f02f3b06382505e606daffea84","sha512":"caa540df56a0091b59c81967f10940279f9b7ae9136ad0e12aed7ef859b79b1682c1a86fcf8daaa32082856035afafacf6e54af1ff756ea58cfdca60ada71932","ssdeep":"","tlshash":"c701c08c3481a4fa212c1cb802fe2d07e7b03977e4cc5b112234cc690bbc5c87632b45","size":726,"data":"","first_seen":"2023-12-20T06:20:40Z","last_seen":"2026-09-15T18:33:40.513766Z","times_seen":5371,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/073b58f5146896c896805e996afda5a9.js?ver=da5a9","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c63d79fcd8bc729acebb3d97dcbba93","sha1":"3e09ee1242fe1b79d34380e85653471c85ffb7ee","sha256":"99a97148b859ce8fa4d36da1f0838875d6c7b60ccbfa45abe013de5f9e6b85d5","sha512":"7e5e2598d8bc399d9ea158f544fca3088352fc6d992c339e494e0aa08d76f544833a1e47fcd546aa4413e9a036d861c7150082633bdde498d66cc868f6643c09","ssdeep":"384:OIpzOPOQqB5gD2Rcc2UH+xN5ESlkTEr2xC6TtBBCm:OBM5gD2Rcc2UH+xN5ESlkTEr2/TtBB7","tlshash":"63423145b0e8f199c8f63cb0d83ff7852413ab73aa0199d4e8598526ca3cd6234db57d","size":13008,"data":"","first_seen":"2026-04-26T11:24:28.727771Z","last_seen":"2026-09-15T18:33:40.653231Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/e0446d25293eff0dc47598face0e3a60.js?ver=e3a60","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d02589c9e145ce38d2642f11e962c902","sha1":"d0c9740880806ab47321d450badc704968d93dc5","sha256":"a79524b3fd45f9cbcd158c5a0fd8051f5c9664a8b4e69836e918ae485c1ade3d","sha512":"ade92fac1c5439e91d2ff148bd407f8f5ebcf690efdb9e7b9d56a0a969b3c98a94f0aa3b9e175647986d747d5f34b075398d6a55498dd79e7566504d04391d90","ssdeep":"192:4up34RRcpfgcCcdcIUz3W/9mr97+n+rD47ICdsSsDIlG:NI8ocmIUzQ0pgYIg","tlshash":"0e72650ff20162204dab71a1111ad81993bebf386906c1bcf4ff46e99524d4971baefd","size":17252,"data":"","first_seen":"2025-09-27T14:46:40.88908Z","last_seen":"2026-09-15T18:33:40.59259Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/f4c3ecf52f1b3b879a4fa956081ce604.js?ver=ce604","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4aca2deb5f96acb63f1855e82daeb88","sha1":"61fca6bdd2a1561d814bdbdbc2fe6c2be8fcebf2","sha256":"6a7df9326d40afca09ca7b06e6a1cd59b34a588f9503be8b3317649d055a3cb7","sha512":"86a7492d23207eb27ea8bffde03a088b98a76df3bbb5671881780787ab0ddc61825db26670dfaefc523cc6126a6bb8600c0ae450cb536fe2ae1c1d358d300ab6","ssdeep":"1536:6l7RLi9gxGUs+4Ezy4bx60BWTkkWyAuFX18bJ5pDVGf9oOcEBMjsBj0yGHIka/O8:6Z45XqbJ5TlBryitYgPS","tlshash":"63930addb2cab06347a770ba40bf550bf2361999684d4400f125e4e9bc78b4a927bf3d","size":90560,"data":"","first_seen":"2026-09-15T18:30:44.837625Z","last_seen":"2026-09-15T18:33:40.572872Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"17d226fa8aaa796b9ac3e70a14d69bb6","sha1":"13ed6017a2616c03290e1df07d6f43f929149a27","sha256":"a57e8253016d539072bc1e62489debc965c26644c6358e1ef5c2ef9d27be17cd","sha512":"0494ddb2804e0cae097aa9eb35ecd9f7f44457082b822aab9019211056e7e3ee59f1ecf39513f57e9c6b8e23112fc1edea6a19da7e6885e10370a00a7eb660df","ssdeep":"","tlshash":"37110e26815c8da356eea9e891d9259231c905113a3198c1c9ffcc1c029eaa1169f24d","size":1021,"data":"","first_seen":"2026-09-15T18:30:44.865572Z","last_seen":"2026-09-15T18:33:40.696133Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/9a0ffbec086785bfd9e67bce17c9b98f.js?ver=9b98f","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7c2960bce0d667478e6e83b4ea86294","sha1":"a5dbf5f3821c115c24d02d1adeec168227d5a69c","sha256":"6411e7a3161588fb74f9a1e79d92ca7b6a15c04f7447bf33477f9f098f62049d","sha512":"540bb7be6c27a49f8a702586b5292da73cfa38b7713a640cbf2c3addab515b33f5efa04269faa08db795231d8cc3e26068695375730675c440e9f8a031baa099","ssdeep":"","tlshash":"ee01bd6837196bd0a4dfaadf2015bb0a0115ec278b0180a2b696d8626734cdf3606d3e","size":778,"data":"","first_seen":"2025-07-07T17:47:21.404553Z","last_seen":"2026-09-15T18:33:40.536593Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/238a9ed5b549652066133cc6beef36f2.js?ver=f36f2","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb29c69eae002e711d327d8cf3199ae7","sha1":"e674dfaf3fdcafb985fa55940c5cbfbc1871cacf","sha256":"575c0f9a2c3ba67a9dd2deb1b0c9f6f1be9a31f97a2c17301cdf1ad16400d7e4","sha512":"77d13048b579e20be50b901dd363e6da2f654872385f6a2e5ab84971adf0c9f5935d403141106c74e0128b2d114a8142d86dd24c701ebf07e8faeb571f1a1671","ssdeep":"384:1wNWSiRVRS4tdanZkYH5FL736ePkPakFW:qNdi7anPH5FL736ePkPe","tlshash":"a162e945756050358aa111ac283b018f613adc3aa6f46834ef18e4ae387cede50fbb7d","size":15317,"data":"","first_seen":"2024-06-22T15:32:55Z","last_seen":"2026-09-15T18:33:40.567632Z","times_seen":4240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,KGZ1bmN0aW9uKCl7Y29uc3QgbG9hZENlbmVvPSgpPT57Y29uc3Qgcz1kb2N1bWVudC5jcmVhdGVFbGVtZW50KCdzY3JpcHQnKTtzLnNyYz0naHR0cHM6Ly9zc2wuY2VuZW8ucGwvc2hvcHMvV2lkZ2V0L0NvbnRlbnQ/YWNjb3VudEd1aWQ9NGQ2MWM3MzQtZTY3Ni00ZmEzLWE0MTktMWRjODc3Mzk5MGEwJmNvbnRlbnRJZD1jZW5lby13aWRnZXQtc21hbGwnO3MuYXN5bmM9ITA7ZG9jdW1lbnQuaGVhZC5hcHBlbmRDaGlsZChzKX07aWYoJ0ludGVyc2VjdGlvbk9ic2VydmVyJyBpbiB3aW5kb3cpe2NvbnN0IG9ic2VydmVyPW5ldyBJbnRlcnNlY3Rpb25PYnNlcnZlcihlbnRyaWVzPT57ZW50cmllcy5mb3JFYWNoKGU9PntpZihlLmlzSW50ZXJzZWN0aW5nKXtsb2FkQ2VuZW8oKTtvYnNlcnZlci5kaXNjb25uZWN0KCl9fSl9KTtvYnNlcnZlci5vYnNlcnZlKGRvY3VtZW50LmJvZHkpfWVsc2V7c2V0VGltZW91dChsb2FkQ2VuZW8sMjAwMCl9fSkoKQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7fcb6e08fb92ef6eb4845e3483d191b","sha1":"21905c402093ca04f4d166430a71980c75078759","sha256":"2deb74ae452d2e7a22d23c1ab93b5589d5e0ebe64636d8aa0c24130219bfb9b8","sha512":"a03962912ec8d0ce47c835207349b51e6d962e6c4382071499d1e193ec569a9a29f8280591b5b220f0b51ea4bf8a8780571f7ace4cf2a7343dc7da58bfb0e237","ssdeep":"","tlshash":"55f0d44d1509213f174c15b771b2d3307f7431166c144141c66c0cae68fbe435b52a99","size":478,"data":"","first_seen":"2026-09-15T18:30:44.897728Z","last_seen":"2026-09-15T18:33:40.696795Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"be07442e7d96ed488ad96de0bb3880d3","sha1":"24f2f9d59e741ceaa6497db6be894432a5deecc7","sha256":"cc66b25891f7df0122ee30ab07ca20fa1946e87dcacf1c90b2b265f6e82c4f6a","sha512":"7b992d0f8b5e75d763146df4681450496677f27867e979401e81c7f1a5c7e09144e63a8964025c3848c2f96508cbab8170b309b38925267dbb3766ff54f54e8a","ssdeep":"","tlshash":"bd21ac1801389f798be96f582f8e211ee9d3e54256ec282cff8c5d1965c662ce76c08d","size":1177,"data":"","first_seen":"2026-09-15T18:33:40.697394Z","last_seen":"2026-09-15T18:33:40.697394Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea1af5d081b4c264d77f836d673f8d3c","sha1":"ba7ea7c5bb7532237a6e455876706f3292ef1d13","sha256":"0ab06ed30b0a3c7b4f3bd2e2793ac5e35a79eb81d33552bebeb0c9562be5c6aa","sha512":"be5fc945524deb8960bea43686ad1bb0c2e392047a198436c5005c7ba2358af55e84cec82b96553302130f7d674b776a4431a88ec1e75ec20992df6fcd2a3cc2","ssdeep":"","tlshash":"0ef02d31f2498d201084d968f274d41011b1ca46be1de930f3dae52de9a49858277eeb","size":589,"data":"","first_seen":"2026-03-04T01:31:02.07804Z","last_seen":"2026-09-15T18:33:40.69828Z","times_seen":9346,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/0e37ee50722512337b6e5c9149d1b7c5.js?ver=1b7c5","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ce9821c0f44758274d2065393107fa4","sha1":"fee03512384094f297bea2a5f6a1eab16c176b5b","sha256":"66aed13ee7180a479daeb082fdc9a11e214a2da6bf4a1020f5ff3c750fafa8d6","sha512":"46201f5350d073cc4a82b1691cefcbab6e12de897ff05bdc39dc869d02191b67e46ea997da9b0618b902a4ca3e31f42675d5fc08b56677fe4aa790c4d8101cf1","ssdeep":"","tlshash":"342104bcb7a12d5592d310b0887a6911939b56d5c304a85cdb594aa52cecb0932bf71c","size":1384,"data":"","first_seen":"2026-09-15T18:30:44.551819Z","last_seen":"2026-09-15T18:33:40.561169Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGNvbmRpdGlvbmFsX3BheW1lbnRzX3NldHRpbmdzPXsibmFtZV9hZGRyZXNzX2ZpZWxkcyI6W10sImRpc2FibGVfcGF5bWVudF9tZXRob2RfdHJpZ2dlciI6IiJ9","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e195c9f56d128afcfb18f8bf56da4111","sha1":"8e40d2d4308e328d972c0d0eb62be710b6fa56c4","sha256":"e8426a0c6fcbf05c7b9c73adbf7e9e6db8436a82413a604aa62cc0418b0571e5","sha512":"dc85be730a65f9dc3a92f1a9481b8d8c42ea7e01df61594574ff3ca9bb952efedd431c6604ab2435401a598216a40bff196e2d0cf248df9416fb214d111a288c","ssdeep":"","tlshash":"72b012a228255026040d9c10e0a0cb13e304d058099994b0481004b5435a932fc4fc02","size":96,"data":"","first_seen":"2025-01-14T13:43:51.455034Z","last_seen":"2026-09-15T18:33:40.698819Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/311f9d780f7f7479882010d33cdf5231.js?ver=f5231","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35da7fb605030de0fad86592415c6618","sha1":"e7a9c65ab6300317889d90f63faaa6f6b1fc2a46","sha256":"021511932b155cee00b42b4cffc325a3f5996f20bfe4e14487cef644de1cd4a3","sha512":"582f79e56c003b681647e091f4ec41d5a825fa9063f296e295a6fc5ee853c1d1f2401355c341d8818674d455f8e0d7416209639c1f7420830bbd06908f7c90c1","ssdeep":"96:ChLSSzMuDuZbuNu3FD+4nmucP9uFExivuDudJ/7gwtA/+:6LSsM6wb6KDLm/9kE0v6QKd/+","tlshash":"d7912f323b903606d5dfa0baa1afa6083020d53b510d06f2a627c575ca58cc3fe77d6e","size":4334,"data":"","first_seen":"2025-07-01T12:26:32.720662Z","last_seen":"2026-09-15T18:33:40.558776Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGF2aWFfZnJhbWV3b3JrX2dsb2JhbHM9YXZpYV9mcmFtZXdvcmtfZ2xvYmFsc3x8e307YXZpYV9mcmFtZXdvcmtfZ2xvYmFscy5mcmFtZXdvcmtVcmw9J2h0dHBzOi8va2F3YXdiaXVyemUucGwvd3AtY29udGVudC90aGVtZXMvZW5mb2xkL2ZyYW1ld29yay8nO2F2aWFfZnJhbWV3b3JrX2dsb2JhbHMuaW5zdGFsbGVkQXQ9J2h0dHBzOi8va2F3YXdiaXVyemUucGwvd3AtY29udGVudC90aGVtZXMvZW5mb2xkLyc7YXZpYV9mcmFtZXdvcmtfZ2xvYmFscy5hamF4dXJsPSdodHRwczovL2thd2F3Yml1cnplLnBsL3dwLWFkbWluL2FkbWluLWFqYXgucGhwJw==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"94856b27cc8122f4f97d186bcbfd1820","sha1":"28ded52086735e5a3ea313e911cc07f28ea24f68","sha256":"286df248f9b59c6c10e008226525238923927cdb61b2bbb695e500a3810a9f59","sha512":"ea64a97de9ede3c07be06964e3416d84520c193513ec4e62705662838aea2a29b5ff2fc7afa7a2006eb08e3e907015a35ef73d10cbe8a44274695711a1228172","ssdeep":"","tlshash":"bde0ecbf020e955546a4b2edf1419e8cd1d2d02ff49c8208e9ae450822f2f105dd632f","size":316,"data":"","first_seen":"2026-09-15T18:30:44.908979Z","last_seen":"2026-09-15T18:33:40.699313Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/833e0bec6840f920603c10285b38ee5f.js?ver=8ee5f","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f6d0da14552dc8023b25a4f96b3e61f","sha1":"6651ffdd53736cf4de803b0d29b451067d456049","sha256":"9f54dfdfaadb5d052e7a2cd76bd90deab437fb1c1143afbf97c8ee3dfaebecb3","sha512":"ebed255504ad0507398e3add6664221534f6c0b48c84f13377aa89e8123d2452b477dbba5932c64518a81f5a4f52b486f3fbb09bd428289587695008dbd0a79a","ssdeep":"","tlshash":"0f5174dd726921a2248f3179441f5500e0263869c20ace2d11fa5cba5d3dee83373f3e","size":2830,"data":"","first_seen":"2026-09-15T18:30:44.397856Z","last_seen":"2026-09-15T18:33:40.539555Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/825b37f84bf597b5c24b537682189ae2.js?ver=89ae2","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cae5f39a515d238a852d375686aa4bb8","sha1":"64e98acce6447b90712b47f27d1c4bfd7d8e0f2e","sha256":"a6981e05979832c6fdfd6f20420866ea3bd5a6cdc46090c25a4ad61a6063edec","sha512":"97669e6181a435c8ee374ae705130ceee56dc6d95b04e1f0b2a1d0209a633c1df7b6c299a45a3dc17ce878f9a34f483ca9f7b632e0baf63020dfdebc8513ccca","ssdeep":"","tlshash":"81410f5cb3407071137ea0f9a78fb7069026b4a5c9064ccc714682962dfe275b1dbb6b","size":1929,"data":"","first_seen":"2025-07-07T17:47:21.439334Z","last_seen":"2026-09-15T18:33:40.516997Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHNycHNjcmlwdHNfcGFyYW1zPXsiYWpheHVybCI6Imh0dHBzOi8va2F3YXdiaXVyemUucGwvd3AtYWRtaW4vYWRtaW4tYWpheC5waHAiLCJlbmFibGVfb3B0aW9uX25vbmNlIjoiMDM5NTU4NjE1YyIsImNoZWNrZWRfYWxlcnRfbXNnIjoiQXJlIHlvdSBzdXJlIHlvdSB3YW50IHRvIGJlIHBhcnQgb2YgdGhlIFJld2FyZCBQb2ludHMgUHJvZ3JhbT8iLCJ1bmNoZWNrZWRfYWxlcnRfbXNnIjoiQXJlIHlvdSBzdXJlIHlvdSB3YW50IHRvIGV4aXQgdGhlIFJld2FyZCBQb2ludHMgUHJvZ3JhbT8ifQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"abf5a5e77306c9e2ca2d666c1962e282","sha1":"6bdb51316031f6707bf785a1630de88535d0a104","sha256":"410196bcbc12cc56878df457654b3c2f774728326de21f848936054ff1952274","sha512":"e3e93b55028faa5115679de3bf825fda2a0f73c7e1b4a281ef6c33a6947bff266a080ebb9cfabd9c2d0729a0a69c2b0f06833a4f957351f7640e33e561fabffc","ssdeep":"","tlshash":"cbd0c27a0e640e732761b2e211e8559f0026997752f47c21c0da819e132ce13cf1a144","size":283,"data":"","first_seen":"2026-09-15T18:30:44.921609Z","last_seen":"2026-09-15T18:33:40.7Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/8feaacc2bf0ee778343b1b0884500828.js?ver=00828","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9eb7ff097b842bd86898642447bc960","sha1":"04145a7d95e8b62d9a9b2a22d6b10f7e38abab45","sha256":"cecb8854487e32f5a2f20529f276bca652c7903edbc396f95bfb70ff674b87b2","sha512":"6b0d742bcb7813fc49695ba777312ca8dce603d15eb73daf78d6b9a3c42d0c55def6d1e62e2af71bb54571e019f35a8e258f6244236673436c5695484285b3f3","ssdeep":"","tlshash":"3c2135adf504d1391bdb7f75406f52855539b840e4248caebc6a24c05b3d91532a2e7a","size":1302,"data":"","first_seen":"2025-07-07T17:47:21.493114Z","last_seen":"2026-09-15T18:33:40.60207Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/cloudflare-turnstile-js-after","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6e90bc51e65e1c4672057df7f2b04bc","sha1":"8d8893598d3f95faf0cec33da08a6ef1fd78a4c6","sha256":"d90b0aeade788d29b57fad347828eeafc95b07d3aec7f73207b94b05c4789f68","sha512":"f3b4ce6c2db897163b32fbea8662557e42d01fbea3a66d15631829e5e8769b54553c3951fec46d6cb7d9c9ec8fa77de27f041351427f8dc725c0d14eeb98bc49","ssdeep":"","tlshash":"8b4192aed6a82bb433b3aa3834b6a3939d6a9496c02a6019886ba8050428cb0c090585","size":2211,"data":"","first_seen":"2026-09-15T18:30:44.894382Z","last_seen":"2026-09-15T18:33:40.700539Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHB5c0ZhY2Vib29rUmVzdD17InJlc3RBcGlVcmwiOiJodHRwczovL2thd2F3Yml1cnplLnBsL3dwLWpzb24vcHlzLWZhY2Vib29rL3YxL2V2ZW50IiwiZGVidWciOiIifQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9fa0a9b42ec58a6e933e1dd9012355e","sha1":"8647984443662f4002ad643e9e48c4faca770f3f","sha256":"aa3c081110a12187af01fb8888f07c67a89701ae79f135d8d847f8d651010c3c","sha512":"963aaf325684ca53863cad1d76b811c87432650c742afa097646f20aaae8fff194ce372de91be34b0fa4869934482b405a60ebc822911819daceefe6bad76350","ssdeep":"","tlshash":"c1b0127b406d046d0769f7f0e290041408321d1305a33100860f1c586b0a2054b86006","size":100,"data":"","first_seen":"2026-09-15T18:30:44.931762Z","last_seen":"2026-09-15T18:33:40.704438Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/8dab543501bc2987f17ce5b7ec80f95b.js?ver=0f95b","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"965bec6fb428cd02baba342afdf949a3","sha1":"44efcf7366274b0917cb1847e0d5b85e0001fb53","sha256":"661151a0b48af006cdef76d9753342b391219372717d9952eab5f500cfdf297e","sha512":"fab416129605522c3e301fd517dca260b9f7599cd7ea71c706e2df5272dad66dd8bfa44b33b9853f7a82e81b89544d8e6a72db27567604ad8005743f770fbefa","ssdeep":"96:Bfo434pGeQjUIMFOQmliY3nPlhFliY3nyHJ97thY3oSY30A:uq7n/nCYqx","tlshash":"b081334df969b1aa46d6b07204ff7a0768ba3c4bfb400141f1059488efb8d86b17683f","size":4118,"data":"","first_seen":"2025-07-01T12:26:32.678546Z","last_seen":"2026-09-15T18:33:40.511828Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,aWYoIXVwZGF0ZUluaXQpe3ZhciB1cGRhdGVJbml0PSgpPT57aWYodHlwZW9mIF9lZHJvbmUhPT0ndW5kZWZpbmVkJyYmdHlwZW9mIF9lZHJvbmUuaW5pdD09PSdmdW5jdGlvbicpe2NvbnN0IG9sZEluaXQ9X2Vkcm9uZS5pbml0O19lZHJvbmUuaW5pdD0oKT0+e2lmKCFfZWRyb25lLnByb2R1Y3RfY2F0ZWdvcnlfaWRzfHwhX2Vkcm9uZS5wcm9kdWN0X2NhdGVnb3J5X2lkcy5pbmNsdWRlcygiNDEyIikpe29sZEluaXQoKX19O3JldHVybiEwfXJldHVybiExfTt2YXIgcmVzdWx0PXVwZGF0ZUluaXQoKX0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e746027f123edb7f85b14b8921dda2b","sha1":"cc4a09665068f7b6f6f70ac208f9a52c51592648","sha256":"4112404fc26dda30e67e10a1d83de66d20201d094fa5837bf2c81d560fb26c42","sha512":"5cb97155aaf8d6eb26e16cab244881de64d2d1125813089562bc7353db220a8b254ea44544381f7d124fdd5422e4094800e35e19be7aac485f4ba75627190be4","ssdeep":"","tlshash":"87d0c2deb4bfd10250b964388645208d70de2cd249dd469043e89c309e8118f963e10c","size":284,"data":"","first_seen":"2026-09-15T18:30:44.929122Z","last_seen":"2026-09-15T18:33:40.705018Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/4ad03c18046802b35b16b2fb1d425e94.js?ver=25e94","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c690d24e5977f40386fbc8296caa937","sha1":"942999bd80480269b5633adc7c39df37a36433a4","sha256":"f9598efb249f3cf65a73ad6807a7dee3e7e2f759673e81c77a7e1aab9940148f","sha512":"f93bcd1c2d80685fc5031535bc0d2334f2096750b3e3b3abd069adaf859aa0486a181c69955c0cc14040f81ec45fc98fbf8c673d25be244a2fb7ceb47d0d97c0","ssdeep":"","tlshash":"491100dcf174d1f10c931938672bab42f61eb428b7d2d500215ce8828e38cbc272659e","size":894,"data":"","first_seen":"2024-08-20T15:08:04.96415Z","last_seen":"2026-09-15T18:33:40.518316Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/b221db4f2d773baa13807c4a4b343b46.js?ver=43b46","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00362b089c35a67bb58cb631388641a4","sha1":"128de708b6afb80a8dbd538be54b034ded9a7bb7","sha256":"7496312df23937240a33bf29e54f57835f49c07f974bf0b5b301cf82d4363270","sha512":"f935e2fd01e1931a465d9e124fdb3246477e1ffeb3b0f437965c949793a6a011902d03419d88feec61264f7b5664f2ef4446f794f2fad84c02d250da12cfaf91","ssdeep":"","tlshash":"ea2104fa3421687609af150db5bed3ca797051a0aa0b7882c57cd4ad0131edf5485eae","size":1220,"data":"","first_seen":"2025-06-23T04:04:48.631251Z","last_seen":"2026-09-15T18:33:40.565247Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/ebe582b2e40039abc43613ee11eaa918.js?ver=aa918","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4164059c3918c62d7694a68d66c1798","sha1":"44935aa50b7bccf4302cedc6b5c9bb324b2b4ec9","sha256":"131e9b17f11b7e02efd3a4af9481d443e9e244f4e1531809d2cbade78af1794e","sha512":"53ce739dda2c5e31596ff81d515dec222a1b32ded595470c83c209538b247b561a10cb926db356e28e82480b2999b70027570a68a1b561d5056cc4d725f47e20","ssdeep":"192:ndBuw+tnreOGdcl4c65ki0uUZ4VMK/EEGx2sCBZSySQ:ndBuw+tniG4t2iHEss2ZSySQ","tlshash":"0412521cb6ad73b127eb212608efa50765b2381ae9444640702fd595ef38ec0b37392f","size":9266,"data":"","first_seen":"2026-09-15T18:30:44.832718Z","last_seen":"2026-09-15T18:33:40.552887Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/b1e8c43d42a4bb6ed9bbd9dcd49268f7.js?ver=268f7","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2597511e0a5b2d850d93792c14b6f705","sha1":"3f1d9b4d24ff8f100e5ad6328928d056d8169508","sha256":"c5fd2a851c04cad1406fac61c7de8d0ccaf137db81cc24376a44f9b79d336e36","sha512":"7c5470d6d55ab489fb4ad05fd3a5fe86f606923f891e401c0e572f6934a26df4be661bbaedb879d54d16e26cef1c00ebc89b68c9cdfa4bc1a71ce2e1c02c9c43","ssdeep":"768:H1QvQ3ezJg5EA+Kt47gdWA1D0Tj1BhIP+++yCS8hvp2ebtHSwKURQMdnw30OZa/f:Viz7FhvTcKQa","tlshash":"03e23a84f26530724a233574512f950af3375a11b04a8de1da65e5e43c7caac83bbf7d","size":34008,"data":"","first_seen":"2023-10-30T09:51:19Z","last_seen":"2026-09-15T18:33:40.629529Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0aa35e834020bc5b1f6924b42e75e272","sha1":"9b736110aaaa813111e2fdf1854274f82e1fa73b","sha256":"331178cf55c76a865f1b2e535fb01be4d18bde55d361cff5dd8c8ab961e95d1e","sha512":"7c1e05376629e0b7a8e0e3afc0f0465c5f0b515679daf8d688f6e80ac40055c3ec0c2d5b9140a8292f81b6ae7a1354453af5eef62f8ca2d0db2c95745be1ed24","ssdeep":"","tlshash":"5af0e16c38737136e1c79b6b9037e18875233424f6179994b92c0a880d148812e1fe5f","size":582,"data":"","first_seen":"2026-09-15T18:30:44.880986Z","last_seen":"2026-09-15T18:33:40.705593Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/e03a1c6563bb586a4d9471dc486abd3b.js?ver=abd3b","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8ec5265b91e9b40cc896fbc2682c14d","sha1":"9b8c87bac164ae947f872bbda48a5f1246fe16b9","sha256":"bed9197ad806f2aa5976145f29a766bbf8cb723504f2cfd78518f8f3977a3f92","sha512":"dd38f02fc240ddd24daedd1c890bfe87a49f9c3c47379a91ab1b2eb206a06826a35cfbd3d7e8ff87b514e76f56cb9bd8b96da818142f6276e378f6ecae72cdb4","ssdeep":"","tlshash":"e181ceece131a6711efaa837947f8d5674169e7932de451038a3afb10dfc9280356e1c","size":3904,"data":"","first_seen":"2024-08-20T15:08:04.959782Z","last_seen":"2026-09-15T18:33:40.61925Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c443870260cce82ab1411fbbb21c179b","sha1":"bd34ae67aedfffe2c678e36c038bf58a4353dac4","sha256":"6d16cebe1559da3561773d8d5fd135b3777cd72c010e7cedeffd2629ecdbc933","sha512":"feaa0ea50ec33bb899576239d40cee2ce78162f279a02f3e4a6ba8b28342cdc181a42575b3a116eae8bd0fb33cc6dae3616af12c5b7caaff6c6c2aaa0b310312","ssdeep":"","tlshash":"1601fe1b0024a5739ba323a85c3f0f2a39ce45c4b18da057cbfdd345221fe0e700aaca","size":685,"data":"","first_seen":"2025-10-27T06:48:40.979777Z","last_seen":"2026-09-15T18:33:40.70661Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"227ed0374ce5078ad4e209642f430d74","sha1":"2e73abecec30a7e0805a2287a00134a83937997d","sha256":"572c9de85dab8a209087936b674572394718bd33b8e2c5e5fe6e690fd8f2bf7c","sha512":"b2cefe42e1d8c1ff58ae2f0e74a8540826707c6637eb1c857248e12cd894eb15ecf3857428be14e086d57c320f868eb945ec6dc2fa307f21219431b5872d9cb2","ssdeep":"","tlshash":"af0128116e14a839e7c2815511ad9bfc32b71376b4d1451dd3ad4b6cc31db91d4c2a0e","size":679,"data":"","first_seen":"2026-09-15T18:30:44.911768Z","last_seen":"2026-09-15T18:33:40.707302Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"PixelYourSite Free version 11.4.0","filename":"https://kawawbiurze.live/","line_number":24,"column_number":2480},{"level":"warn","text":"[GTM4WP] Google Tag Manager container code placement set to OFF !!!","filename":"https://kawawbiurze.live/","line_number":25,"column_number":148},{"level":"warn","text":"[GTM4WP] Data layer codes are active but GTM container must be loaded using custom coding !!!","filename":"https://kawawbiurze.live/","line_number":26,"column_number":26},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj77 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[reload:map[configurable:true enumerable:true value:yes writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":11298},{"level":"log","text":"[LiteSpeed] Start Load JS Delayed","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":9313},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj78 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.42557766328548197] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[data-category:functional type:litespeed/javascript] attributesLength:2 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj80 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.25029336167259375] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:jquery-core-js-extra type:litespeed/javascript] attributesLength:2 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj82 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.12823945981815155] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[data-src:https://kawawbiurze.live/wp-includes/js/jquery/jquery.min.js id:jquery-core-js type:litespeed/javascript] attributesLength:3 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj84 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.7245245998644816] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:jquery-js-after type:litespeed/javascript] attributesLength:2 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj86 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.16926393941793683] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:srpscripts-js-extra type:litespeed/javascript] attributesLength:2 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj88 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.1791301555241286] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:woo-conditional-payments-js-js-extra type:litespeed/javascript] attributesLength:2 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj90 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.712591517026372] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:woo-conditional-shipping-js-js-extra type:litespeed/javascript] attributesLength:2 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj92 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.930962499705911] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[data-src:https://kawawbiurze.live/wp-content/themes/enfold/js/avia-js.min.js id:avia-js-js type:litespeed/javascript] attributesLength:3 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj94 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.3542000742313063] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:wc-enhanced-select-js-extra type:litespeed/javascript] attributesLength:2 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj96 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.9039409930395724] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:frontendscripts-js-extra type:litespeed/javascript] attributesLength:2 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj98 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.6553260582098396] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:srp_enhanced-js-extra type:litespeed/javascript] attributesLength:2 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj100 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.4072934217991627] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:ai-js-js-extra type:litespeed/javascript] attributesLength:2 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj102 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.14920131957453509] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj104 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.599267672490015] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj106 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.8100863472372561] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj108 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.7445164227938569] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj110 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.6322379099244378] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj112 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.20757797483616414] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj114 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.5639152607737625] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj116 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.6165827654421836] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj118 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.9853863155849383] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj120 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.2428079298984891] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj122 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.7218087396329431] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj124 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.959744075039992] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj126 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.6606136005132671] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj128 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.49020266083628317] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[data-src:https://api.edrone.me/woocommerce_subscription_capture.js id:edrone_me_subscribe-js type:litespeed/javascript] attributesLength:3 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj129 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.29564055963358105] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:edrone_me_script-js-extra type:litespeed/javascript] attributesLength:2 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj131 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.7081554213943378] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:awdr-main-js-extra type:litespeed/javascript] attributesLength:2 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj133 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.16993345891631073] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[data-src:https://challenges.cloudflare.com/turnstile/v0/api.js data-wp-strategy:async id:cloudflare-turnstile-js type:litespeed/javascript] attributesLength:4 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://kawawbiurze.live/","line_number":2077,"column_number":10197},{"level":"log","text":"PixelYourSite Free version 11.4.0","filename":"https://kawawbiurze.live/","line_number":85,"column_number":2480},{"level":"warn","text":"[GTM4WP] Google Tag Manager container code placement set to OFF !!!","filename":"https://kawawbiurze.live/","line_number":86,"column_number":148},{"level":"warn","text":"[GTM4WP] Data layer codes are active but GTM container must be loaded using custom coding !!!","filename":"https://kawawbiurze.live/","line_number":87,"column_number":26},{"level":"log","text":"[LiteSpeed] Start Lazy Load","filename":"https://kawawbiurze.live/","line_number":2126,"column_number":46734},{"level":"log","text":"[LiteSpeed] Start Load JS Delayed","filename":"https://kawawbiurze.live/","line_number":2126,"column_number":47380},{"level":"log","text":"NetworkError when attempting to fetch resource.","filename":"https://d3bo67muzbfgtl.cloudfront.net/externals/67a5fd48c9a56.js","line_number":8,"column_number":188428},{"level":"log","text":"global privacy control or do not track detected: no banner.","filename":"https://kawawbiurze.live/wp-content/plugins/complianz-gdpr-premium/cookiebanner/js/complianz.min.js","line_number":1,"column_number":20859}]},"http":[{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2022/02/zestaw106-1-450x450.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.281Z","timestamp":1789497162281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2022/02/zestaw106-1-450x450.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e9e3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"2703d-69b15d22-100ea635cfcd84d3;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 11 Mar 2026 12:16:34 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ISuyKAUVCwIDwoGou5AmA6mYvBD%2BpLjxI3LeZbZ5DKCBrngYhaffYe%2F6UswTAZu0ffYFRPUH0kl5LrhwKiLpRa6ugBHv%2BXMUc6JZbqJNPm417RHZFym%2BDyfBIIdbx%2BW3yV3VBpHlQmU9WRpUEQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 159805\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":159805,"size_decoded":160645,"mime_type":"image/png","magic":"PNG image data, 450 x 450, 8-bit/color RGBA, non-interlaced","md5":"a233e56e6601e88319a8d972c642d01c","sha1":"a90763d47bf523d9942b83cb6606032abd73d443","sha256":"d158b5300028e3f59765f1d709e6297dba0aa31076cbece8aac76b60e4b75e0b","sha512":"39baf6adebc3a7105396f7e1c95df8e2769a35b676f12524c6f1a95adea0ca6b057bbe889f1a5e608c80c7a19a6ba9a7ec5b3938ee1fb424504eb235b2049ed4","ssdeep":"3072:MvGL3NK5WVKk4tBvLjoh5pjVpsCZMJ/3sHls8Bob55I8FyZ3W3Hs103Gcmsw:Mvk8vLyfjVJZMJUs86TRFyZsH8P","tlshash":"b1f312696bb8201aade30480a924bfa5cd4b4f736b77d5383d2f4e1072919cf91344be","first_seen":"2026-09-15T18:30:44.772396Z","last_seen":"2026-09-15T18:33:40.502331Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2018/03/movenpik.png.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.324Z","timestamp":1789497162324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/movenpik.png.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b730beff3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"b5c-69f9ec46-7fcd328ac3c77a80;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 05 May 2026 13:10:30 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2r4xcUuN1a731d5VcnAXD%2Bu8payzrWLf3br2hU5CdgJhYLuTbMOHsabgINEki6qZG8Xp9brqFNBsdv1Quy0FxaBIhq0zljnTYGNn91cawvpgiXuJWd%2FllSvRPJIex6IQvm9LFUbM3KBq%2F8Cwcw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2908\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2908,"size_decoded":3741,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c7064cbdb754ef0eb609aab5aeb7aaed","sha1":"6b77ce30c7d8f0a550bd58d175bb1555724e8e9e","sha256":"2b29deca6ca2baf1a2daa0e36d98d29c9185e8e3cfa9748a55542ee6c823d9d6","sha512":"7186c9dd687ad5fa620d36cdd768f348a42c21413c4aefdef1496f57bf7e0136848ee250bf2288f5051b7c02f26effb80bf718a665817c0eabb7d3ad08ef3438","ssdeep":"","tlshash":"f0511a2b23216fe8c8a1a2797bd2631bc30dfb158a47d3fb4328d4566d90550d57d9cc","first_seen":"2026-09-15T18:30:44.445523Z","last_seen":"2026-09-15T18:33:40.503014Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.ceneo.pl/shops/Widget/Content?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026contentId=ceneo-widget-small","fqdn":"ssl.ceneo.pl","domain":"ceneo.pl","tld":"pl"},"ip":{"addr":"5.134.209.153","port":443,"asn":42656,"as":"Allegro sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:43.136Z","timestamp":1789497163136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ceneo.pl","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 16 Apr 2026 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:CC:D3:01:00:A0:05:79:8E:68:CE:35:3A:AC:33:47:4C:C9:EF:60","sha256":"16:C7:26:1E:69:F2:8A:15:1C:08:E0:A4:C2:5C:2A:3F:0E:5E:F6:20:91:A4:C7:2F:A4:AF:9D:83:F6:0B:50:F4"}}},"request":{"raw":"GET /shops/Widget/Content?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026contentId=ceneo-widget-small HTTP/1.1\r\nHost: ssl.ceneo.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public,max-age=600\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=10886400; includeSubDomains; preload\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; img-src * data:\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T20:51:43.703029Z","times_seen":18482263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/6dbf5bc7fea67fc2fe01898339c59c87.js?ver=59c87","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.111Z","timestamp":1789497162111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/6dbf5bc7fea67fc2fe01898339c59c87.js?ver=59c87 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4xMa1OxJVRA7stFNzMRy78bfUmX0cDcwpWPCdMWe03%2Bkk42UmzWCYEAG7Mt%2F4s9T7I9p2ZIlSWv1ccBSUU0v9S89oeK4XoYdzaPrhCQ0r5Uz8hfItjkHzuiLYbEQpuNlJ9Or\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f4dca3ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1680,"size_decoded":1401,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1678)","md5":"94158aa7dbb041e67ea413cb3d16dbbf","sha1":"4ca181ad7627cba45a1c2fd63efea21569046955","sha256":"e0ef8fb2e04bec41638d3faa5db2df52480c966946aec97b18f1c83b9b8b475d","sha512":"d3d3739c92c55ef84f901828900e7d214e04b2c3f0b5a7dc3d572ed204421714b1fdd1f727c8d0d289771be5d125c425a5c799693d6058540cb72d0da318f8ed","ssdeep":"","tlshash":"3a31ed04634d58636f3fb22b10d66504f9e56fefc50ac042359691bcadb8e456372a37","first_seen":"2026-01-21T16:23:28.384593Z","last_seen":"2026-09-15T18:33:40.504152Z","times_seen":12,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/cbb970c2760bc144db21b3c7ebbe2d83.js?ver=e2d83","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.136Z","timestamp":1789497162136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/cbb970c2760bc144db21b3c7ebbe2d83.js?ver=e2d83 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C5tNpiLkzo4whUMxXvEHchjEhAtzVPNW7KeiWMxcjja0CI8Ddpvq4V2WGaigTJFkUCXBjGBDl7Y%2BPEaqFSlZOqh5aK52lVaZ1qugSdWFVCxOHZohjNGIcTWR3uJBR42tLbZG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f8df53ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158007,"size_decoded":40749,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65266)","md5":"e87b2127f830d89facf266fe37d3a086","sha1":"2397f4a6cd27ba5c2802680d042841ce10d3b24a","sha256":"7aa9b279d28f8bdfda02627f5192a3358b69d0405b01bb7db8b2dcb4f8ddd7e7","sha512":"a1b6206bd844b595ba368a3a2f7a072ebb8415d8fd38f0385d05b6a3e573a757de6ce92bff868158e3161d60170ad1c6c960e8264a4208b007efe760229fe049","ssdeep":"3072:cWdIxUMz/tGzT3+XtHi2iX6JPMupdggt1YHWyFxAcDHzEJLDnWTnWNBEBysX6qMX:dwhggc1lK","tlshash":"94f31849718473b246c720ee653f1b0e7137ce69d009d060a936faf61eb8f8a512bf65","first_seen":"2023-03-08T14:31:01Z","last_seen":"2026-09-15T18:33:40.504712Z","times_seen":724,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/08/72-450x450.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.237Z","timestamp":1789497162237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/72-450x450.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e913ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"37fe6-6a9170c8-dbb204bddb8af6f7;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Fri, 28 Aug 2026 11:28:08 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bKzDbj6WS4IVDm%2F99QtyAkjuppnLz51m9GJnnl7oNCzxuVXxqj1n%2BLyx8hTnLQeRVIZIzRI2ec7%2FvOj3LczkzJXsoA3khOH1iXr7AmkBNbaCVHfWlRz7%2FJiDLqTKG%2Foj7X9XUYeAYnPumWVyOg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 229350\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":229350,"size_decoded":230190,"mime_type":"image/png","magic":"PNG image data, 450 x 450, 8-bit/color RGB, non-interlaced","md5":"551d8b2d6118fb47cbf872a2f88bd228","sha1":"5911eaf0320eafd51d5b78ced4ae80d4783902a8","sha256":"965c8b30758ed737a19b924853c9c598eb26d4efa994ac181152a2982e8d7bd3","sha512":"e4c300a31bf29da72f97f8ea5a2f58fdc3e18c18022513afeb1d9d69ec2e883c012f00c4f6ecb8f8e536d42c288e0055790c83d74f2fcfdc3b98c85fecd5a277","ssdeep":"6144:8tfNHCSlsGgZl5n4S5JqH79VNnJWgoHz0fzD3:8ndlsBP5n/jC79VNnRoHgfzD3","tlshash":"a024231d9d49c686621cc21d756fff10bf9632919ee919768463cf8e026c2e8c2b1f62","first_seen":"2026-09-15T18:30:44.839312Z","last_seen":"2026-09-15T18:33:40.505243Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.ceneo.pl/shops/Content/css/ceneo-widget/ceneo-widget-small-main.css","fqdn":"ssl.ceneo.pl","domain":"ceneo.pl","tld":"pl"},"ip":{"addr":"5.134.209.153","port":443,"asn":42656,"as":"Allegro sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ssl.ceneo.pl/shops/Widget/Content?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026contentId=ceneo-widget-small","date":"2026-09-15T18:32:43.182Z","timestamp":1789497163182,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ceneo.pl","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 16 Apr 2026 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:CC:D3:01:00:A0:05:79:8E:68:CE:35:3A:AC:33:47:4C:C9:EF:60","sha256":"16:C7:26:1E:69:F2:8A:15:1C:08:E0:A4:C2:5C:2A:3F:0E:5E:F6:20:91:A4:C7:2F:A4:AF:9D:83:F6:0B:50:F4"}}},"request":{"raw":"GET /shops/Content/css/ceneo-widget/ceneo-widget-small-main.css HTTP/1.1\r\nHost: ssl.ceneo.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ssl.ceneo.pl/shops/Widget/Content?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026contentId=ceneo-widget-small\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 16 Apr 2026 04:27:48 GMT\r\naccept-ranges: bytes\r\netag: \"1dccd596126f10a\"\r\nvary: Accept-Encoding\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2826,"size_decoded":1459,"mime_type":"text/css","magic":"ASCII text, with very long lines (2826), with no line terminators","md5":"759ca8877603436e53140134204844d4","sha1":"27ba7bca5289d645e75e20b742a50025cd68b3e8","sha256":"26e5dadfa6431a67ed471888ae373288a018c38a3e2cb8bc758cb2c51c647ced","sha512":"669a9536dd71dd9436168b95a3e58b7902dc8612993dfbf565820d5edfdd8a75176816e579e35458e889c0a812462bc839756fdec726527a1bfb518014ec6186","ssdeep":"","tlshash":"6c5194255725563ebc1b947538d493451227b8c0cf238b48aa8fbb95e8cf5a64332f0c","first_seen":"2025-05-17T00:43:37.508529Z","last_seen":"2026-09-15T18:33:40.505861Z","times_seen":98,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2025/04/melitta.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.186Z","timestamp":1789497162186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/melitta.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72fee343ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"2576-67ed1e99-24f1f775c9d0d23c;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 02 Apr 2025 11:25:13 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J8F9Axuie%2BFtJufCLmAauQ4MtVX5Fs%2FOjQEDGApOrq5AUm3eRHY5o9MI6QvL26IP5uEx1gLrbt%2B1KIERJPo2sRfk2SnxbpV5LlaxIeG1BU%2FX3cUV2pO%2B%2B8ZGibwLqldJa0A7VBiSSmRpDqD23A%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9590\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9590,"size_decoded":10430,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 327x175, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9a70e715e23348951928a257889aaa17","sha1":"685154dd756f445d3778a66932219677871a42a6","sha256":"77dabe9c68a9b9f1fc0d4ee306a0841c1c097b27905304595dbbba1478ec131f","sha512":"4eb631051bdb616e4c4606943b2496eba9f5f393aca422b9f93d399801354f523a060748085364da771a33c08ccbafbf17bf5c9377eb5e4d6e626b92bf7a864d","ssdeep":"192:Kxp2r1on9VwGgmRcKOSiXbWHwVY75+fmRX7ER6rxRoCzHQ:Epu1on9+Gg6cOHwSUmRXgOvs","tlshash":"b512af85205740cadd047f1e653029b85cc01eb8e6e1b26bab5bd9f1c3e398f1946bdb","first_seen":"2026-09-15T18:30:44.625435Z","last_seen":"2026-09-15T18:33:40.50722Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/themes/enfold/config-woocommerce/images/star.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.851Z","timestamp":1789497162851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/themes/enfold/config-woocommerce/images/star.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/wp-content/litespeed/css/f21b75b4cd577831db66fb212b893289.css?ver=79359\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\ncf-ray: a3b9b733d8a43ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 446246\r\ncache-control: public, max-age=691200\r\netag: \"2b3-6a7e285c-4972dcd6a411caf9;;;\"\r\nexpires: Fri, 18 Sep 2026 14:35:15 GMT\r\nlast-modified: Thu, 13 Aug 2026 20:26:04 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rBi9OcOtFLVzACVEEh8n%2BY6Yew19VUthRvYJQCqak%2BHbnHqEY61Om2Gcyukz5s1IRNIdRuAusb3Obn3xyK4ttVh5TIjXtXAVtxKbC%2B9H49Qgl9teYoT5HW%2F2jretq6r%2Fyker6StH8wgOPtz7AQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 691\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":691,"size_decoded":1529,"mime_type":"image/png","magic":"PNG image data, 16 x 48, 8-bit/color RGBA, non-interlaced","md5":"77507f272598f8a272e8fce1c07e151d","sha1":"c8b1f4ed574745cc95b7986fd3570ff0ca68aa6c","sha256":"2f279dce66f4c39c1873ae0b3c392499b5728c675a30536fbf15ff3647532fad","sha512":"67692465a4daefb49be816bb24a24d74c4aec767f77a4d88e46e3346edd32d36244966156346ef5c61f5757f13408943316aa4376b7bcc42902cd4024110b367","ssdeep":"","tlshash":"230183cbf2c43fa172084166cc49402ced324073c78693f3a4cb0dda09607c810de426","first_seen":"2023-06-14T23:56:26Z","last_seen":"2026-09-15T18:33:40.507771Z","times_seen":36,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.ceneo.pl/shops/Content/img/badges/reliable-seller.svg","fqdn":"ssl.ceneo.pl","domain":"ceneo.pl","tld":"pl"},"ip":{"addr":"5.134.209.153","port":443,"asn":42656,"as":"Allegro sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ssl.ceneo.pl/shops/Widget/Content?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026contentId=ceneo-widget-small","date":"2026-09-15T18:32:43.188Z","timestamp":1789497163188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ceneo.pl","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 16 Apr 2026 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:CC:D3:01:00:A0:05:79:8E:68:CE:35:3A:AC:33:47:4C:C9:EF:60","sha256":"16:C7:26:1E:69:F2:8A:15:1C:08:E0:A4:C2:5C:2A:3F:0E:5E:F6:20:91:A4:C7:2F:A4:AF:9D:83:F6:0B:50:F4"}}},"request":{"raw":"GET /shops/Content/img/badges/reliable-seller.svg HTTP/1.1\r\nHost: ssl.ceneo.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ssl.ceneo.pl/shops/Widget/Content?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026contentId=ceneo-widget-small\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 1302\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Apr 2026 04:27:48 GMT\r\naccept-ranges: bytes\r\netag: \"1dccd596126ff16\"\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1302,"size_decoded":1518,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c5c5a4b6012dd9574dde3a12dd01fc19","sha1":"b07d7b38a0ef35ebf46553332bf819a8954ea56f","sha256":"ed948b3a9c004273be32ef70ca6a9abb033e7894b8a909242c809a28c67147ff","sha512":"6deddfa5286ba39074d9ae5abf1bbc89d528a5e6d8dd215fc6ad768f6f3a30cc513d8e7d8734f33ba2096e23dc0ede163dd0eb529c2f4d01effbac048bd8d63a","ssdeep":"","tlshash":"7821202193a4ddab6aa6c125eb398401b39582c3e670c09cfae72f47462bcf1e031d25","first_seen":"2026-04-29T16:30:07.948397Z","last_seen":"2026-09-15T18:33:40.508296Z","times_seen":10,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2020/06/logo-kawawbiurze.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.048Z","timestamp":1789497162048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2020/06/logo-kawawbiurze.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b72edd773ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 381905\r\ncache-control: public, max-age=691200\r\netag: \"2152-5ef301aa-90bae90389e02d09;;;\"\r\nexpires: Sat, 19 Sep 2026 08:27:36 GMT\r\nlast-modified: Wed, 24 Jun 2020 07:32:58 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XK8mnFgBTNtV44R8bR7JB90jv1Hko%2B74oPToYmCjIhpBacLAe1k6YOf%2FTc%2BnacOPT8MPTDEjM3dQY%2BNvHNCZ8vpkNDVcG8S%2FLATiT9MrY%2Ff6Yxpsjnv%2BFEf98FOsyoh5Sz0kf7A%2FTrRowd4RBA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8530\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8530,"size_decoded":9376,"mime_type":"image/png","magic":"PNG image data, 248 x 76, 8-bit/color RGBA, non-interlaced","md5":"e33ebd9b68f8b59821a654ee1427e8a4","sha1":"36459e99da90daa1dbc9b38426e14c133965351d","sha256":"53810b869c951607e605335dec320dea2fca2e7b1750146dc6ae376878a790ba","sha512":"d27d9b8da2ac3014679d1ced0cfa3588b9cefa3816948ef2725a67fccf76c919dc9f1d501fac677180eaff258170566cad63db79ae05f41842ec4439e2368da9","ssdeep":"192:lSDS0tKg9E05T6JQn9V7x3Z4v7RvBNykEyNiQ/aVqXA9:EJXE05Mw3x3Z4THNfF4Q/mqXg","tlshash":"0902aea6bc96f11da0d97e91488d412acfed744881673c30544417eef2bde4b3eb90aa","first_seen":"2026-09-15T18:30:44.517615Z","last_seen":"2026-09-15T18:33:40.509354Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d3bo67muzbfgtl.cloudfront.net/edrone_add_to_cart.js","fqdn":"d3bo67muzbfgtl.cloudfront.net","domain":"d3bo67muzbfgtl.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.233.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:43.344Z","timestamp":1789497163344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /edrone_add_to_cart.js HTTP/1.1\r\nHost: d3bo67muzbfgtl.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nx-amz-cf-pop: ARN53-P4\r\nage: 62549\r\ndate: Tue, 15 Sep 2026 01:10:14 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nserver: nginx\r\nlast-modified: Mon, 14 Sep 2026 10:00:32 GMT\r\netag: W/\"6aa7c5c0-c72\"\r\nexpires: Wed, 16 Sep 2026 01:10:14 GMT\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: pGtO8BzFBCupT1JtEU4aGOYpSvY1CLKo-vWkZFmOmZNzsjRXHPnPyw==\r\nvia: 1.1 0eb659b3177cc8c6d47a4ad42c31ad9e.cloudfront.net (CloudFront)\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3186,"size_decoded":1554,"mime_type":"application/javascript","magic":"ASCII text","md5":"4802353031fa5c64d3577cd3b236b2cb","sha1":"e1634b44e7f706ad1208b49c6550eb2739b266f7","sha256":"edab01b03747ed1e22fb7998a7c5b08b9172ecce5a7f4f377fac686f1ca34fd9","sha512":"0a8bcfaf64afb8fc5ac816cdf2985bfa6824efc3ade5903511145b31ea1145712fe01b50410cc2f234af0ce40267d60de40672e33e58deebc537278d0336f211","ssdeep":"","tlshash":"1a61ded4e0792e31475289bc16cb444f7a0648077894f8443f8c59ca1fe9d5e83fba8e","first_seen":"2023-10-21T08:19:29Z","last_seen":"2026-09-15T18:33:40.510227Z","times_seen":385,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/248c4b3e714ed64587bdf4245162fde5.js?ver=2fde5","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.182Z","timestamp":1789497162182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/248c4b3e714ed64587bdf4245162fde5.js?ver=2fde5 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1rk1FH03MeTr9WsW%2F%2FxYVN%2FDG5hAoPvnoPdyFhWsF08xPybzhm8o5KOWGLwUQWn0kX5glxBWZdyBcVIvOiXGBtuDBUjIBtVgHk%2F6wAYWkAt7jbBFMc2Pl%2BVMlzoXC55b7UG7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b7305e9c3ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68913,"size_decoded":20072,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65504), with no line terminators","md5":"12d7e7b68c1b9212e72b951ed6ddf9b6","sha1":"c432b54d9747a02ad5cdcedb2d97c10ef9143e86","sha256":"ad41c5f4ec3d8b10f0124453a87602dd3bc5391baca520ed7ab4fc9322533e42","sha512":"32ed883897729fed18225b725f6eceb784aa931c2ca0f367b5e0b023c6286001cedb2f89d4657074e3b17f570bab2cc3d037a16d0d86ec96a0cae3f13b78de26","ssdeep":"1536:L/bvBouCbBZO2Npv/VbbLI2Vj91cqd+3Va1h9slWE:L/bZolP1rc9WE","tlshash":"5963d948b14271b791fb14a670db62093d716f28d80722e1336bc5615a3bfc3619fbe9","first_seen":"2025-11-23T04:47:34.540091Z","last_seen":"2026-09-15T18:33:40.51071Z","times_seen":58,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/09/kawa_wloska_ziarnista_2x1kg_Rossini_blend_nowe_opakowanie-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.279Z","timestamp":1789497162279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/kawa_wloska_ziarnista_2x1kg_Rossini_blend_nowe_opakowanie-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e863ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"23b92-684194b8-de4e9ee72fa64008;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Thu, 05 Jun 2025 12:59:36 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K7eJjUMlLv%2Fhh834FrDYfoPP%2BwaBmaF6DInUiHNGN%2B4Fafsqq78xiapL7iS28klvB7toWHq4SzbCs5bQq7aqysrPCQ0BVZMhN73XIJ%2BVrufqTiKQp%2Fo3Wx%2FFtcHUVqm18erpvRHxH0y0yzT30A%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 146322\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146322,"size_decoded":147165,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.12 (Windows), datetime=2025:06:05 14:58:59], baseline, precision 8, 450x450, components 3","md5":"05e2fca58d0bb696c52df36f6240e9d3","sha1":"ac146502e955a3b1ebe3c4141d4555153e3fe9a8","sha256":"cc43d217cde34c156a145a1be396e01d7dcdcdbebe86060b0524b71565faf59c","sha512":"e39d8a0054f84c0f6a86b0d51fb2cfb98613544d3fd2785ebac5d8dbb4f0d9352b33732c1c147de65fa84748266fa250d38476539bf65c6a1cfa115db6e67567","ssdeep":"3072:8i0xELOVPNqI9mtVWijkVlvGhUuNgamJl+wYp+X7pPsglTGBYOZ8:gELaVqFtr4VYUuNg9l+wO+7RX08","tlshash":"5ee31264f5631962f7b6ed318190ce621b6a472e83e24347bf6d0e22d3445227f9d23e","first_seen":"2026-09-15T18:30:44.592812Z","last_seen":"2026-09-15T18:33:40.511241Z","times_seen":2,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/8dab543501bc2987f17ce5b7ec80f95b.js?ver=0f95b","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.995Z","timestamp":1789497161995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/8dab543501bc2987f17ce5b7ec80f95b.js?ver=0f95b HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1s2rD0c2%2FK962cMY0oLchP3y6Qn25A56CwBEN5F9GPPHu8wozUoCE7fLpvp%2Bd2eovuetLBf%2BCIK9O6gZhaDbOeBLvYc5l0vdaNnffYY4s%2FE1gf%2FJdXRZNJpX1%2FbLr5hTpKN%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72e8d4b3ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4118,"size_decoded":1791,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1093)","md5":"965bec6fb428cd02baba342afdf949a3","sha1":"44efcf7366274b0917cb1847e0d5b85e0001fb53","sha256":"661151a0b48af006cdef76d9753342b391219372717d9952eab5f500cfdf297e","sha512":"fab416129605522c3e301fd517dca260b9f7599cd7ea71c706e2df5272dad66dd8bfa44b33b9853f7a82e81b89544d8e6a72db27567604ad8005743f770fbefa","ssdeep":"96:Bfo434pGeQjUIMFOQmliY3nPlhFliY3nyHJ97thY3oSY30A:uq7n/nCYqx","tlshash":"b081334df969b1aa46d6b07204ff7a0768ba3c4bfb400141f1059488efb8d86b17683f","first_seen":"2025-07-01T12:26:32.678546Z","last_seen":"2026-09-15T18:33:40.511828Z","times_seen":7,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-includes/js/jquery/jquery.min.js","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.968Z","timestamp":1789497161968,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:41 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JdbQO5Fmnz0UFgnZbzoBsAWGbgUzDVPUNT2F2Gf9GfrHx0JM1vvCVdKE4nmb3NpwjN3%2B3XyVAlpRBLaDS%2Bh8YUaLFALT8Nw0zF81rVNk1hW3vcb4Vg3NmbhjWutUR2%2F7NLY6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3b9b72e5d233ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":32932,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-15T20:49:56.103392Z","times_seen":1057547,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/3e808a3e0288d743ec10c77e7c6b0384.js?ver=b0384","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.990Z","timestamp":1789497161990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/3e808a3e0288d743ec10c77e7c6b0384.js?ver=b0384 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SUD6ANsWSFEZV615WlgMLwXHpE9QfxSzNRCzQBTzBN4qV8z%2FIYEqto%2BKecku8j6JoazZP8CMUNKNr%2Bb8ljZnlR4ThPEXBk6MH%2FFX1ezm%2BrLL2mXglpRNHu93E%2FRXLB3VWSU1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72e7d443ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7003,"size_decoded":2779,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1619)","md5":"c4f6a0930e7ca0e04d7a9bafe8176491","sha1":"42fe8bec70615328b5daef1a4fcafab7b09725e2","sha256":"aa45c0927773d20985d270042cbf7ccf8a47ad49757a5840c448232f9687b56d","sha512":"7550b8650a932b4fd35a4b21539d9c9d31b3a963f242dc5f8d5938c1b4953b2a2db23f905a79b7278e43ed6a59566b52f3ed0306c04790107a2a27ccf874e4e9","ssdeep":"96:C2Od0nwC38gKXsbnb+/UfeNAMdBMQmuEJU1FVBskozslStcEA3oUHO8LHUhOgRAT:NwC38gKXkOUfNxLEFRt3oUL0hOgm/b","tlshash":"5ae1622873a43077c48bb067b25b27595432b2777604eb3a210f7d7c1a5dd82528bf3a","first_seen":"2025-07-01T12:26:32.615817Z","last_seen":"2026-09-15T18:33:40.513032Z","times_seen":7,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-contact-form-7-tracker.js","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.104Z","timestamp":1789497162104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-contact-form-7-tracker.js HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jhfi%2BXnwv8GMnOCk9NtBujPLxbkdoe8Qfbx9t0Uuc6OlCF9MORpAzSc1%2Fi%2BRzIccvFfCKTJfamQExi%2BqlftbuSx%2BKRrpGUzwbhkvW%2FLeLGbt4Vb6Idxdv1IQ9%2B4l2knhOlAX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f4dce3ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":726,"size_decoded":973,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (726), with no line terminators","md5":"272f14f5de9caca54765bb008b7e660d","sha1":"d7aa9b9adadc5479280063509b0cf2a978059b5c","sha256":"dd202417d77b3a8ad724878247a98b47591f62f02f3b06382505e606daffea84","sha512":"caa540df56a0091b59c81967f10940279f9b7ae9136ad0e12aed7ef859b79b1682c1a86fcf8daaa32082856035afafacf6e54af1ff756ea58cfdca60ada71932","ssdeep":"","tlshash":"c701c08c3481a4fa212c1cb802fe2d07e7b03977e4cc5b112234cc690bbc5c87632b45","first_seen":"2023-12-20T06:20:40Z","last_seen":"2026-09-15T18:33:40.513766Z","times_seen":5371,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/f0f2fbc4b02848325d84a17e504af1b1.js?ver=af1b1","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.159Z","timestamp":1789497162159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/f0f2fbc4b02848325d84a17e504af1b1.js?ver=af1b1 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rurwDYuCbtQhFNYCWnKcz%2BSnbII0RqUi%2F8fRJyAP2S2zOJbIck7XfJsTIkE7%2BYcttzX2apkqfAua7kYX9Y52KNeNBrve0MUBqFrnqAVUtgCdjPfMQ7hLYs08t5IyZEkTBaCk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72fbe173ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":281,"size_decoded":770,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"3befc34cd7da3ea0039cd387865e80c4","sha1":"67b1b0aca9f764cd7358665ad2f95bd268988304","sha256":"b8364483c91f09f9e6990eb3fea5c69be517ff832b9459598a0b323bf5bc4a65","sha512":"8c6965b2ef825e17a6dcbb37de1847ddbe9a3258d830535fdd6d778744d0acf6d06523a49c309fe4dc58dcd93fa4792dab0c09e20dc3af80c516997f861382d3","ssdeep":"","tlshash":"b0d05b0cf5cdb09f078335725a3f5949d937592414545969ec6331d45e3802e6733d7e","first_seen":"2025-09-27T14:46:41.024399Z","last_seen":"2026-09-15T18:33:40.514285Z","times_seen":7,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/07/491-450x450.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.219Z","timestamp":1789497162219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/491-450x450.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b72ffe493ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"19e08-6a6ca5d4-acc72c056591f597;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Fri, 31 Jul 2026 13:40:36 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QeTnSHj%2BgYFWhzwKetiOv66gTiuJ8aqaXWmVeq4Qzhjdb1ueTHAT2asNxttr43gfn%2BsedmCO0YbncY5FMN1mPlmQ9vt0O3gxGf0VFM4i%2B1ZV7FMrz5YU8eDumy%2F7JHpt7sWA%2FF3PVBhJHPJqYw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 105992\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":105992,"size_decoded":106832,"mime_type":"image/png","magic":"PNG image data, 450 x 450, 8-bit/color RGB, non-interlaced","md5":"9b85d18441cbf0312e4bd511992ed308","sha1":"78a6f355915c0c3f1222985435642dabbaa02ad3","sha256":"b0709cf043594544fbe00dbace5bae24080b1a6489dc0b598114ec7b6a9c0852","sha512":"609fec1e492714f8117ca498509d75f42d1159bafc2498fae0aa099e9eaf25ba59659c0bd012460287ad32e2ba222381c45f336ed9f348a9314ee8d2f704eb7e","ssdeep":"3072:sh5uK90Dx01jzYyCiQ1taDfZ2amTojc7+yt:c5uKeyUy8KXIojc+Q","tlshash":"afa31249623748e32f8824a15f48f8e613aec874e0894f64509f97967b4afbbf277104","first_seen":"2026-09-15T18:30:44.789883Z","last_seen":"2026-09-15T18:33:40.514947Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d3bo67muzbfgtl.cloudfront.net/externals/67a5fd48c9a56.js","fqdn":"d3bo67muzbfgtl.cloudfront.net","domain":"d3bo67muzbfgtl.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.233.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:43.844Z","timestamp":1789497163844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /externals/67a5fd48c9a56.js HTTP/1.1\r\nHost: d3bo67muzbfgtl.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nx-amz-cf-pop: ARN53-P4\r\nage: 13\r\ndate: Tue, 15 Sep 2026 18:32:30 GMT\r\ncache-control: public, max-age=600, s-maxage=600\r\ncontent-encoding: gzip\r\nserver: nginx\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: 6_8FYFBSxzOe4MNmH8Na3Y4juASo1W5-0q0-37VsBTE_-NjBlvVXfA==\r\nvia: 1.1 0eb659b3177cc8c6d47a4ad42c31ad9e.cloudfront.net (CloudFront)\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":198652,"size_decoded":64380,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (61602)","md5":"51eb4a10e1d011cfb5bb34a68a8e186b","sha1":"e1853e57f672ccf2d0841e6e8bc9f8abd3aa40d9","sha256":"43f148898aecb603906e08e2a48491df74ea952da56b04f9c4d47a3e8ef8832f","sha512":"d348fcc97f78e2b635e8bdf7dd825f537038390ec72f09c1c63bceb15908da248555aadd5713a2dddbaf9a23d115a3dbcdbd4688c3d9d370a2d837fd7db0d35c","ssdeep":"6144:2w5ZQIXkBvrbnMjF9mebIbUgPrDw5uiRAhFgZ:2w3ZOrbnMjF9mebIbUgPrDDiRAh+","tlshash":"451407cdb6d6b06113e724b5803f650ef23a3a596c4e8450f222e4d67d7998e9223f7c","first_seen":"2026-09-15T18:30:44.574303Z","last_seen":"2026-09-15T18:33:40.51544Z","times_seen":2,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/c6459a7e4540e02b86f543543fd40e19.js?ver=40e19","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.991Z","timestamp":1789497161991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/c6459a7e4540e02b86f543543fd40e19.js?ver=40e19 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NNeksvVeo3%2BUY7Def%2BmYH0QwXM4nmpcK03D0fIgNbITst%2B392OOm99vFCOOiFgtP2lYp9Nc%2BtFEK7EwOkN78FewaYv2vaXdhS%2F0PRNk4ngaG%2BrZm3MIDL0azs54%2B5wJx343N\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72e7d473ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3310,"size_decoded":1872,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1080)","md5":"325d7d7b5e160e2b7a37a51e4fa404b1","sha1":"d81d9f03ae8bec2174b568260f179a4c7f238697","sha256":"d2e43acbde1a19336cffb7dbaa6d41dec3f922c4f1e4aedbfbf2d3d55390834e","sha512":"5e0466ce5df7fea4d881c38892d822c3167ddb01280d2037087ace8d637bdd0133db73cf7b4e0666cc07d46167cfd0e487117e8a32f7e2cc480abcffb8373b27","ssdeep":"","tlshash":"6a6110087bd6b19764ebd078f2dff25d3039656b5488c070a00d86948a7fc8af67ad28","first_seen":"2025-07-01T12:26:32.707172Z","last_seen":"2026-09-15T18:33:40.51594Z","times_seen":7,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/825b37f84bf597b5c24b537682189ae2.js?ver=89ae2","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.168Z","timestamp":1789497162168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/825b37f84bf597b5c24b537682189ae2.js?ver=89ae2 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tgm4cN%2BPmo%2BqhgJIJC62ag%2FZOLAghWlHqYiwF4GV1UNd%2FbL8pBR3owZI28HPMHQRI6z72G2LPgj1XMEEk8WYUriMzlk4VtHJT1UYwlqOscM%2FAjh8kM%2FWhEmkmtR7uqszu6C0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72fce1e3ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1929,"size_decoded":1535,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1927)","md5":"cae5f39a515d238a852d375686aa4bb8","sha1":"64e98acce6447b90712b47f27d1c4bfd7d8e0f2e","sha256":"a6981e05979832c6fdfd6f20420866ea3bd5a6cdc46090c25a4ad61a6063edec","sha512":"97669e6181a435c8ee374ae705130ceee56dc6d95b04e1f0b2a1d0209a633c1df7b6c299a45a3dc17ce878f9a34f483ca9f7b632e0baf63020dfdebc8513ccca","ssdeep":"","tlshash":"81410f5cb3407071137ea0f9a78fb7069026b4a5c9064ccc714682962dfe275b1dbb6b","first_seen":"2025-07-07T17:47:21.439334Z","last_seen":"2026-09-15T18:33:40.516997Z","times_seen":10,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/fc2cbbabf2d6a9ba503ab632373dee01.js?ver=dee01","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.170Z","timestamp":1789497162170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/fc2cbbabf2d6a9ba503ab632373dee01.js?ver=dee01 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fK8FxTyRBuEYwgeKJD3AcMLo8OJQ2Uk3w6OSDBksCf5s9OrSGBKalcB96CR0%2F5dfp4VWerW16XDZ%2F7a56Xq0XYt3JQ5kVykjqbjjecYLK%2FUCuRswvcAVX2%2Bfr8x2kW6jWW4t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72fce1d3ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2901,"size_decoded":1780,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2899)","md5":"289187a246d57f75b9158ed93594b516","sha1":"49ed34df71411fac35efa76590127550d1973a37","sha256":"e79afba73efe1cb1e36a8137160cad3c891128e61d3f5644b40bc260407801bb","sha512":"79b0f66038f0595e39793a77462305ea1eae2fb163611460cf173bac125fae0a913f4a304f0f91757814d2d98ea91b5ea1e000411bfb817660c9a4e4f47e8d74","ssdeep":"","tlshash":"7251542ab300b1b222efb1f4465a70041122756cc61088c97d74c69b06b9ebd74aaf3f","first_seen":"2025-09-27T14:46:41.054099Z","last_seen":"2026-09-15T18:33:40.517743Z","times_seen":6,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/4ad03c18046802b35b16b2fb1d425e94.js?ver=25e94","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.178Z","timestamp":1789497162178,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/4ad03c18046802b35b16b2fb1d425e94.js?ver=25e94 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nTFU%2F7m7oAehtMadVizAmgvdcpvtqbd3BfF9hfkPvxkCMcwxmtxjD2hQH%2BryiRuOEtiUG7HhOTNQeQ1DqTtqiX%2BDrq1siCYWmyGDOM3lI15b6mEAPB1acv8ISYFgg814HvbD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72fde203ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":894,"size_decoded":1063,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (892)","md5":"4c690d24e5977f40386fbc8296caa937","sha1":"942999bd80480269b5633adc7c39df37a36433a4","sha256":"f9598efb249f3cf65a73ad6807a7dee3e7e2f759673e81c77a7e1aab9940148f","sha512":"f93bcd1c2d80685fc5031535bc0d2334f2096750b3e3b3abd069adaf859aa0486a181c69955c0cc14040f81ec45fc98fbf8c673d25be244a2fb7ceb47d0d97c0","ssdeep":"","tlshash":"491100dcf174d1f10c931938672bab42f61eb428b7d2d500215ce8828e38cbc272659e","first_seen":"2024-08-20T15:08:04.96415Z","last_seen":"2026-09-15T18:33:40.518316Z","times_seen":8,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-json/complianz/v1/banner?lang=pl\u0026locale=pl_PL\u0026token=sqoof","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:43.057Z","timestamp":1789497163057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-json/complianz/v1/banner?lang=pl\u0026locale=pl_PL\u0026token=sqoof HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-type: application/json\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc; sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-15%2018%3A32%3A43%7C%7C%7Cep%3Dhttps%3A%2F%2Fkawawbiurze.live%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-15%2018%3A32%3A43%7C%7C%7Cep%3Dhttps%3A%2F%2Fkawawbiurze.live%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fkawawbiurze.live%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-turbo-charged-by: LiteSpeed\r\nx-robots-tag: noindex\r\ndate: Tue, 15 Sep 2026 18:32:44 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b73529393ca8-CPH\r\ncf-cache-status: DYNAMIC\r\nallow: GET\r\ncache-control: no-store, no-cache, must-revalidate\r\ncontent-encoding: br\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nlink: \u003chttps://kawawbiurze.pl/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nserver: cloudflare\r\nset-cookie: PHPSESSID=0qkti1tam0484k2hed613oc6hj; path=/; secure\r\nvary: Accept-Encoding,User-Agent\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8vt5Hr4MUCSuyFLC64axzZxAASWyE24MJQWnPyc5rcb%2BOYfXG%2BzSSQRQCxDGGkia3L%2F35dUvD9%2FY%2FhW7vdDpEf46ww0096Euu2P0sraHu8xj50Md1bICBGRLv%2FM%2Bjuj%2FKFskmfqnqmK29EsFkw%3D%3D\"}]}\r\naccess-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type\r\naccess-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-litespeed-cache-control: no-cache\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0qkti1tam0484k2hed613oc6hj","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=0qkti1tam0484k2hed613oc6hj; path=/; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":105,"size_decoded":1289,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a5fc974907f5f29366b59df8f7816b35","sha1":"4d31c085cb9ed195b3d51439aa70a719da89685d","sha256":"1b7d54fad9e54e2cf4b1c3dd871fabfe9ee04aaa625ac37e0e2413af4ab4b0e6","sha512":"211ba61c11ae0b4c7383a903621bdca716f117b8051f22cdbdcf04d5663ae55600273233165555888e68aed98f20ee28df7bb4f790c925da3e33d831c7736594","ssdeep":"","tlshash":"71b0129d0f0194fb4384876c064a885093bc5118f5025120b10300501af60b5c020aa6","first_seen":"2026-09-15T18:30:44.40893Z","last_seen":"2026-09-15T18:33:40.519068Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2025/04/fresco.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.188Z","timestamp":1789497162188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/fresco.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72fee303ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"1efe-67ed236b-1c90fbc3444f1f1e;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 02 Apr 2025 11:45:47 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=epzsA1se0xkoznqy4DkG%2FLvrWpl5E8p2wmB7jQXUnEHoSQ6i5u%2FRnzAi4t%2FPjC02Q%2Fda%2Fxq2muWMXqcbMaMAG%2FPT%2FvCKj0DWvfmhP2EJrMoB8e1XSHic5UUvNYm%2BtFJSG8Q5vv5a7Hvz4jvXvg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7934\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7934,"size_decoded":8778,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 327x175, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a35e02934994a12c6695b5e9a5a040c1","sha1":"6108b11ce203f0cdf9bd21e468799b5466592ed7","sha256":"1c2bb9a944c90c35bd93e5f3e12407c6f9e5948da5ae8fe628410db483442c29","sha512":"fcf27044b3f74c90559916b08b4c6f1598bd2a4430a6d5531377f4dd5edc87034264b38b5ad8336ee3ef3161253e6ac31fce3724fbeffe2e6b8f2446250ebae4","ssdeep":"192:gQXJjzjifIlJpkwtsXPGoHQcXlnLR25UU3NEh:TVVlJaw0PGoHzVnljU3y","tlshash":"2ef1b0c9043c12fe49544ec66b69236f2c23d61b318e0cf9ce4623eb71a297a516c544","first_seen":"2026-09-15T18:30:44.404528Z","last_seen":"2026-09-15T18:33:40.519645Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2023/03/Tabletki_pro_coffix-1-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.285Z","timestamp":1789497162285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/Tabletki_pro_coffix-1-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7305ea13ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"1b527-6413c3aa-dd3dad1a410f4bd4;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Fri, 17 Mar 2023 01:34:34 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nupqbpw4U4XEb7EtBkmVlgprlm8eQC%2FXJG3yNzr1DjcNne5c8JKUshQd%2FPNyAtTsQoNvswBW5eYrJyCmdxKrnlViYS9x%2BhB1TFLTGmDFohcKnhztFAm4Evikv5IO0PYxDkOkxgDgo0hgC03ffw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 111911\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":111911,"size_decoded":112748,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: \"Created with GIMP\", baseline, precision 8, 450x450, components 3","md5":"5cf1ba4e8852750b6b86525307034e60","sha1":"697d9b0840ed287656211bec754d638fd987767e","sha256":"050a3b6451b5452889a4f508bca77c2c51296fd1a10d7aad44ab4c17746e00df","sha512":"3795b9695d36e450f077571962c235ac5a3811164587913ca32ddb35a6cdf70e5825d949becb8f0679177b4026036a896f1f54dad791d85e20c4b82124b9fb42","ssdeep":"3072:V3g4+XcVgKuQCBhYZQHhLwDmINSNvqUh2gcHZcF0Xk0wm0UUb:VQ4+MOBhYiZwfSNFZcH2FX0wZUUb","tlshash":"34b3f161bc364e8edadfa83959ecb9baa6c5bc152080702c7c4dd3b5c074c1866fd179","first_seen":"2026-09-15T18:30:44.462517Z","last_seen":"2026-09-15T18:33:40.520247Z","times_seen":2,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/avia_fonts/type_fonts/open-sans/opensans-bold.ttf","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.825Z","timestamp":1789497162825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/avia_fonts/type_fonts/open-sans/opensans-bold.ttf HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/wp-content/litespeed/css/f21b75b4cd577831db66fb212b893289.css?ver=79359\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: application/x-font-ttf\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b733b8903ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 205\r\ncache-control: public, max-age=691200\r\ncontent-encoding: br\r\netag: \"196b8-6082e7a6-3f2e083c935f44aa;br\"\r\nexpires: Wed, 23 Sep 2026 18:29:17 GMT\r\nlast-modified: Fri, 23 Apr 2021 15:28:38 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tLUt4MoPG%2FHTJNzHaaaBl2FRm5jo8wFNycpJonSS6U4Z4Mlmv1hFDMydquICKPgZqNfUw8qUqx94lcJQEaysm1NIVJWLzRlaWyuZTLu1rjV1JDZgLtx%2Bykms51BYpm%2BCCymTWA3KwAMOX7qH9Q%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 59225\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":104120,"size_decoded":60114,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open SansBold1.10;1ASC;OpenSans-BoldOpe","md5":"1025a6e0fb0fa86f17f57cc82a6b9756","sha1":"1e3704ee48b5ff7e582488ead87b05249f14dc1c","sha256":"f7916a37377e38527d4306303cfe89b653b49b0a6b0b05c6b7593f7ab0248da8","sha512":"cf6d6ed4007492a24ab6040adbef2525cdc499650a8590b0692e8655810744af9f2d7bc694ba48a550b1a3e668885c0dc5300d198e550e69c23689909abc515f","ssdeep":"3072:lrqT6w+rgw8GJcXjFmHeJw4jtsoXqc29X:0T6w+rgw9JcJmHeJvjzazF","tlshash":"0ca34b56cb53bf35ec0264b6c2a18b901223b884b75bc24f7fc856f6da560dcc948e97","first_seen":"2023-04-07T07:13:14Z","last_seen":"2026-09-15T18:33:40.520767Z","times_seen":2010,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.ceneo.pl/shops/sw.js?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0","fqdn":"ssl.ceneo.pl","domain":"ceneo.pl","tld":"pl"},"ip":{"addr":"5.134.209.153","port":443,"asn":42656,"as":"Allegro sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:43.008Z","timestamp":1789497163008,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ceneo.pl","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 16 Apr 2026 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:CC:D3:01:00:A0:05:79:8E:68:CE:35:3A:AC:33:47:4C:C9:EF:60","sha256":"16:C7:26:1E:69:F2:8A:15:1C:08:E0:A4:C2:5C:2A:3F:0E:5E:F6:20:91:A4:C7:2F:A4:AF:9D:83:F6:0B:50:F4"}}},"request":{"raw":"GET /shops/sw.js?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0 HTTP/1.1\r\nHost: ssl.ceneo.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public,max-age=600\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=10886400; includeSubDomains; preload\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; img-src * data:\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3967,"size_decoded":2443,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3966), with no line terminators","md5":"cfb8bf227f2ac0e9a84d1af28b9e1ed6","sha1":"b3c2bdd35074146d545fc57afc107bfc462674de","sha256":"4a26c2fead456ba88352906a459107c6a7f0729ce934ffdb105a82a094b92d7e","sha512":"425dd57ff89661a54d2373d3cadac04804d7696863380047eb5eedf5e79f683faf008a52bda7b2131f7ab3ee20911b6649d5339164530cd07932db9e032fb47b","ssdeep":"","tlshash":"ad8174a97505172543da847f51ba13287030e91eee0c40c48cf5983a75e9edd6277bbe","first_seen":"2026-09-15T18:33:40.521295Z","last_seen":"2026-09-15T18:33:40.521295Z","times_seen":1,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/11/kimbo.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.319Z","timestamp":1789497162319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/kimbo.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b730befe3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"117f-67498063-7aa181182be317ef;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Fri, 29 Nov 2024 08:50:43 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jJJklVN%2FjuQnNujC9WUq4iJqlW7jW6UDpD9LqB1VF%2F3vha4GFY5bmM2K%2BGzyHsMbg3GzKG0D4zkYU4rrSuXKz%2BNN6NOupQSsgE80W1JAVVB6LFXU6W95FJBly6cM4p9AitmJ%2B1XYQvHCvks8qQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4479\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4479,"size_decoded":5316,"mime_type":"image/png","magic":"PNG image data, 182 x 61, 8-bit/color RGBA, non-interlaced","md5":"48e5ee2af35cec61d431ed3e74ec9d99","sha1":"5befcce351efee87e74aab559e625efd5bfb1b96","sha256":"28f4e089f3a633417a7bccce9e471d4f9fbaae0ea06fa3e9ce2320cd037ab1ab","sha512":"8db299b6c6d000f1db619f4806a21207e40980092eecf8dcba8f3c7e669acb5035cde0d9cc5e0f05fd04009ac67d2dc7d58fd0ad0137651bc59d43753c1e947c","ssdeep":"96:l70o9a9L1QHhfjYDThbzdLv+lrZ0HbPXOS3Ml8lWNGkit7H:p0WfY3hbzx8mrtlWN6H","tlshash":"b2917dacb9c3dd70aed6bd7280210457524ca0ddc85a72c832ce2db34698f223096e93","first_seen":"2026-09-15T18:30:44.720821Z","last_seen":"2026-09-15T18:33:40.522211Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.ceneo.pl/shops/Content/img/icons/stars.svg","fqdn":"ssl.ceneo.pl","domain":"ceneo.pl","tld":"pl"},"ip":{"addr":"5.134.209.153","port":443,"asn":42656,"as":"Allegro sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ssl.ceneo.pl/shops/Widget/Content?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026contentId=ceneo-widget-small","date":"2026-09-15T18:32:43.234Z","timestamp":1789497163234,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ceneo.pl","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 16 Apr 2026 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:CC:D3:01:00:A0:05:79:8E:68:CE:35:3A:AC:33:47:4C:C9:EF:60","sha256":"16:C7:26:1E:69:F2:8A:15:1C:08:E0:A4:C2:5C:2A:3F:0E:5E:F6:20:91:A4:C7:2F:A4:AF:9D:83:F6:0B:50:F4"}}},"request":{"raw":"GET /shops/Content/img/icons/stars.svg HTTP/1.1\r\nHost: ssl.ceneo.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ssl.ceneo.pl/shops/Widget/Content?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026contentId=ceneo-widget-small\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 639\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Apr 2026 04:27:48 GMT\r\naccept-ranges: bytes\r\netag: \"1dccd596126f87f\"\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":639,"size_decoded":854,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4b9944b1cf6f28a60dee5028ee2b2f60","sha1":"862c01744204b653e4b219e981150e6536640cc5","sha256":"a8210a24a7173745bc2ebd0c56a3965143984b68eb77280d8bae94a2053bbc13","sha512":"04ba88da928e26b1d899a1c479c1835e01a4e9a5d942e44dc6f41f10033429c72d1ca6733814e8fcdcec2631d0a0bb672b2b29096b2030d935c16d471930cf4b","ssdeep":"","tlshash":"acf07d0987c09535547203b3a731d693b3be515bc154251471fd7a727f35d900b939a9","first_seen":"2026-04-18T10:07:30.075452Z","last_seen":"2026-09-15T18:33:40.522765Z","times_seen":42,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/9ac775572cf42ac4b6ef1cd998ef49c3.js?ver=f49c3","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.092Z","timestamp":1789497162092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/9ac775572cf42ac4b6ef1cd998ef49c3.js?ver=f49c3 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vRkY76g7lCI0qPe39R3n2jseNxN5kZzU69P1JjgqqxmwqWKW2b87Zb01dCOD%2F5FP0i%2FDiTtYVfSQ%2BqTe%2BAcHevJXflGinAO5Myjq65oGLe%2BAm61E5xHR%2F%2BmDx3oekcg2n%2FLK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f2dab3ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12939,"size_decoded":4307,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1810)","md5":"49f8cb0cd523d49104c94c2cecb1ab1d","sha1":"becbde2b9a61f0336593ca7377beadc6ece532c5","sha256":"d7658d6ad271b30c687814939688058b0d9381dc0722e53dcf09f57a0cb76fcb","sha512":"36e2a40f3b6acb6c9e87f0b6281c229522b372eb90a6dd771772a31d7c218867cc0ab39d77c6e93db5b19fac4a2693e10ae0b16f87a2a33e97883933b165e54d","ssdeep":"384:kYpuQ1KFbIUSKgPgaogau6gLT+s/kJ7Y81TdK7I3EGxgXLj:kYpl1KFbIUSKgos56gLT+OW7Y8hdK7IQ","tlshash":"1042b5d0f136587790d61cf211c616c8fdb529caf9d284d016d82f5a1feaa4ba33326e","first_seen":"2026-09-15T18:30:44.520824Z","last_seen":"2026-09-15T18:33:40.523606Z","times_seen":2,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2025/04/instytucje.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.180Z","timestamp":1789497162180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/instytucje.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72fde223ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"3a44-67ed1551-f3f73fbb8b3a5605;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 02 Apr 2025 10:45:37 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2UKkImGxZYbcGeUYTSuysc92cNTIkBn3r2X7V5JMuFlGeHAzSvrb%2FuIE6tJ2EbNyVd54EyFj3CRaDV2TFbqZTA6BPmTL8%2F2c5X6qgGnGBRon%2Bkm9ItvfcEq0ZjPMtFdTTgHqI4qn41Kf9Bbh2g%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14916\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":14916,"size_decoded":15751,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 327x175, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f32885101c59d819a980c719d38b028f","sha1":"d18ad315a02e3d92f7f78839c2e688c8d349bcdc","sha256":"7a9c550bbba4e45dbc5f8ed40055ee18b43daa560ed7d0e987b96ad315653dc8","sha512":"b14e55e44edd67aaf92cabc46226ec311c28863fd47fcf303b7398f985057c5c95ddb4a72c0e9e3363594fde4a6ae8783da38536a4f40eae769ea13371854228","ssdeep":"384:sGA9q4UM0PWCponWDH1yIjeG9vla3KmfQmx:sHqHZPlonWDVMyNaamfxx","tlshash":"0862c0bfa9193249f00a811c9484700af544ebe67c46301d6cb4ea48bd367e455fb9ed","first_seen":"2026-09-15T18:30:44.653197Z","last_seen":"2026-09-15T18:33:40.524117Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/2d121a1865d7576eae7f206b7b2e31eb.js?ver=e31eb","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.084Z","timestamp":1789497162084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/2d121a1865d7576eae7f206b7b2e31eb.js?ver=e31eb HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LoBdeiDjpC8oYGditgKI%2FeHGcN5247l4gEeRbG4Dk7O0LeiBK0%2B6aYTReJoSFcB5Z%2BYFyvv5oXbWkMDM7%2BvEzqFw8kSAR1%2FeNJTjGpP3zXoTbm%2F2smYbWQlUN19junA9moTd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f1da03ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6450,"size_decoded":2986,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6448)","md5":"87cb3b604758bcdd31f7d2608d2b68a3","sha1":"c8d496525edf8c65e42424074238ddec83f95ed7","sha256":"51c4f3f99aa68090a506d120f5694b95cd8bdf9865817de18fac341973b9e28e","sha512":"8b01e181f2a6db75ec55eacbd5b1b85ba1b2bec059c24b4180860ce7edf46abb13062447f0f32b78f2a86b2c868edd387b0eef3d17a427282f9870b138f2108e","ssdeep":"96:BygZro9ssOK6doITQK15dO8FwJU8tQXj4dP18yUYNNWlxsC+5FjlIVwqpwLDZRv7:Bv09soYVEo5dCN98MNgxsTDZ4e7","tlshash":"6cd1744df2b621e805ba3474b83b67917433dc76660381a4187350662f79f8532a3f7e","first_seen":"2025-09-27T14:46:40.891015Z","last_seen":"2026-09-15T18:33:40.524653Z","times_seen":15,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/defddbe2bc0b422048da5637ff996767.js?ver=96767","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.140Z","timestamp":1789497162140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/defddbe2bc0b422048da5637ff996767.js?ver=96767 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FGOzj3E%2BbU7sNWHpQjOVb9VJ4WPCrSrPXBhCBRvw1BVFRBvsh0u6WfQXZYm9%2FO%2FRfd9kxtKcS0H9ya%2Fn1UqNYjGQYqkTy0GKFGpz%2Fj4XQgVY5EoBgdfEinCEyfYg%2FB50FdIw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f8df63ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1109,"size_decoded":1153,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1107)","md5":"7567564e26d80b7a9595ebd9c12ee8f8","sha1":"18465eb10f8903b7cd58d4b4b9c97dbe39ea9ac6","sha256":"20113d5c5ce2953074ed1df9fad90bc55aad416e8b95f2efd5645ad190740c9d","sha512":"5d6d9bdceea00549fbcfc7f6f6caba4599f909e6833ce11171071737d9a4dd7a5a472022aab9d70a05eaeafc2b383d0651ec32e2f0fc3c6a773101f749cc0046","ssdeep":"","tlshash":"7f11f3d43e84757909d75428a47f0b18a0fb4d76804e0db0ee54b63e7d7cd409196a4a","first_seen":"2023-06-16T22:08:36Z","last_seen":"2026-09-15T18:33:40.525168Z","times_seen":692,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/35c4f2c65f05836a861847e11b9ebadd.js?ver=ebadd","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.176Z","timestamp":1789497162176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/35c4f2c65f05836a861847e11b9ebadd.js?ver=ebadd HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hTn2OlRVUbHSt7mSOiN3RteU6OM759dhPQptFZ1NkJQXmEIal%2FBIlqsPjTuKOkseuIovNxGJra%2B4la6TZOGZ7zqBwXJ%2BzdFec%2BIVkZapq4wmyLfmQFsvjGvkESsjSjrKYxz%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72fce1f3ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3020,"size_decoded":1690,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1309)","md5":"6348dd1b70644d781b4bf7b6b56b3fdc","sha1":"7baf9223b31c2b28a2356690ae7c53199b1386d0","sha256":"e709ec7ea8a0889d33f7ba3ee32b1f41b02e5a857b509468fce7c52716965399","sha512":"539b77d189dffdcb25bd5ce5bd24797bdcac12ae40622885db0432417b4f6cdd09d8a63768c33a0de02d5d744a2a91989efcbfd3670971d451e7660d24ccfe6d","ssdeep":"","tlshash":"29513fc8f266b2b35fb73677289f87c47235e23301954448b47aa1e25f64d02623b51e","first_seen":"2025-03-17T12:42:58.167678Z","last_seen":"2026-09-15T18:33:40.525714Z","times_seen":16,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/05/kawawbiurze-10-450x450.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.224Z","timestamp":1789497162224,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/kawawbiurze-10-450x450.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b7301e5a3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"109a2-6a844fc3-396f06eb4528886;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 18 Aug 2026 12:27:47 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BHy7us9cQj2MJt9Xvpqg3urDp%2F3xMDyxXG9O4VIBAo85IIv9mrBHcbudN%2BdB1E%2BnfCNkSQZ2rwTBuGzo8Y%2FTV2i45kqPzuDQ8IA6bFqu2euiq%2FIyWABx8gsczAcpsT6bGoX12FXN4JChnxLnRw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 68002\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":68002,"size_decoded":68842,"mime_type":"image/png","magic":"PNG image data, 450 x 450, 8-bit/color RGB, non-interlaced","md5":"01d4f9d2b158dff0fe402873f089d7ab","sha1":"8a726b304915fd81b09eb7eab98231e2abeeeaba","sha256":"bff46b53ddbfaa03766822e11afd1beb68a54fb02d41bf53c06e47f8420fd2a6","sha512":"41371ec7c1c15a58cfc931ff4f256c01a7c976ec294ea4e3e17eccd73faf8d1aa023e71abc72a6051c092daf6cb3ff497101bd195864cdd979f47ce7d82f56d6","ssdeep":"1536:16+XBYgnj8GkyVnMki9cv8uTi4D20ALURXpKYOK:16M5j8HcM59+UYLKHK","tlshash":"5563f1e58f26aa99b583dc7813165d6d218ba107ed7d79f04e81f4620dff1807c72d82","first_seen":"2026-09-15T18:30:44.718812Z","last_seen":"2026-09-15T18:33:40.526233Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2018/07/kawa.ico","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:43.276Z","timestamp":1789497163276,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2018/07/kawa.ico HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc; sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-15%2018%3A32%3A43%7C%7C%7Cep%3Dhttps%3A%2F%2Fkawawbiurze.live%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-15%2018%3A32%3A43%7C%7C%7Cep%3Dhttps%3A%2F%2Fkawawbiurze.live%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fkawawbiurze.live%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-turbo-charged-by: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Tue, 15 Sep 2026 18:32:43 GMT\r\ncontent-type: image/x-icon\r\ncontent-encoding: zstd\r\ncf-ray: a3b9b73689a53ca8-CPH\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nage: 381904\r\ncache-control: public, max-age=691200\r\netag: W/\"1cee-5b43c4db-e27d566f8f211667;;;\"\r\nexpires: Sat, 19 Sep 2026 08:27:38 GMT\r\nlast-modified: Mon, 09 Jul 2018 20:26:03 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gdvqDIagU37348rWAo%2FzHt45jVRDBbM1Jm7aymTODP8ef8dOKI8WYt5QNMZfFuVsU6E2gQUillFyR%2BKyTNVYNP23ArOT902LOO8gr24iEmF1dc7OVpy94F9OHasu%2F5vaxNbAbj9onKNpDqr5qQ%3D%3D\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7406,"size_decoded":2701,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 8 bits/pixel, 32x32, 8 bits/pixel","md5":"fac7e9251d0ae715ce85cd7fdd61239e","sha1":"ee3a3186fe200c390b5b5d35c68a45f20f5b5cc6","sha256":"0c8de8382ac6c8d46bfe19ebbf519cc7694a8148ec1a3ba14fd3a1b262a9ad5b","sha512":"053f59d5a7b350854cce4a0b5d8ab1903d5a67520401872261cf98265b5cb2679d77f0f9ead767084510f65217d4e7c9e29c35f6634f177d37d2d81e447650a8","ssdeep":"48:iMJJOE89gRqzH9hXlA341Pn20dMnLR+C+1rAR9Y6tDYdr6FfX:iMJJh8OgzT1A341O0OnLV//tDYsF","tlshash":"4ae12f57268e64c6cc543e798559139f1280bcbd5b503b4aa3bdedb8ed7c3879503704","first_seen":"2026-09-15T18:30:44.429363Z","last_seen":"2026-09-15T18:33:40.526827Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/2b80758cd63157cd4ab2bcafce57e6ed.js?ver=7e6ed","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.994Z","timestamp":1789497161994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/2b80758cd63157cd4ab2bcafce57e6ed.js?ver=7e6ed HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fpVXPpvV7IrCU66%2B%2F2jG97Vo39x41Dqb79VruVlTRTUEcbTtYv1x0w%2Fz60j7sQpXZV3Zlo%2Bxe2CUDzPAWqidA8bUlNuN4GUgX8j1dsdYMUEZwWdOPYOLJuJUmFcBsZyEQbOS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72e8d4a3ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17520,"size_decoded":4423,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2044)","md5":"04466d186b1dbc78abe9c7b8b80467d0","sha1":"5654c91400708278f86e644b0c8ac7835e4a2347","sha256":"ff6238de7b557de4e826a8f7bdb9b58e319237e83cd8bd7e17f3b54936424f74","sha512":"f3f11ad77da9b89a7e5942b0fb1483c52e17991c9bd8634ccde2c8d56541da5f6843601a6e23f8a9d5b36589fbef53fd31d82a566689718a7a3f52e4c4f535ab","ssdeep":"192:OoDTUD0fRPJMJpLrcc1SehNhz5YKsYLPehNhzfivnQnLrQzx/4I3yJmuiAJ67tuj:L3U+hivQnLrQzx/4I3yJ3iAJ9j","tlshash":"1972328dbd60eaab21eb717738ffb98431611c211384ca21e49d0a1d4fa8f497d1fe59","first_seen":"2025-07-01T12:26:32.725617Z","last_seen":"2026-09-15T18:33:40.52739Z","times_seen":5,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/143b6399555909908b18c39c7556d1ba.js?ver=6d1ba","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.003Z","timestamp":1789497162003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/143b6399555909908b18c39c7556d1ba.js?ver=6d1ba HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l3WW5eCsc%2F8NDH2%2BsAqx1mNK%2BTyxLswq%2BOVlpFLJE%2B5BHDE0grBuplFImXhHRqpFRUJzeJRafhJfBahhkR%2F1vQjQGF9w%2FUBXSEXA9JRloZ5SddtQ5d6ISMah2MNb0gfIaWza\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3b9b72e9d543ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9638,"size_decoded":4378,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9242)","md5":"a2af095c67026488767ef068973d8cf9","sha1":"d53f69743a7c7322f05383ae11113d5bd5b1dffd","sha256":"4d7c6223f78823799b7a5134ad9a32205f55dd7d0df4d3bd5f1de080dc63beb7","sha512":"b2e84ad9e33918666f9d329a1c0c7ad05d90f07ec3a20ced67ea879fdb7693a1311b8117b3bd43e8dae666b17f68f58a7b4844f1deccb25c92659f55cccb084b","ssdeep":"192:x9cCxjlRE8iST7TMcPvedRUtV7uLEUfHqo/gH5P5AxTov7fG3ex2NrMO:x9RjlRE8iSf4cPmgtV7uoOKIgxaxTovo","tlshash":"7812e96831f3215780b7b1907cf7e38f73b2553c648798d1d0acd4692aacd7a2622f09","first_seen":"2023-08-29T20:44:31Z","last_seen":"2026-09-15T18:33:40.527902Z","times_seen":4468,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/8d2667dc825ba8e442bf7fab147c6eff.js?ver=c6eff","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.157Z","timestamp":1789497162157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/8d2667dc825ba8e442bf7fab147c6eff.js?ver=c6eff HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ldIgMZi%2Bu13KKfLqRj9WDPtahjdw9fI2HK%2FG687MJ7RPva%2BwWDzikDi4K6EMO%2FbX5HjOFvpD1ndfxGOHcu6yV4ZXx4YDvb27ahHAlS6L6spdzQPxlUt7WbcJA5mWIGvkVJAZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f9e033ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":879,"size_decoded":949,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (877)","md5":"e9f02dfd34a6e2ce542ab58f3f6aed6e","sha1":"6643d34a1d73ef4b17b38eb648a45450cc6d5ddc","sha256":"3cd2d490c2f1a6051b2cfb0dfddcee66461df03e46450992911efd56c17d168c","sha512":"c7dc5bc72027228886975fcfa969fc9968c1060cba018c4cc9dcd0ef983cf7cb776370ba051b6b05347fc7c60aaf16abeea88264fe97ba45565cb46dc65d4437","ssdeep":"","tlshash":"0f114c48710775fa5abb315a20fae581981d6cb1c42668f978b501f4467edf4323273f","first_seen":"2025-10-10T13:13:00.566118Z","last_seen":"2026-09-15T18:33:40.528546Z","times_seen":4,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/12/Melitta-dystr.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.209Z","timestamp":1789497162209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/Melitta-dystr.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72fee3e3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"445c-6759b1e6-4a355953bc1d8abc;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 11 Dec 2024 15:38:14 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zmBIOtlFP60vzc5h2YI7CBRgcaqlwfkBZGWXYp6gaCG3E2XPN52zwDObzLdsXHjvBc4yz1slyHGvZaj9uYV78dW0MSjR7eKzTSamVRRgBnKglFmHfsulFA68dFsnkxNalT09myHP7KkuGVfR1w%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17500\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":17500,"size_decoded":18329,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"123d15ae29bda0e156749b566bd75975","sha1":"53b0d21f35d96a6fe3a06f2b56fa18eb5166648e","sha256":"ea5bca8c76a805a28e036bd391ae4ae1e68796885fa98e1346265ff0e871617d","sha512":"9127c2fbfa8d740039c0d89dd6e6e51eee9b77fb605ab951519b55f44653fd00d131a1c6ffac8b23d9932bee1e2baabfdca8867541f2142d3b91b5c124114497","ssdeep":"384:0eXdO6eKqQFr/Z41cZYnEtsvtLnyW0aQbaIRIB/hA:0eX8/Qn4OYnwujyuXI2bA","tlshash":"2372c1c0859fca557fe61c61f83d9c870e4c51beb5ee748665b7c97180a5c18490391e","first_seen":"2026-09-15T18:30:44.438042Z","last_seen":"2026-09-15T18:33:40.529098Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/02/F10_blck_2-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.223Z","timestamp":1789497162223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/02/F10_blck_2-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7300e573ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"14d8c-65c4d35a-e99bbf9dff7ba6d5;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Thu, 08 Feb 2024 13:12:58 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GwkQNBcMz3iFAu2dxTSqdn0XHWk1hFOn0L3GvX1LTfokOGH3a1DSaRgaBgRk2u94lLG0UdVkl1lX3GtXYIJOFwAs0UhJ9I%2F473kMbhycMA6qg%2BJYCnhDlW7QcVRA7IMwG4BhPgVdLoTyF7WJaA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 85388\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":85388,"size_decoded":86222,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x450, components 3","md5":"167379969a49474f5879cffae652aff4","sha1":"aaa7069b0038d6e699602995471fc9fbbdd18ec4","sha256":"47a49faf59119627d62c0b285323da94682d0a34a50fca6f69e1320e64a39d6d","sha512":"7e4c9145584c0f41666d2edc75894d90231f38a45ba58ef37c70f27a1a795414ffd619397d90e7f07a1211443aad8966adcad12074894370d6aa13e129f9eaeb","ssdeep":"1536:emYWzstH1YX636PGS0g4kAEHNF8gQcZIF8w89dsROzB+lkw7:cWi0hPGS0gdAEHsAIFsdsRONokY","tlshash":"c7830160efe7d6957babaa4921bdbd2313606ec0adc45327468b3e1cc19af7c440213d","first_seen":"2026-09-15T18:30:44.382494Z","last_seen":"2026-09-15T18:33:40.52966Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/06/1200X628-2-1-scaled.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.087Z","timestamp":1789497162087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/1200X628-2-1-scaled.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72f1da63ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"cf226-6a1ebbf0-ed0b1a56b7c77f96;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 02 Jun 2026 11:18:08 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cZNl8dwjkW4yx9Qi1mZy00mrA%2F8Fh5%2BGN9D7hcatA%2BpiGgzY20zDamEiLUZHD5vSMPtxaivOwwk%2FABuD%2BVNLUHe5c9tutEJa0P3MB0NguyCESRYW7J%2FfUEBXMhauGm97XN9VnYXbt0luaJMZYw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 848422\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":848422,"size_decoded":849265,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fd920c355a877243cacd322f8603b123","sha1":"ee265236c9e6fc56d3e1ee7ac6710ff10aab47ab","sha256":"f40591608cbb3da73208771f93232bef790b9e64535bbfd8158966f00cd8433b","sha512":"ee7fc74bcd942efb67a3d3bd7eb3d553a4de23a02211f45bb7936d05c09a3201ea60c08b08f1ffbb7c8971abf32513be1dc59c6b8c75c3bb7e35bab9fd813351","ssdeep":"24576:UnXKYy594snp2YiYAxmnOi1KJw9WrjAjN49nhp:iXKYy594sp276yLrjU6z","tlshash":"2f0533a22037360be4277433cfe9a8959d28a99f90e0577304f251e1763bdb7948b31b","first_seen":"2026-09-15T18:30:44.423498Z","last_seen":"2026-09-15T18:33:40.530184Z","times_seen":2,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":277,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2025/04/coffix.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.198Z","timestamp":1789497162198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/coffix.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72fee3a3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"1cae-67ed2539-b6f4d9d46c02b2ef;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 02 Apr 2025 11:53:29 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r7WVeiwU7ZoHdgVOU9%2Fff9g4Tawu4e84cb1H3aUYgsZE07JQiT4FtHe8eOqdVMNemhSiKovd5ii%2Bl448CI8sEqfGpRLuzSO%2FHKljA%2BcrrfS245rAi4zUDYnf8s3yuQjWiEgn8vy9cH2DRfwcYA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7342\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7342,"size_decoded":8178,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 327x175, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5b06d1239dd19c2e79f8873969738cc1","sha1":"c5e4796b4df01728159cae4678a73ef6d8982f4c","sha256":"f723e5d445a241905010f141317ef15c57f01ed633dc006ec33e40197c0fd395","sha512":"0cd9ad8890f425e5753670e0d1fcccc4a3fb042bac4edb366ba1c03bf33e838e6f65a17a42328bcd525eb2436b553aec4d9e32feaa939e224ffdc92187a5778c","ssdeep":"192:kcnWABrXNoVIxN90PH0aqu4LwglsE1TpV8m/DcfX:kcWAlXN0IbwH8u4HVRpu","tlshash":"e0e19f4497c622c8b9ff19c58a4e21c6b0871c1bf1b35b6d3e259ea4f3540e966b31d3","first_seen":"2026-09-15T18:30:44.664493Z","last_seen":"2026-09-15T18:33:40.53077Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/03/szklanki-scaled-1.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.218Z","timestamp":1789497162218,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/szklanki-scaled-1.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b72ffe473ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 130092\r\ncache-control: public, max-age=691200\r\netag: \"3b7cf-69bd5642-7f8debf5db4bdf1a;;;\"\r\nexpires: Tue, 22 Sep 2026 06:24:29 GMT\r\nlast-modified: Fri, 20 Mar 2026 14:14:26 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zBQodwNyYAOtzY4JxqNxhpBzcA7EbP2wuU65na9h0Omijw1lA7FiuCFvtHkinIEBPH3RV0PaCD1bnI2RYsu5euPTicOdPMBm1%2F3qGNTerpHiKyZJahIHZ9KZrWD0tAOJ%2BbenumhLpgwaGKrXmw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 243663\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":243663,"size_decoded":244501,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 2560x2560, components 3","md5":"972a8c16527d087df5a19737ae8bb5ca","sha1":"d0965853abc78c547cd129c00a8889abf39d5a98","sha256":"91dde106e0102bb0b9e03c2d879324e1419109e38a695a6420de9112e46df66d","sha512":"d0fe12890bfc00dcd96501a9410ea9173b1041bcf2c30f1975a93558b55656fc67ffff54730bbc4295c8f7859a419ee51dbaffcb185b0e91943834769284b264","ssdeep":"3072:7MBK+NLNvYNV+yP8nDs5hd9iak/i4p6x3ItrxFSMOnW+GuccEl450BoSSrRElM0y:7MBXtNC+yks5XzuiMZTgIcK/hSFERI9d","tlshash":"573412eba620817ed76e6abd6c27532c4e616426f098c1387edf84f8271090f1d87a19","first_seen":"2026-09-15T18:30:44.529346Z","last_seen":"2026-09-15T18:33:40.53159Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/10/Caffe_Crema_latte_2x-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.270Z","timestamp":1789497162270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/10/Caffe_Crema_latte_2x-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e9a3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"31493-671a57b6-23b520776979f897;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Thu, 24 Oct 2024 14:20:38 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CPaz9fhdXtluL56spbGAkaQ0je%2FW73yYyoMdGvCezD%2BFFxptv6hvEKqWCjuNcl3FybHPKVmwETignOPYyu600jdG19xb9YK4lJxzBtEiTG2m37Cn5zlT1S%2F83pNp%2FxTjdQmU2dSfmwE%2BYRq6rA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 201875\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":201875,"size_decoded":202716,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x450, components 3","md5":"79248ca3ceb6d0ccd2d38e75a149db91","sha1":"7f7722d66f063be84bebc6c288aa8a42727a9ea3","sha256":"a57b4804ea77fabdea17851022c1e7e8d551106ebef580a6a1697a6402fd9e39","sha512":"6f20a857a1ef2b9f2adc091700ac563cf1542f775ab1a1646af1c8ceebb1a7ad91dfa027facfccdc5d1ddfaa725d92615e17033954997a3db2138fb1efbeddfb","ssdeep":"6144:Turpdm0BVhZVwgExIw9XNrc5Pq833Qg5fsAy3D3:TurpdhbwHI8Ng5PqgfpUD3","tlshash":"94141271dbb7d2210f9224a576be7c6b6a3214c57b94b20b8a0f1f4ed201fb44542eed","first_seen":"2026-09-15T18:30:44.557673Z","last_seen":"2026-09-15T18:33:40.532111Z","times_seen":2,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/09/Biancaffe_Crema_2pcs-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.274Z","timestamp":1789497162274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/Biancaffe_Crema_2pcs-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e963ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"2e6c0-66ed1b08-bdc7921ca3d28f80;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Fri, 20 Sep 2024 06:49:44 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6GSCAaDTfyVRtVEWS0xRMbNozl7CxoEDDEHhD6gUS56D4xzHH1K4Pze9U%2B8fO%2FKOoMrRewT0sHNNlWI1nYrI1aOYkhwWJWvM%2BH4GylCW9%2FPSrPSKAse2bYNa7aID1uE5d7OHu1qZYK47Onve7w%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 190144\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":190144,"size_decoded":190983,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x450, components 3","md5":"3daa6d3f7dcf5d59966d6346c42cc0d7","sha1":"21244be991d448e74881afad20c330a90ac7c7f7","sha256":"f198c3e1cfd075c69e4d187a6a10ade90281e826e18307e1a6ff739aa1f5b61e","sha512":"65b4b83d7be137c5e1b62ddd3c9102e12933d7aabaca6fa5e87a7b68c13969a201ca796c9829244d5558fc250663dee93a39bc08504e2fa1969656696fd67115","ssdeep":"3072:5JV87RHlMeX5P6Fxg4l7HB+ujenWlP8r2qCQej+6N1nRsIAIbPH1tIV64uvwxh+z:zVcHDXNixg45H8uTljqCQej9XnRfTbvT","tlshash":"7f041230ffb1cf15172a54ea118dfe19572a05690ca49a1f675fcf2286ecf06ac04fa6","first_seen":"2026-09-15T18:30:44.601048Z","last_seen":"2026-09-15T18:33:40.532614Z","times_seen":2,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2018/03/mail.png.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.047Z","timestamp":1789497162047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/mail.png.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72edd753ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 381905\r\ncache-control: public, max-age=691200\r\netag: \"56e-69f9e1a7-bf1ea16a07abcc1f;;;\"\r\nexpires: Sat, 19 Sep 2026 08:27:36 GMT\r\nlast-modified: Tue, 05 May 2026 12:25:11 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jy0d2xZpb9RhUDQKhMuu8ULDkb5D27C%2FkNlG96HZsS2jM4EkeSEFf0mbpJBaBxiEio3%2Bc2QvbURkH1gixcwrprIUb7K5TvZVcsWl4GUrFiDBQv2FH1f6g9XORJlyCxSA0h4QjMAawNR3BxhMYw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1390\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1390,"size_decoded":2224,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"93a95efdf4728199814660cf3115455d","sha1":"44885718beeebb3d8ef0afbdd06097e274706fdf","sha256":"09a5675be57f38532262e9ec7709451dbf99171bd98f4be2b6d89e80da3e1e7b","sha512":"50a3436208188a83c2517f827f73d1a8d445c34bdfe4b06ee6e21cf7f3fc724dc548ba0011a93bf7ca6efb2847be9d1aa1c85817ec00fe2d751f4a8ec48aa2bd","ssdeep":"","tlshash":"fc21877b5792cb51c6b2a77c1c505b09c3aa7b7157ecf2ab260192135fc16844d2c989","first_seen":"2026-09-15T18:30:44.834507Z","last_seen":"2026-09-15T18:33:40.533244Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2018/03/pera.png.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.303Z","timestamp":1789497162303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/pera.png.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b7307eb83ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"90a-69f9e1ad-b6105d723cb15adc;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 05 May 2026 12:25:17 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FSpHzdEP0PhSnqyVGj1z%2B7WFTaKepHVk1uWuzpJxiAcbq8JAQW%2FPMuYie44QgqX%2FFgYC%2BDtrwvu9va4qWY4%2Br4jFXuvY3pvfVgIEYDqFbFjS%2BmJ6SYBO6r%2BOyEJgL3djGlPgzWaINZKk%2BlwaTQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2314\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2314,"size_decoded":3157,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"25ceeb856db349e1625fb7b802a9aadf","sha1":"1b9290ceaeb1114935effbdf8f7ef1a5c8f49f55","sha256":"4d4fc5b8714b2739400204ca0610217aea0af76f783a8e0077be4e43d4930215","sha512":"d9d3067cafaaa86acff0c4afd7ba82e6bfc198e2be630f94675d359f9ae321e03d23e8623fbd9216960f50c3c69129ecbb54eb446927f5d0d49e1fc461e83ba4","ssdeep":"","tlshash":"c241e765b3034b59c7c0aab022a06f50e30b7e170f10ebb7d34424ab0ec54e0baeadd5","first_seen":"2026-09-15T18:30:44.452487Z","last_seen":"2026-09-15T18:33:40.53382Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh7USSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:43.122Z","timestamp":1789497163122,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh7USSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kawawbiurze.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 23:17:10 GMT\r\nexpires: Fri, 10 Sep 2027 23:17:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 414933\r\nlast-modified: Mon, 15 Sep 2025 17:09:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23236,"size_decoded":24069,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23236, version 1.0","md5":"716309aab2bca045f9627f63ad79d0bf","sha1":"38804233a29aaf975d557fe14e762c627bef76e0","sha256":"115f6a626ca115d4ad5581b59275327e0e860b30330a52b0f785561332dd2429","sha512":"adb0bc6cb9b230eda5dac7396a94a9a4dba9c8ba0b2eb73f5f21a20c3ca3d14651420bc6a17e67a71b5bba624f5a4e92d55cbbb898985dcca838184f6dfb2b15","ssdeep":"384:AHLaTYDpoR9l+9cJHxkGk3kbFpW88POLvFd9EDtwntxiFyLs86d975a2sfbAh:AHLKSSD49c0SFQ1wFnCajiws86dJ59WK","tlshash":"8aa2e10a0b99e00ff53655ba7504daa0b1c554b9c3ed69a2a12115c7b4eeecbf83138e","first_seen":"2023-04-05T15:38:53Z","last_seen":"2026-09-15T20:03:11.358474Z","times_seen":60139,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/plugins/litespeed-cache/assets/js/webfontloader.min.js","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.964Z","timestamp":1789497161964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/plugins/litespeed-cache/assets/js/webfontloader.min.js HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:41 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3gpj1A0D%2FzRteU3GdtzIMWZ16aJD6rKtsRey0INKo6MXceVxUGUVJ8WtQi9C5pnJdUkHN2NmlHtmKKuleHhLrOR41ptWAyi%2F0DDIE5bMmQHfKz2lHr02iUrkgs3Ww9jyO2AA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72e5d203ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12098,"size_decoded":5697,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12075), with no line terminators","md5":"45943f1d780bd7d9db946bdc5ed14a5a","sha1":"41a42d3c32fe16108eb653ae903ae1fb86b7e5a8","sha256":"6f58202a14e2dcb4c672d6e9f0881ddc2b4e88225a97aadd940400a7377ee02d","sha512":"673c809a69dc340bd57d95d2fbf6a43354c141a7de33c4983309d8b4ba5182316a5c4b9872053f9d4badaab4924031a34f71f146d0fb00ef627c4f7aa8f65b62","ssdeep":"192:Y3YEHIcPziAZGmm62zVOr+rdmLdOSjTIghu3oHMBoateK3JELi/QFjOfDzry:YbocLiAZGmr2zUyhmPTIghu0MK/K32E8","tlshash":"0942a7597251b53d42a310b317af010666367b2e2c0184ad7a5de9e4ac70efa226ff7c","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-09-15T18:33:40.53505Z","times_seen":8702,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/5d102a15d6599ba994f5f03611352408.js?ver=52408","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.975Z","timestamp":1789497161975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/5d102a15d6599ba994f5f03611352408.js?ver=52408 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ikRMPovjMZLO%2FUMfCK2BHe6KO8s95psCBsp8%2FYSbCs%2Frd89WP7mYaiTM0%2FlSbGFNn%2Bim4%2Fg0DX3K4%2B7yFAASK2FlJMXPOuUKCuXax2dgdPwiF0VgIoD7laMoT9URn44YkST\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72e6d283ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":846,"size_decoded":952,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (616)","md5":"30a15ce2c76947830524c0ba3727de1b","sha1":"433b3016b5e368d0a9e3b7ac86477089929af69c","sha256":"22c3ac6da7f0bc281cb3a5070f7911b2ded612fb9f858c06d5dcb9b96c8ef7cb","sha512":"e399d2ab6305c5d24f420f5841f7802e949e700ccc11ad0a940b499bbdac24c025ee1c86166a0ab6f510db559e0089158caa6da8f238b2f1554e2586c56ded2e","ssdeep":"","tlshash":"28014c3a712052330cbd7d6090f7c7431632a4920d8bb560855819b44bf6c537f5fc8d","first_seen":"2025-01-14T13:43:51.283702Z","last_seen":"2026-09-15T18:33:40.53556Z","times_seen":29,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/07/Baner-na-strone-glowna_desktop_2024x340x2_png-2.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.081Z","timestamp":1789497162081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/Baner-na-strone-glowna_desktop_2024x340x2_png-2.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b72f0d9d3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"fc3d7-6a561abf-3874b165a9633b3a;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 14 Jul 2026 11:17:19 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XOa31rLg8UsDWtYdm3axBi%2FPofH39lFvpvGR1Fngp1V8OwUfzwZrneHlaonXG%2FFox7dY9QzAtj1vAPaMamhqr8iQqSQ1ZOvtU9sONQYlKP4Bb7iisljMxCJaaVSLt4iqMLtm%2BRCVhLJnYHgMGA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1033175\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1033175,"size_decoded":1034012,"mime_type":"image/png","magic":"PNG image data, 2024 x 340, 8-bit/color RGB, non-interlaced","md5":"d4e3fd042352c72622d81c264732714a","sha1":"682e659b353fc33b03df8e598c626ac404805712","sha256":"7a9265df86cf059d60949ea32ee59b1943543c6762ffa5429a250b83fab83d8d","sha512":"72ba7bd0018f8aa21c1021fdd1d439ca965376e76421b864ad5003b741c52a3567e46691f28cb22ae47816eba784761f21ba15043ed7dcb3f38c53ba4e7e6425","ssdeep":"24576:LLvDCe0CnOi0WF9WpyF+1n53CQgy7oX3R+ztF10zT:LLvxBnYWTsyFgQjnRAz0zT","tlshash":"0d253322f6cdb55fd3218cf25a5de20ad0e2114cc33f84877426dd8da5aac416fca7a2","first_seen":"2026-09-15T18:30:44.645611Z","last_seen":"2026-09-15T18:33:40.536099Z","times_seen":2,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":283,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/9a0ffbec086785bfd9e67bce17c9b98f.js?ver=9b98f","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.130Z","timestamp":1789497162130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/9a0ffbec086785bfd9e67bce17c9b98f.js?ver=9b98f HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eCQf5FnKNnDDeggebPUsqZZR9O7Z2PURtJQXe8reWM4bYN8jwHidR2Kv%2BXLqnDD6X%2Fe%2BvQmxpWpIwzlvTOw4K0GIAiuNdF50UlUdu3ybbQOOgr%2BPisAX9%2FriU9b8i4vL683B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f7de43ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":778,"size_decoded":1029,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (776)","md5":"f7c2960bce0d667478e6e83b4ea86294","sha1":"a5dbf5f3821c115c24d02d1adeec168227d5a69c","sha256":"6411e7a3161588fb74f9a1e79d92ca7b6a15c04f7447bf33477f9f098f62049d","sha512":"540bb7be6c27a49f8a702586b5292da73cfa38b7713a640cbf2c3addab515b33f5efa04269faa08db795231d8cc3e26068695375730675c440e9f8a031baa099","ssdeep":"","tlshash":"ee01bd6837196bd0a4dfaadf2015bb0a0115ec278b0180a2b696d8626734cdf3606d3e","first_seen":"2025-07-07T17:47:21.404553Z","last_seen":"2026-09-15T18:33:40.536593Z","times_seen":10,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/80c13b409700f04b4db41967a3917186.js?ver=17186","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.131Z","timestamp":1789497162131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/80c13b409700f04b4db41967a3917186.js?ver=17186 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qO%2BRpxkUL3ryLfPi0WJVc01Iq61k30OHH8UK8XViLx5V%2FcCcJ%2FZqAJvTfUDm2NW7l0gOx7AC9vy9Wl2G6NfMqYFs3fpktAD8gljF3lWAn28e6fbxTdcRsZgsLF3avVb5M7EY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f7de63ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1113,"size_decoded":1196,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1111)","md5":"4e0b41fe8da8ea3bb006734757240e78","sha1":"63c543517703c82ebb8b8390ae47920ae6a92acd","sha256":"b32a805a1e35f9fc29c30ae56a423b25add3d19e1f1cf9a8e76e2bc9f389aed1","sha512":"c1012b43fefbfddcc51e98b96f00458b09b142b3b3d685ab14cbee38810da092e60665e016cc17120586eba71aa6526208cfcc3deaa1fd7a58993a4a6c70ed7c","ssdeep":"","tlshash":"f421e14c7201e07545d3bc79849f2d5107bbb5f6ec01c652b461454c875cbada127e47","first_seen":"2026-09-15T18:30:44.485354Z","last_seen":"2026-09-15T18:33:40.537178Z","times_seen":2,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/12/jura-partner.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.207Z","timestamp":1789497162207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/jura-partner.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72fee323ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"4972-6759b1e1-38d2fe973e57d3e1;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 11 Dec 2024 15:38:09 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7GzYgnl%2FSG3msq0wkDf9G3GtyfGDBjZy8hmi1pZVTmfRlb8unwpCtx10CyatPK1JTlWk2azj72SrsYSjavvFFRU5AQXXmRgIZqBFjZXMgwB4k5XJlUJ8S%2F4yn3gaZF%2FjJD6%2F0ehJ%2BnTyzPVNEg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18802\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18802,"size_decoded":19641,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1e13b04dcbd0a6dead8b8760424b2a51","sha1":"7f86c6e9df3604c1f103cfe454abe8678463ad16","sha256":"785a3864fa9572f548930917d9cf7906f8f6c872ecbd5588cfecd6e6eb76fc80","sha512":"45c8f70b81a3e1633647b7870ed69ac64b7da7a0caa84e26899b32e4e82608ee1bacd6968f730504466fc4fbc03f6fa548d372511b764193e7ab9c6dd33f0c50","ssdeep":"384:MMawIhPt8d4T+jsUoo3KSgJxGqICDppaRI39ywaVKZ1d9suj6/:LaweSuT+QPXSg/IgpaRm9yxMjsK6/","tlshash":"4082d0f11a6bf08b14f7775233e3356f43a1489306b64ba65342bce5d9207b91832c8a","first_seen":"2026-09-15T18:30:44.380676Z","last_seen":"2026-09-15T18:33:40.537758Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.959Z","timestamp":1789497162959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 15 Sep 2026 18:32:43 GMT\r\ndate: Tue, 15 Sep 2026 18:32:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7950,"size_decoded":1584,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"805606f59e42ac23b925536397c25871","sha1":"0d281645c8768a8ff90543be814198d7f0b2ff38","sha256":"66fb1ada05a65b72fc8c0627d6ec093ad66d479addcd3f57d9522f00b72163dd","sha512":"e967d9fe29eea995c46343ac3cb7f59531122b4233276e008510b1a48d2d547c1c6dc87b468234ca891bd7d3bf1156bd1f5eedb0db73d965f35dd26dd150f835","ssdeep":"192:jONClkOjsO6OsOVGOKhClRsprgAHThCl8s0KtAup:jRlkistbDslSOlHf","tlshash":"2ef1ade5481e4040bf472cc163ce6d37ee0e62553490d56d9afd1e9aacabc6233647cd","first_seen":"2026-09-15T18:30:44.651792Z","last_seen":"2026-09-15T18:33:40.538668Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/833e0bec6840f920603c10285b38ee5f.js?ver=8ee5f","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.154Z","timestamp":1789497162154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/833e0bec6840f920603c10285b38ee5f.js?ver=8ee5f HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iw98Bdj0aX6SAJ0asCktnog1zoPuP1Vek5pNv4kG%2BfFJPFs7xCF3moxVc2xEhOEmrKpPoJr%2F9FzsAhV7vRznjrWgmVbKe7hza3VLab2XKrSYZJfXk8V2kLmd8T0lgg%2F7fC18\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f9e073ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2830,"size_decoded":1739,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2828)","md5":"9f6d0da14552dc8023b25a4f96b3e61f","sha1":"6651ffdd53736cf4de803b0d29b451067d456049","sha256":"9f54dfdfaadb5d052e7a2cd76bd90deab437fb1c1143afbf97c8ee3dfaebecb3","sha512":"ebed255504ad0507398e3add6664221534f6c0b48c84f13377aa89e8123d2452b477dbba5932c64518a81f5a4f52b486f3fbb09bd428289587695008dbd0a79a","ssdeep":"","tlshash":"0f5174dd726921a2248f3179441f5500e0263869c20ace2d11fa5cba5d3dee83373f3e","first_seen":"2026-09-15T18:30:44.397856Z","last_seen":"2026-09-15T18:33:40.539555Z","times_seen":2,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/10/CaffeCrema_Latte_1_kwb-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.254Z","timestamp":1789497162254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/10/CaffeCrema_Latte_1_kwb-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e843ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"1bd2a-6874c9ae-32559f42186af7f5;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Mon, 14 Jul 2025 09:11:10 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=20kANpsM65XmsPKfKZLJCzqZZy%2BkduCIeLCpd0hLYCN%2Fq29MLsaFsATKVnLBIAxIeSCaWcQGkWuHJu0ISs7lqAW3ReZGj9Yc3lWSfDZRoc1nQNQ8OP9uuNIrtxT73LiWSz2U%2FTy5SyIkPnKj9Q%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 113962\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":113962,"size_decoded":114799,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.12 (Windows), datetime=2025:07:14 11:09:55], baseline, precision 8, 450x450, components 3","md5":"ef63c85f4e029300ab645c62d995e8c9","sha1":"f9200574a62411bef5f8af10eae1ec9f53d45791","sha256":"79b8732534a08bc357648fc4c01e51683e92379906792c572f79712eb1d55ef1","sha512":"33996930f70fe8b9a7e6dc0ac2f1ff5661b1c9d4586d84dd9711c1ad3c8d21d0a610abf6b7a3e85f0414ac2eb302ce65b8fb35e01b6c6a0f81d25634385e1164","ssdeep":"1536:hBBE9GvaHbQH0P1V2y9dpxf+BM9mEOpc6jc9sYPswmXQ3mPkfwa5w6cdzVORssK2:hQsvSzL7f8UOXYPsw/SNa6dzwSsK+F","tlshash":"55b3df9ddb31f865f7cdde79098ab6c38bba8ddc50ce5608b80f4583b704060b25958e","first_seen":"2026-09-15T18:30:44.384208Z","last_seen":"2026-09-15T18:33:40.540115Z","times_seen":2,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/b7a479726e19577f682425000dc1a061.js?ver=1a061","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.183Z","timestamp":1789497162183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/b7a479726e19577f682425000dc1a061.js?ver=1a061 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rOSf03YMXUbl6VT2LLGBexVl0Vtw1u0UJpPI0WvDfDydYs6Ef9AFXf05q7GWB2VF54smpKZNEC0nD%2FVWAtgEaq0ei0gk4V4LSPrwDkjOyDLSB7A3GgglffA99dIrEqL7oE4B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72fde233ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25342,"size_decoded":8360,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25340)","md5":"63cee1c6f90dc8cd487dc59c51a13af2","sha1":"d422dcbb85e10dd91fc2395974d859a8abdca28b","sha256":"cf3d041daf2c2f5cd70ab572733e5f7f28b610f6f5a8d483e5142ca249b56b11","sha512":"8cb947b141fc242f4d76752fe5ae8b64987e1f9056bc59555951c89eee6555751c5b30a6b35710654dbb7d0351c6e263642745b03f7a8a063673cdc7662a6290","ssdeep":"384:r8/oH5FC4HHCnwrmPmOATTo9jdG+/eKLHASGYsk82bVzRVgf38bFSkXElh:k4HHCnwrmPmOZtLHB8OROEbcvv","tlshash":"75b26116a3a03a72cfe7255e3f0fc5054ab3d785e406c83c7d7d42481a952897f27aea","first_seen":"2025-12-21T18:15:07.964727Z","last_seen":"2026-09-15T18:33:40.540711Z","times_seen":25,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/cfe037e165396f2477b07c4a726e9789.js?ver=e9789","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.189Z","timestamp":1789497162189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/cfe037e165396f2477b07c4a726e9789.js?ver=e9789 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X2xyV4hyx2UjbiW9NhEKteW37cRlBMrQayxWFIdxF4aiKxRmBLyU0bJ0erh8xcq2kCBOWNX08ouEDERy%2Feyief8q8wmQekv3asWBzzKmA67Eijl3gvcWyihVdKNSX0iikc2Y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72fee373ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":682,"size_decoded":1034,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (680)","md5":"4ab998aea0e73345487e37165e081a9d","sha1":"b8281bfd37c97bf666ee6a9bc75d666bb8ce75d2","sha256":"593945e5c350aac05fa57e6b08eacd18a2fa26ca18f609991cf6460f327acfe4","sha512":"8f948ec2567cbf9eaaed61820e9a342d899a2d34e54a9ed92f127f3dc05fe92af2f54de26a7e3ddecf82dbba8849306f1cbc120660b3fe4471f328aee611b420","ssdeep":"","tlshash":"bc01fe40bcea552a507362895deede34f3bd6c28d6009d10e2f254fbac39d620ca09dc","first_seen":"2026-04-28T14:10:11.873556Z","last_seen":"2026-09-15T18:33:40.541223Z","times_seen":17,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2019/04/dzierzawa-ekspresow.jpg.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.199Z","timestamp":1789497162199,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2019/04/dzierzawa-ekspresow.jpg.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72fee2d3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"2732-6a1a3171-b4072dd443cdc31e;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Sat, 30 May 2026 00:38:09 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WI%2Fk%2FooLxev3gLQsthiXM9aLTeoTTat9JqD2H21o3%2BXuCK3Q8Uh7rgwqXLtGKobmKxKqMBGYqBLw6G7foQkwLYT4q1pbR9EnFCZ0bsReyVhTv4I8KERyMACJnFAapqmLm79PySxkenJD%2BNA0yA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10034\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10034,"size_decoded":10871,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2736a4605b80f5ac38176bc32c643bd0","sha1":"23cef9dc4d049d28c6fd89b7fbc0a75a981a1c4b","sha256":"3fb17e2bd321f70e794f8ba51b01432d62a6a56558c6e9c8a1596a2c5daab1f2","sha512":"92c40e42538e71cb9ecc06a0f8a8cceb319f43d2aabc78d05ea36a17ca5b6688e2f8516c86002f95aca2cb5f00eaf04b5659c6125adb7b2bc32e633e866d90ea","ssdeep":"192:fzlSZCHzD0G2kJFRgCQgG2+b0G9TgU8/eQk+heJYeLoQ4m1:fzssMpIjg6GZb9T3Qke2n4C","tlshash":"e422bf6abcddcb11cae50439f1dd1bde8f4e4dc24298dd1692ada3980448c628f2c67b","first_seen":"2026-09-15T18:30:44.770916Z","last_seen":"2026-09-15T18:33:40.541801Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/12/lavazza-dystr.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.212Z","timestamp":1789497162212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/lavazza-dystr.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72fee3f3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"4d5c-6759b1e3-cfd213e15f1b4bdd;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 11 Dec 2024 15:38:11 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=stDxsm2qxx6JAIXcxGRb%2BdVwRNxYPf1veoMODhmuhMAj%2BO1kBSOdiPwpxM%2Bf8BbTjyeO%2FPlwFHmUJyViur8dKvjoqs4%2F%2B07TTR9L%2F6qSk%2FUzE%2FIQffrx%2BywJpi%2BRjKDE8ZtfEtoBGgAQ%2BHsA8w%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19804\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19804,"size_decoded":20657,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ccc266daf010c6737311847bff9389f7","sha1":"a66b04519d193b1cb642eedb090238c8a41cd86e","sha256":"ae47d23c624c877490077474f312c63525a3e2158852f5580429f7aa4cf7c963","sha512":"9f81b83739f41dcb754b403a3efb3b8ded95d5b3365f84338f6139b1fe00d411057d5c45883b9bc4bab7daf63d6879cd4734eec3d0f0e7aa904d24da07f14cfd","ssdeep":"384:BcR8f6K+zto8A5yACt/dNZ78s2O+2zeIdrWrURGrIGIKl:BcRlpRADC/8rO+2zXUrURjGb","tlshash":"ed92e139e08b9667e2457d8652dd6144fb623eb310a7538ed9b0b8c38b6046ba2f2171","first_seen":"2026-09-15T18:30:44.509217Z","last_seen":"2026-09-15T18:33:40.542642Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2018/03/about-icon-3.png.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.261Z","timestamp":1789497162261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/about-icon-3.png.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e983ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"5e4-69f9e1a9-cf30886ba2efa622;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 05 May 2026 12:25:13 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uS5T2HOqIzeNyHw5tQgFRrtStuiNWaC8734n9DmMwSsM%2Fj50G8nwwnL0alStDzj3V7WBMIj58Afa8cQ0cIbMFuV0IepgpUJzxWrMutW48ny3jRntrU2zXwL5hwmC6oeoDhUJmiMRfePnuDolMw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1508\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1508,"size_decoded":2337,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1cb4e4beaf3bbe369ef4e3b085783787","sha1":"39297a1becae8d4a90c8c177c2a4385b0ce649b2","sha256":"568d527ee47e618c061a0cc15a68c3ad4f46ab54240169db1e1eb0beab3c1456","sha512":"3290d734893c1ce0cb67ab9a4684bdbeb970b9499164427904040433f40784a26fe5a5da5353bcdeac223a309fffd9427335c0231d330f1e9c59061d373b7714","ssdeep":"","tlshash":"0631b6ea17215bd4c4522ab845c29761eb81ae710a4ce2b78302d21d0ec11e83d2dcea","first_seen":"2026-09-15T18:30:44.448406Z","last_seen":"2026-09-15T18:33:40.543187Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2018/03/lavazza.png.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.307Z","timestamp":1789497162307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/lavazza.png.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b7307ec63ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"852-69f9e1ab-557e91c628ba52f7;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 05 May 2026 12:25:15 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZQKnoX1URq9SlrWZW7MX7zntgyc%2Ffx%2BY79zExMbRkKZqztgzETaEWkR%2F0HaCyAeLGcR7rLxNd22%2FNXiLqO%2B1PX%2BHOEycKAvQsUcFRHDcK9%2FpJ2mZ1EVvSUPfjh8OxXyqjq3qa%2FZEZC6vFXJvAQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2130\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2130,"size_decoded":2973,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"25598885a408b049838a2d0fa33acb3d","sha1":"ce53b48e7a9af7fe101c03038fbba3586786d16d","sha256":"22a42f197400aa450125bcbc0004f7158acb01be84c7ac996a3ed9335c1b1cb1","sha512":"06b3f9687ddbefe4b4f538ea87262e0d2c675def40308db63169497c6172446b41c14fcf561cc1306cfccca73bd7d4e30892624740535d740cbda244e1796a1f","ssdeep":"","tlshash":"6c4108255310c784cfa22b3cd1c3a7eda7ab7f22162c90651b42b24a4e808e08e3c98d","first_seen":"2026-09-15T18:30:44.676054Z","last_seen":"2026-09-15T18:33:40.543766Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato:300,400,700\u0026display=auto","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.957Z","timestamp":1789497162957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Lato:300,400,700\u0026display=auto HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 15 Sep 2026 18:32:43 GMT\r\ndate: Tue, 15 Sep 2026 18:32:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2338,"size_decoded":1106,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a6a8770e0dec38dbdcac1fc4ca5aed60","sha1":"4f62e8be743a3f9d55f503459acb39e4f53c98b4","sha256":"2ee9a2e1d70e54507bead416d305bd6d6ac85f5aa13b4237691761e40158907e","sha512":"aba16d6509caccb6aece1e7aa4c0296330171eb5ae5cf28c7288726c39a50026524e619712313065780083f653a1c65ef9d7fb78f14a825d2365ac83e373a1ca","ssdeep":"","tlshash":"3641bd91096fb508db830cc212c97d32ef1f625064499835aeff14d8bca7c699362b0d","first_seen":"2025-09-17T05:08:41.336713Z","last_seen":"2026-09-15T18:56:02.468979Z","times_seen":8840,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":17,"send":0,"wait":36,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-15T18:32:41.476Z","timestamp":1789497161476,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=0,i\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: zstd\r\ncf-ray: a3b9b72c7c3f3ca8-CPH\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nlast-modified: Thu, 03 Sep 2026 15:35:02 GMT\r\nlink: \u003chttps://kawawbiurze.pl/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://kawawbiurze.pl/wp-json/wp/v2/pages/206\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://kawawbiurze.pl/\u003e; rel=shortlink\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pN6RuO%2B3CRu2xk39%2B2S9pRuVB6yzlBPBCLkWMF5uZ7iALNEbXE8M7b70%2FoxcP%2FF8wibe0izdamZVIvb4cTNRyVQH4BKjDBMBf0wac8Jjlh97QpQvx4Ur8a%2BVilGBISMeYY12l%2BomVRcqwIk7Zg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\np3p: CP=\"ALL DSP NID CURa ADMa DEVa HISa OTPa OUR NOR NAV DEM\"\r\nx-litespeed-cache: hit\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WooCommerce","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]},{"name":"Google Tag Manager for WordPress","description":"Google Tag Manager for WordPress plugin places the GTM container code snippets onto your wordpress website so that you do not need to add this manually.","website":"https://gtm4wp.com","common_platform_enumeration":"","icon":"Google Tag Manager for WordPress.png","categories":["WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Web Font Loader","description":"WebFont Loader is a versatile JavaScript library that provides enhanced control and flexibility in managing web fonts.","website":"https://github.com/typekit/webfontloader","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":662559,"size_decoded":108896,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (54077)","md5":"6138d7306e1616a1c7e9666923f039f9","sha1":"bb663b67f3661598ecbffac19b8a318644f49257","sha256":"75860a41017243e2a21f79bb840bd61a7fe2f1fcb59f4f3ed16a8296be969d72","sha512":"6bd3fe2eebdccb8ee736be52138dcfff03887ced183bd2f8773779a688d6cbfdb7530d927759318a7d515fc8c2b5256b68aadc52b29cdd619f8e05531f76fe26","ssdeep":"12288:i0JLHLxvqnQPZnkw7VQZodh/Y0Q241rcBzjspfafCbjRejFKIi:i0JLrxXZkw7VQZodh/Y0Q2414PuRejFq","tlshash":"01e41af3d17d0036222f62e465d87b9838c7920adbc106f0b7ac976997d39e16b2365c","first_seen":"2026-09-15T18:33:40.544706Z","last_seen":"2026-09-15T18:33:40.544706Z","times_seen":1,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":0,"dns":160,"connect":190,"send":0,"wait":246,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/themes/enfold/js/avia-js.min.js","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.688Z","timestamp":1789497161688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/themes/enfold/js/avia-js.min.js HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:41 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WeNr3aVJ8pKwHaLXC8r7BwCIar5SRbI9krm6Zhe7Crg9BuYWKFGN%2FYWsq94UJyD1mohVAqynuyZNv3%2Ft%2BJNaIzdOIpi4sRKyl4SMGkHvalFRF94%2B7VBGXLuWq2hdUviWE02e\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72c9c503ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1339,"size_decoded":1221,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1339), with no line terminators","md5":"b75d7a960412bcef94e81e0e41759d0a","sha1":"a982c50f9029629ece7b508f32b45e37d007727c","sha256":"d9ea20211068d114e67e60e94eb02dfbcb0778b4872153d3008a79778354928d","sha512":"f36e858838eda6cc6436c17b6f7931cf2f996730222b7c4107ceb9d65b7f3ad2edd7936fa40d9c63229303bbb71578fe8cf42c1616c36e39c8045b1af142cce1","ssdeep":"","tlshash":"732133862075a065d1b9812af1b541c2b0f81dd8315df044a3bdf4b52e61c5fe27bbf6","first_seen":"2025-06-19T09:00:45.586098Z","last_seen":"2026-09-15T18:33:40.545556Z","times_seen":344,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjxAwXjeu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.767Z","timestamp":1789497161767,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjxAwXjeu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kawawbiurze.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 5612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 07:43:48 GMT\r\nexpires: Fri, 10 Sep 2027 07:43:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 470933\r\nlast-modified: Mon, 15 Sep 2025 17:09:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5612,"size_decoded":6444,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5612, version 1.0","md5":"633f8feda2188d767d2396652da17377","sha1":"d35cc70037f82ab61d86f2c4d80685a474821d45","sha256":"8b9fc9737043f88c1a9a7195c27a239bd329cc33d928ffb67736c61ae7a1dbbd","sha512":"edadc35473adc7d3d2b6c0bc04789dc78c7f38c0eccac6f08625738d5c8cfa9203c1d9ef2ee6ce721fabc5a4eba41cd19f47e56dc85ff3bc1f7f0ede2ec5ba0b","ssdeep":"96:iD0G8mpQLE+J8uftoCUdUZ/OGjfSg7uov39XTr9a8dBmhPk7jJ5lpqaAjiv/8qBA:7xXLZ8uVoCUdUFOGjJ7Pv39Pw0MiZ5cB","tlshash":"23c1af36b54e1d4bf74201b8137b823e41c70c621637356dbb16aa9418dcf4161371e7","first_seen":"2025-09-17T03:45:02.002945Z","last_seen":"2026-09-15T18:37:39.781484Z","times_seen":5597,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":17,"receive":3,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/5cca72d561adb090b90857794df5ce23.js?ver=5ce23","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.973Z","timestamp":1789497161973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/5cca72d561adb090b90857794df5ce23.js?ver=5ce23 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xL26YaKjZnlID8caLlp9hG67OhRY5%2B6zpeHutcb4C0dXd9Ccc6dRgSYpPHTq6dBg9%2FdTfRfrK1KuSH%2FfEvTOvOsZ5uY5XA8pQ99GgpRFsK0yum8Uo9p3iwixPtPQgbk4ibqQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72e6d263ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1015,"size_decoded":1085,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (852)","md5":"705d7c101b107356620cc2b60b2af516","sha1":"ccbbd6c33e748ed40bf721bd2c57240c4dcdf7e7","sha256":"074aba01b782e3e4ea26a6017b3cf64ecb7e7136cee3867ead492561b263d231","sha512":"01421603498e22c68ab7a08006ec57a2b89510fa84781b8c99e4d4a241d033ce9a8b4cc2c6bae5364143fe70e323efb64d1a6baa0c1a02fe5ff94e191e5b73c6","ssdeep":"","tlshash":"6211cc5e2c60d99100f5fba32837fa0c20a76c863a51dc60d4d16d9e9d7c3459f1b80c","first_seen":"2025-07-01T12:26:32.689636Z","last_seen":"2026-09-15T18:33:40.546526Z","times_seen":7,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2025/04/kawa-ziarnista.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.133Z","timestamp":1789497162133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/kawa-ziarnista.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72f8df23ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"3dd6-67ecff19-ad56b83ba0934d66;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 02 Apr 2025 09:10:49 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nNZAu7%2BdwdNKeZ8OBk82HgVHRLsCaKSyLSX8XfFU3TUVTDqv%2FwqoPM5g%2F0FSmPFy9s6a51QHxWzw%2F11xUbIzFbcyWOt4hdMBSWstwV1%2F7TcQbx4Z6ZfLdg5R4%2BtBBVSwUHR6ClBfAh%2FfNuQDpg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15830\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":15830,"size_decoded":16673,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 327x175, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"aa245fa078761484a6b7abcc472b603c","sha1":"c828451c941a1f1af47a940494dacebe6c007b52","sha256":"02323ceb27e2d317ddcff10eff3f9cb8eab1a823fec2eb43289b12ae631bb65b","sha512":"c5da3794d00d1686c1bd2ce603064826052451052b6588b6ed57401cfc7342f3a7b24a798d927799cc861a7d017224ff9cd09e589afa8f0aba286112f1d9a591","ssdeep":"384:VWMwLvGjekuIZSQXh6SNui4ox8aQ2nOXPCwWEAaIbXF:MMwL2eku3QzuiFqpDOE5UV","tlshash":"dd62c07eea2eba917764c8d01117d7c0b869bc64dedea3b280f329f7502d0217195d5c","first_seen":"2026-09-15T18:30:44.662727Z","last_seen":"2026-09-15T18:33:40.547013Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/eec719d721671f6428f4cb927e3560f5.js?ver=560f5","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.001Z","timestamp":1789497162001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/eec719d721671f6428f4cb927e3560f5.js?ver=560f5 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VWQBeeupJzKy6qkpsVf7ebb%2BAhs8ldO65qP3NLhg3hoekr5h26xLhAHgtV1UYzIxQ9pTPAi1j6FE5U7S9mqarlKQn64Y4FD2zAT1pK6NXfg%2B6zVD0vnwddmtQ0LjNozw58WE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72e8d533ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55228,"size_decoded":14416,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (55155)","md5":"576a5ab746f23df9a2373a8f8dd436f4","sha1":"e10e1a41aa6bcf7dd757acb38796fa8fbb50375e","sha256":"9f555e8065651a0aaea79ed3fd3af76ec68e16a4aa9b9e15b0187b0419aadcb0","sha512":"a59a85906f2a9c1ac16a8d2d86da2b04d2b0194306c51de1690a32340df5eed929aae611e81ebc8562ea48c9e8196ca85b24a33aca08a85e7bc76d17677b38c1","ssdeep":"768:zZ05/QWiE03KzS3nWAZIdJcFcDcoc1cBcAc2czcHcfPfJhkZwRXCZY2PZgg74nly:yjzpCJhkZwRXJcggUnOqTWp9","tlshash":"ad43c6b6945060fe117b44f5f07b6764792b0e9ab2026ca58b19056b392cde803f7fec","first_seen":"2026-09-15T18:30:44.449467Z","last_seen":"2026-09-15T18:33:40.547604Z","times_seen":2,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/08/Coffix-szklanki-big-1.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.076Z","timestamp":1789497162076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/Coffix-szklanki-big-1.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b72f0d973ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"2d0e7-6a86dfdd-3810def24c984da;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Thu, 20 Aug 2026 11:07:09 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iRiTJFL%2FugvNYtmiD68GgBwC6gZVW3naS1YHgZghHG8IRDmwpIPFtKuZbwtsSbc68oBl1irHSzhDy09COwRMvu8GGeNv8pCTe%2BFFr2Xeku8I0j3hby%2FJwTfyV5rhlzQid1UItM3IKgQkjV2u%2Fg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 184551\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":184551,"size_decoded":185389,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x430, components 3","md5":"db7f5ee8727620a2146854c823c437bb","sha1":"dfd42e6cf77ab75758bebf32e370fdb2196f8e08","sha256":"d52f024200715e2056a632d0ad5dfc356cb777ca2c0961e3d3c3ea0376f23f93","sha512":"5ec761e96e6395807c2d83c6e503de3b5fb9821a6dcab1d4063f7779b77d7cf92782e054708e8e7f6fa897f32c28471ec3b7c4c89abdfe60ffea9c4af9340624","ssdeep":"3072:KNWv2tAtamZ93UAqd91fgafpX2hxs3UrhZiS/zZa7U5j78X5y3q5a/4kbMn8dXv9:KNWuAtamZ93UJdU6m3VDs7C78p55a/4E","tlshash":"d60413c9c4ccb9c0b84e78617fcd2ba4f404c9b9b6c7995be531fe08d5b4264d632a92","first_seen":"2026-09-15T18:30:44.507702Z","last_seen":"2026-09-15T18:33:40.548641Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/5a3baad652f9ff81f898fee46cca5d96.js?ver=a5d96","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.171Z","timestamp":1789497162171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/5a3baad652f9ff81f898fee46cca5d96.js?ver=a5d96 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BwqIBqLqv2IHAhQx73U4Y307ngiZcpjsFtSLv4ppNOeBNPygqyfgb37K4kKdN1LfDQHtEEiV7Z94%2F0eqG5Ru2aU5by2eo2SZFB%2FU%2Be5YkFyGVNKcv6r%2BYr1mPo5G8YDkcnUQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b7300e543ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1388,"size_decoded":1271,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1386)","md5":"425dfe748e74fd4518bbcd08ad5b8abc","sha1":"2dc941b97c6d8b0331fb78d1689c5bde27c4bf2c","sha256":"cd455415981656e0d60e053aac1be7ef50fdb8c0937fbba2e8fcfb8722c1d8e6","sha512":"3668fe25886e4a0f8f28954491f51fe81b9cf87b3e575682b94e22ccbab98b3dbe91dcbdcd0284ae7db9329f88f5b8ab008112ac892103877e67c6146164f86d","ssdeep":"","tlshash":"af2101597245406d00fd2e6c6c9a4b73bb9016775a09cc8798f654304676f0bbd63c7b","first_seen":"2025-07-07T17:47:21.361025Z","last_seen":"2026-09-15T18:33:40.549243Z","times_seen":10,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/08/kawa-kolejne-500-4-450x450.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.238Z","timestamp":1789497162238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/kawa-kolejne-500-4-450x450.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e933ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"30fd9-6a917787-e0cb332725e6aa1d;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Fri, 28 Aug 2026 11:56:55 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rM6d%2FRLxR8YMv3rJql1lBfadl8S4%2BL0AqhZ0qXS2CZ%2Ff9cQ49E6y8uGBXUolKuhBOd9Qg83Yzep45MOhKexm1xd38Yy8kwk%2Bhyjxs7kxWrNt9tm%2B%2B%2F%2BxGVaIJDPbSdMEcPHaPWL7O49vJpaaeg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 200665\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":200665,"size_decoded":201511,"mime_type":"image/png","magic":"PNG image data, 450 x 450, 8-bit/color RGB, non-interlaced","md5":"60442bfceca868d3a9992564d79d7eb3","sha1":"5f40f7e61cc1761a95923437b51ea47fa99b3368","sha256":"1b06da68d0da11a1926030a2455dcf6b2039a7d483401c0b4bbc9c3787e72509","sha512":"2e6060a772b4dc8fb09bc78273f120a8efd6416a5eb12343bd6e4d82e1d08b9cee3e3a16ba5d83b9c6c52b601e595ad7a3492a6388846660c5b3e924d3f31a83","ssdeep":"6144:dvXjM4y5Lrwi5I7dRp0AZXrd/f+DiSuly4KZqZNIgsz:pjM4y515Ifm4XRf+DidDKE9w","tlshash":"e714132f5dd78421740d342e974ebac621f1ad928a944f86c55bccc29b34f4c7b8e9ac","first_seen":"2026-09-15T18:30:44.366564Z","last_seen":"2026-09-15T18:33:40.549833Z","times_seen":2,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2020/12/DSC8596-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.255Z","timestamp":1789497162255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/DSC8596-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e903ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"e6fb-69b011d8-13cdb708bc8cbf6;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 10 Mar 2026 12:43:04 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UyF2ixjd9jV5S9Ll8X5vRfphocSIAE9T1G%2BTEVcBdBnhvSv%2BEfu%2FS4AJvUSc1DL0dYr9y2HWwdILTvZtWXcDP6YZ75cWJmbfkfvFUYps6s4E4Lm6ZR7CCn8CT8OaTIv492c8u8z1MtQOgsNB5g%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 59131\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":59131,"size_decoded":59965,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, copyright=Kasia Fiszer], baseline, precision 8, 450x450, components 3","md5":"3737666f65839e5b873b9cf47049276d","sha1":"670c1f5f926b7b444e2c01dcdf89b1fd56521511","sha256":"25ac1fab01566f3378646f90929f9f549d5d7f3aa4a7949c721f535840c08a21","sha512":"eecc00adad9d810423ebae66372daf2a41abb06c2681b961f08f3600010d662e53d03c5a35a910f2fc202e995d59c9206d3249a5c1b305193e7a7f05e4d0e35a","ssdeep":"1536:SIX2vEwsM4c9OfW6vp/14IBU2s7eAP1jdKfUtSAeELGxcwm:if0pV9U2A1hIiRebcwm","tlshash":"1443346d2ab4582fca9fac89c13a12d717b32784e04e0479f190e4db9737aa47709c0d","first_seen":"2026-09-15T18:30:44.629437Z","last_seen":"2026-09-15T18:33:40.550489Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/09/Lavazza_Crema_2pcs-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.277Z","timestamp":1789497162277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/Lavazza_Crema_2pcs-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e8b3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"31894-66ed1b12-fa58a730f2bc8bbf;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Fri, 20 Sep 2024 06:49:54 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xbFactF8XW4kP2A8nuNSKGdTQ8n8EBXraXY6lb3rFj20Jgyy5gMzBPr6HCmLZo66J9dfySUmgl7yeMy4Hpz21qMQMl6gTw71u1QQTdeq0T%2Fz4AroT0Xqb%2B%2FmLxqbVCaVI0sDL8pZA3UGgUcRTA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 202900\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":202900,"size_decoded":203737,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x450, components 3","md5":"3a4ad5a697969beba7cbb9b154432845","sha1":"c9e6fbb7bce1e87fe682da58cdeba5c8e0d0b92d","sha256":"3eb9d6b9b41ff0d98feb39dc18fdab81b3195f94315cd6a9fb971303650fa4fd","sha512":"62d200803208fc9e2412ab950a735197dda8a93b19fe6ee234a7421b74f8ecd3222427f120cc6ab26898b1e61c5594ab1b1b32b40fc0226b28f1c668007bdc6f","ssdeep":"6144:OCVGC6pZMhd98AEqqSC4nwicYjXuSArC0cHtIFQS:ZrNjNEqq3MZP+SKCtyQS","tlshash":"2b141251ebdbc1ba7b473ce8a4bc149b274589ce06d4404589a7f000fe18fa7c688bb9","first_seen":"2026-09-15T18:30:44.812831Z","last_seen":"2026-09-15T18:33:40.551111Z","times_seen":2,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/09/Lavazza_Oro_2pcs-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.278Z","timestamp":1789497162278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/Lavazza_Oro_2pcs-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e8e3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"36020-66ed1b16-481bd5f6e400824b;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Fri, 20 Sep 2024 06:49:58 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ImXYMLlgBH%2BDmzi9zUd5fuxVAt3Xc%2FR0%2FMk%2F4y2EKP0%2FPzgSxiHhmaQ7uOHyYI93GsujU89enq%2FZ2oZGYnSZ41akqxLbbNPjIg4GNG%2BV5BP9DSN2JQrtHXs3ZCXQRaly71GJyAkyOAPR81k18g%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 221216\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":221216,"size_decoded":222061,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x450, components 3","md5":"33730aa83111d6e406540b8983a66bd6","sha1":"720f89b8ffec15051092e0f3db7fa97246bc5a9f","sha256":"89b5e2dafbfeeb82f3290342338be4cf65d22d5f1aed7799950e7fe2f0ccec4f","sha512":"84da3d90628033bba0f5407dd7fb33494303f330d38543e761e045df09c17750dd2f0aeddd11af5d7f5ab147077033ebdb9c72cda97d2e71ec298f58fb503265","ssdeep":"6144:FlNTgB6BVLWqIxN6f/F/heUR+q9JF2Qlw0mEbG:FlNUkBV6q2N6fd/tI8D/lw0zbG","tlshash":"dc2423409258d22f37032e711bbc6e259b0894d5d0d92e61b966cdb0e7bed960fe132f","first_seen":"2026-09-15T18:30:44.588759Z","last_seen":"2026-09-15T18:33:40.551691Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato:300,400,700\u0026display=auto","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.290Z","timestamp":1789497161290,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /css?family=Lato:300,400,700\u0026display=auto HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T20:51:43.703029Z","times_seen":18482263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/11/drCoffee_logo.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.336Z","timestamp":1789497162336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/drCoffee_logo.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b730bef13ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"4224-67498301-f68e4e2e9c6ff4f7;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Fri, 29 Nov 2024 09:01:53 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PwehUbojXEjV9kSv6gfldHeSsbZlYaX%2Fsl2Is%2BB7rzmdngnqOVeWgN9w4HhyHpkYLQV4OvqmcL%2BgyNe%2Bq4YZ90HKUBlG26U7I%2BehRA3%2FxeBTKMzrqfVD%2FSpB7K8JiIlx616S6X%2FKiqNALVOhHg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16932\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":16932,"size_decoded":17777,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 293x61, components 3","md5":"cdb8da0fe71916fff117b2fa972af7fa","sha1":"bcb3b09816474ba432a8188e300c2e2bf6d519ef","sha256":"d8bbab66f39d8c68ecba36477b24d502a2104581272ef365db0aa417f85ac367","sha512":"4045a0123da73f97a4b11b9861905839c10ad2b46761a96d0770d1145834e341a8a95fdcc8aef6caacc038d2aa97b4a02ad6c70fcf9858f7322f1deff8bd7123","ssdeep":"384:wH1vod7qor7MjkNPl77PgQWQKI9PBpgJD28Ek+hd:wdod7qorWkxB7BVK2Jpg48D+hd","tlshash":"9772d04247169097cc0cdc78a5642adcbcea46cc7a51432e38f17ca9f96dc5f1aac64c","first_seen":"2026-09-15T18:30:44.781854Z","last_seen":"2026-09-15T18:33:40.552274Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/ebe582b2e40039abc43613ee11eaa918.js?ver=aa918","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.986Z","timestamp":1789497161986,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/ebe582b2e40039abc43613ee11eaa918.js?ver=aa918 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LKcmzsITz1v150uryRI4iR67wh5Hotp2qL5afOrKZPKVHNOCU8eNiuIZxDJT1sacYzXjkhSrIyJbHqTc%2Bvn6w0Gwet3djVO53o29AknTYmvm0pzhmvuELIYOpmHPXGvadFRe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72e7d403ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9266,"size_decoded":2786,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9264)","md5":"e4164059c3918c62d7694a68d66c1798","sha1":"44935aa50b7bccf4302cedc6b5c9bb324b2b4ec9","sha256":"131e9b17f11b7e02efd3a4af9481d443e9e244f4e1531809d2cbade78af1794e","sha512":"53ce739dda2c5e31596ff81d515dec222a1b32ded595470c83c209538b247b561a10cb926db356e28e82480b2999b70027570a68a1b561d5056cc4d725f47e20","ssdeep":"192:ndBuw+tnreOGdcl4c65ki0uUZ4VMK/EEGx2sCBZSySQ:ndBuw+tniG4t2iHEss2ZSySQ","tlshash":"0412521cb6ad73b127eb212608efa50765b2381ae9444640702fd595ef38ec0b37392f","first_seen":"2026-09-15T18:30:44.832718Z","last_seen":"2026-09-15T18:33:40.552887Z","times_seen":2,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/01/san_marco_-450x450.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.228Z","timestamp":1789497162228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/01/san_marco_-450x450.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b7300e583ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"19136-65952d9f-c1123c2de581ec51;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 03 Jan 2024 09:49:19 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PWundyQBmXlZ3Wc3yWLGzSxn%2BTCSWaM27UkBnad2CDmQPdNMADavULqv6eTfDsy7DCjKNKqUJqjfzTQxJ6gq7GatwPfu%2F4qSjQBUXxpqHDxcwim8jw5TKfdgzcqcyezVu539C6%2FfaX9y1sntcQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 102710\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":102710,"size_decoded":103546,"mime_type":"image/png","magic":"PNG image data, 450 x 450, 8-bit/color RGBA, non-interlaced","md5":"e476348c2d615a413a0ec987af3a0fa7","sha1":"4f46ae3020acf04367485a2b6b8d1a05f693b4e5","sha256":"5f96e612d4c7dddb69445563dcafcad9e2ff73275ce97fba5d838e2c21b54bf7","sha512":"dce4c0ab09dfe5a1cff5e2363eb6d8f592578bfc0129c7e68ada39376a6fef3f5a158cbe8cd1e84a66fd96a47a7a98940488f0ce5af1af10b4d0a97fb1a03080","ssdeep":"3072:YHteOdOD3NqgknLJf2AdLLld3ESiNQghko041UEj1NkM:Stc5qgUd26Lld3EVNNhbZScNkM","tlshash":"4ca32359c4a0c29e8f536395330caffcb7612f9360554003597ac2ae8d81e73a85bfe5","first_seen":"2026-09-15T18:30:44.802723Z","last_seen":"2026-09-15T18:33:40.553504Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/12/logo_lollo-caffe.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.305Z","timestamp":1789497162305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/logo_lollo-caffe.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b7307ec73ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"18b8-674ef246-9511ef6f3d98d8a1;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 03 Dec 2024 11:57:58 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VkiMo9ZNHoGiiZigDb73TRptD4KHJ%2Ba7wjxyPFIcOwWSgt75TxY%2FwvKZ%2BFLF6%2FmK2178tbuQ8aFpG6Mj%2FnyUWKYUdeGNnYGYG3Z0H8%2FcCJLOY%2FuV9hDFRb2hfwHwZstbgcEibfXzvqymv71oFQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6328\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6328,"size_decoded":7170,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ada3f2fb5ffc5f981bebe7d332508d61","sha1":"23246ce3d364a4a60d9491cb0d41b069dd3edc9f","sha256":"546fded4370ab4b71c58af4a23c77f2c42e9fe17bf822221c70fecd52118191b","sha512":"8db117107dbc5041a59e586ae1b3c06b52be152b9a7c4278fb82bb350f2cb049d4c28088eb127651985cb0434e5da8948a194bdc5087a183ada6aa31f7b90d40","ssdeep":"96:+UbN26MT0D5MdtbZPAVwzVzl0In4jQ428I4eF4zNlFYGkruxen8tvA:t2YNMtKwMHjQn8IN4JjMru88G","tlshash":"aad15cb76fa2e311e9b5da701de22fa05252f219e35222816021aa110dc41c0becf0ae","first_seen":"2026-09-15T18:30:44.693475Z","last_seen":"2026-09-15T18:33:40.554457Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2021/06/fb.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.341Z","timestamp":1789497162341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/fb.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b730ef183ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 381904\r\ncache-control: public, max-age=691200\r\netag: \"d2f-60d88ab9-182a9fc6cbdd3ee2;;;\"\r\nexpires: Sat, 19 Sep 2026 08:27:37 GMT\r\nlast-modified: Sun, 27 Jun 2021 14:27:05 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0kHIku4WiQF1CTy6gEd1NyNAi4P%2FfwRjxyEnKSlEINPKlXLYpYuPCHYuK8hXrIKMpeEl6ossQlnpclkBv7IhbU%2F74FIV52lRoS1gZFTV3pphOCAWBYeg0JjgRKCVwSgyNQ%2BjNpRfts6E6q5tkQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3375\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3375,"size_decoded":4210,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"b86c0a20a1a41c630ac810c4d8325592","sha1":"0d87103cc1ad6244a56169f78b08816e12d9fac1","sha256":"55b9abc647b3e8533c8bcc3c09842fea37db1e1e7aa70b0972f2d31bc0b98f84","sha512":"35f56bd060ffd84855bc4e2433302ce73beea5a9eceddebd9714662acc57a0139e6527fa0356003c6d0f65175756a5295c8ab4595383a040ad9a50e12785499a","ssdeep":"","tlshash":"e3617deb9d20509f75dc79510ddc1202d734632c5e573b3c84c2a8feb096e46eb29031","first_seen":"2026-09-15T18:30:44.698068Z","last_seen":"2026-09-15T18:33:40.555048Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.ceneo.pl/shops/sw.js?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0","fqdn":"ssl.ceneo.pl","domain":"ceneo.pl","tld":"pl"},"ip":{"addr":"5.134.209.153","port":443,"asn":42656,"as":"Allegro sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.757Z","timestamp":1789497161757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ceneo.pl","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 16 Apr 2026 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:CC:D3:01:00:A0:05:79:8E:68:CE:35:3A:AC:33:47:4C:C9:EF:60","sha256":"16:C7:26:1E:69:F2:8A:15:1C:08:E0:A4:C2:5C:2A:3F:0E:5E:F6:20:91:A4:C7:2F:A4:AF:9D:83:F6:0B:50:F4"}}},"request":{"raw":"GET /shops/sw.js?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0 HTTP/1.1\r\nHost: ssl.ceneo.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public,max-age=600\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=10886400; includeSubDomains; preload\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; img-src * data:\r\ndate: Tue, 15 Sep 2026 18:32:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3967,"size_decoded":2443,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3966), with no line terminators","md5":"cfb8bf227f2ac0e9a84d1af28b9e1ed6","sha1":"b3c2bdd35074146d545fc57afc107bfc462674de","sha256":"4a26c2fead456ba88352906a459107c6a7f0729ce934ffdb105a82a094b92d7e","sha512":"425dd57ff89661a54d2373d3cadac04804d7696863380047eb5eedf5e79f683faf008a52bda7b2131f7ab3ee20911b6649d5339164530cd07932db9e032fb47b","ssdeep":"","tlshash":"ad8174a97505172543da847f51ba13287030e91eee0c40c48cf5983a75e9edd6277bbe","first_seen":"2026-09-15T18:33:40.521295Z","last_seen":"2026-09-15T18:33:40.521295Z","times_seen":1,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":36,"send":0,"wait":40,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/38f37c7c2dce0500c6c05df4a018b1e5.js?ver=8b1e5","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.134Z","timestamp":1789497162134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/38f37c7c2dce0500c6c05df4a018b1e5.js?ver=8b1e5 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ofjosnpBbMR9%2FstzAaXWXfHpQtBAHVzJ7e8c2tkFCFD%2Fwyez6WyF2pV74sYfSiqE1XI893XEYOu8S4ObznkGbSfoRhdIncPb8I78hbA4RV8CBd%2BJ67BScA8%2F%2F%2BLC8C%2FawaB7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f8df13ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":1295,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1134)","md5":"2d1a517d9c6062ccca6dbc982e50f7e6","sha1":"67ae4563a0b2a93ed63b2125c2dce3d1c3aea97b","sha256":"9220c5a1090193c17c83e170be6bec8771c3665031e9389e4e7428e75fe2ece9","sha512":"74b21b4a966b3559b61e6b73956f7790c250e2f042af5accdb22fa18190519d537935b61e8510c8b2cdc09d6cb50288dbd08e2c4f96fbfc893ac52fa871f3752","ssdeep":"","tlshash":"b3213018e3253481a3fa7dec005f4002a12ddc77d2438d4692e7ceaa46fee202a75d3a","first_seen":"2025-07-07T17:47:21.373279Z","last_seen":"2026-09-15T18:33:40.555805Z","times_seen":10,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/07/487-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.234Z","timestamp":1789497162234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/487-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7301e633ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"1f152-6a6b17d4-c3e3796b1669f552;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Thu, 30 Jul 2026 09:22:28 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2Bp%2BmJo%2Fnrjy001gKtTRF9fD%2FgxOPEHrp37%2BdgVowQp8nKI9gzbOoxz%2FKcd4Rze%2B4ObHXOfblaiyD62bUjpiBsvt2U3WH%2Bbi5oA30%2BQg4yK3WLBkjaXAxEWyFf9ZTRdFVY%2BZcT3pzu5GgOGLFQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 127314\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127314,"size_decoded":128165,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 450x450, components 3","md5":"fe68e3ab8a46d57ad88917bf18686f8b","sha1":"e4744abd7142083aed9067450d3d581431c1417d","sha256":"f958be051e055eb910f06c523bf415a6364fcfced02a810364926ad16a5274a3","sha512":"612d623e6a2251b69902ba1e0612c8122854a8d78e372fd8ccdcd92bcc5f024d1f8558b35251eb293ad22ed2dff7ed295bdf94ab9c50e595d11f82c189425225","ssdeep":"3072:RfrSdpWOtEkGTI56GMVk+kJ5xmt5LBRZkrJAVBycX5bMm4rNV:RzSLFtkTI5673kJy9zjVBycX5ArNV","tlshash":"9fc31288a9f003f7d5d67335ec9160e03fc86f2692ba290975acd5e2df0375bb825681","first_seen":"2026-09-15T18:30:44.474781Z","last_seen":"2026-09-15T18:33:40.556368Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2018/03/about-icon-1.png.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.263Z","timestamp":1789497162263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/about-icon-1.png.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e953ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"7d8-69f9e1a9-78c1880e864ad6e4;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 05 May 2026 12:25:13 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=49h5f%2FaqGGxiAFXrjAR6NXKij08nN2aO%2B8lDMwGRxAYSc73kspccL554EEAvkLULsyQ2Q19FnQbwqSmCp5gvn8YiW%2F%2BQ2PSxtLKbGV5fOzNVItH%2F1ILzjrGAsNc2gf9m87PqKM9wkAYzqqRT4A%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2008\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2008,"size_decoded":2845,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"002d3c4382fd026a995ba94ee2b0ef35","sha1":"80cb5fd61fa22b3b1e8042e3982b44c216d1de4c","sha256":"54542b24d44649ba15b1ac8aef22482b1bfff2a920fad312ca4304ecbe9a4d98","sha512":"bfdc7d1d342b9035980c59d579e4058ac7738edf0b6ce759de95d33bd6700ffff614fbb9e7f111d01b50eb09f69257eb94d91a2f1c824cd6308b1fd4299bd7ee","ssdeep":"","tlshash":"85413b111b2a3f46cb4039fc7641bb2ee7987e634195431ed60476021f845c09f64791","first_seen":"2026-09-15T18:30:44.494941Z","last_seen":"2026-09-15T18:33:40.556944Z","times_seen":2,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/12/pellini.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.322Z","timestamp":1789497162322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/pellini.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b730bef53ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"21a8-674ef18a-71ba8a43439907e5;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 03 Dec 2024 11:54:50 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eBZe4dZp9LwcdYWlwX7QbC4lObLgz7tUjKJRgctA74F1FwOSgeQhcFDoA680K1JP%2FzLzRIlS%2Fvg43v2QMbAqtrmwQibIuzi9YWKfgph2AzUcxdB5TwtOCnkNjoDyl7mV1LXXTeqGARkJrqPO6Q%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8616\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8616,"size_decoded":9447,"mime_type":"image/png","magic":"PNG image data, 121 x 61, 8-bit/color RGB, non-interlaced","md5":"9d9ad34883848dd84f3c8a6af6ce8fe5","sha1":"2b3b991a6d3579e52a1645e25071112797d37740","sha256":"5f9b303ca330d6b5380f93ccd416132d741e8b9fe82e84e95b5f329ae2a236ad","sha512":"602aa88bd7a5b5e0b0daf6d4d7c7b48c5205585445fe33380ebe45930094c0d8ceef7452d006b85aac77adc5d6d2bf42c86ee9bc2cc989e9a429553de30b95eb","ssdeep":"192:DCX+w9hUMRwlsStkn4zVLdRg2gd/c1QTwG4rcBZrdfnsTQSG/X:Gx2hOn4xxRovxeczrdv1","tlshash":"1002aedec16a70a2616addb470e66183bdf60e928744404928fe4666fe90dd1be0409e","first_seen":"2026-09-15T18:30:44.506229Z","last_seen":"2026-09-15T18:33:40.557614Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/e76eac4c88f19242dba893b529d25a3b.js?ver=25a3b","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.138Z","timestamp":1789497162138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/e76eac4c88f19242dba893b529d25a3b.js?ver=25a3b HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tteBBoswF8hkbYUDpDkeHDidrsCw3yhCcMAAXQCHFvKAYJF293PzcagXdwmv0WsZ0jMWCvhiYKbQUaCZ%2BXZ8jk%2Bx3quZYcLxBn3zwISeNsFRnD%2FMGTWC4l%2BuxGu79L90QvzH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f8dfa3ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1193,"size_decoded":1160,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1191)","md5":"737eabc5c3c8fd20b78acc31843d10e4","sha1":"92b3fb441847c83c59f6e849d4e74121addad518","sha256":"6cc9a80b0b6fba9af3298bb09c8dcd5457f875a37003c9c31833bfea8835e6e2","sha512":"9c0f3ff581ebcf86286cc4477721fcc70eb268e29c462012cd926626ed501f8b73dd768664e487491d26baac968933b2f7dd2429b31040d258159fcd6cdb89c1","ssdeep":"","tlshash":"0f2121dae848111a51c7246c70e7131c32bdd354d0108528b92ee9df29f5bc9647eb70","first_seen":"2023-03-07T22:39:39Z","last_seen":"2026-09-15T18:33:40.558215Z","times_seen":723,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/311f9d780f7f7479882010d33cdf5231.js?ver=f5231","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.988Z","timestamp":1789497161988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/311f9d780f7f7479882010d33cdf5231.js?ver=f5231 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5z%2FOeRywWeuYK3%2BmRrSiS8P1ZOsw95usyEjyCa5dPpSowwyK2BTiMohMfPojwj%2Fm4ljcarZupoQyCuO8gljRavuI9O489KxKXwJ4kwwmRlBssGusTy7zmiWTbPbLa7Qik6ow\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72e7d433ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4334,"size_decoded":2154,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1567)","md5":"35da7fb605030de0fad86592415c6618","sha1":"e7a9c65ab6300317889d90f63faaa6f6b1fc2a46","sha256":"021511932b155cee00b42b4cffc325a3f5996f20bfe4e14487cef644de1cd4a3","sha512":"582f79e56c003b681647e091f4ec41d5a825fa9063f296e295a6fc5ee853c1d1f2401355c341d8818674d455f8e0d7416209639c1f7420830bbd06908f7c90c1","ssdeep":"96:ChLSSzMuDuZbuNu3FD+4nmucP9uFExivuDudJ/7gwtA/+:6LSsM6wb6KDLm/9kE0v6QKd/+","tlshash":"d7912f323b903606d5dfa0baa1afa6083020d53b510d06f2a627c575ca58cc3fe77d6e","first_seen":"2025-07-01T12:26:32.720662Z","last_seen":"2026-09-15T18:33:40.558776Z","times_seen":7,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/9b4d378cded4a8d22dec63ef9054967d.js?ver=4967d","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.096Z","timestamp":1789497162096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/9b4d378cded4a8d22dec63ef9054967d.js?ver=4967d HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FwGOe6z2%2FWcGX7%2F83emDZ80omtUc9NWvwyqnWz8mb4dEs%2Bfieurm4BXCQorM8OFmVdSJ7XcAcQFwrlbYnPcnB%2B2DXRhLc1gMly3gWO4JMKArcMEg4OPazSLKCTP7USjm0%2BlV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f2db53ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1361,"size_decoded":1258,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1359)","md5":"80c1fec48691198a3564ac7630159f51","sha1":"bd74ae1c75271ff9d08799e8d63c243d85c6e1ed","sha256":"57ec09d64627bab3880b6f8d44a9082dbf69e290b4def4ae68186b80063f99b2","sha512":"cd8a1008fca251191775bdd2a1c1bdd1253226aacc97b539099770178cd8dcf216a0a8cd5005ed07ffacd5399e82d47e9f074679729e10e1405435ab2630a4b3","ssdeep":"","tlshash":"4721dfc4f2f5d8110a834078699b1b44f237aa7d65b9804838a5d2e3ec787d983777b8","first_seen":"2024-08-20T15:08:04.836955Z","last_seen":"2026-09-15T18:33:40.559359Z","times_seen":11,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2018/03/jura.png.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.289Z","timestamp":1789497162289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/jura.png.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b7306ea73ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"8d4-69f9e1ab-c1b05a6c1f00e6cb;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 05 May 2026 12:25:15 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UpqEB6mejian1l04LFkAPBw6keA8uOyKPIyx%2BBlM7JhupE2qUtoDmSYRgqjS5LWliGV61nU0fmUNXykSwLEtc10wFUHdhKeIJZDUmG5Y6sCv3lOCFxVvY%2BSHeViFyktCpmjn1q3%2Bg%2BTtJmoYUA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2260\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2260,"size_decoded":3095,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"15716c81622d6ea413b2b9182f30f1a0","sha1":"5eea65a8d88efa3a3dd42294951086e573c04ddf","sha256":"8c98c13b7b0c7c23c9c58e5362f30e22346f6378ce28effbe30fbbf59f26dd65","sha512":"fd5de0f2f83ae4e38d1c4a1a47c6b8d8449e604f44ef752b836b7f31560591468f4af43e7fddba3b2f3bd14fbf945a6efbe5bf4ad812e153b6a9132cad3d2d5d","ssdeep":"","tlshash":"3141073243668315c3b2a67c36d46bcddbd16a13c5f0ea363342421eac8c2d4ce488f8","first_seen":"2026-09-15T18:30:44.617253Z","last_seen":"2026-09-15T18:33:40.559965Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/e9d68b0659a28ce8382f76f341650870.js?ver=50870","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.175Z","timestamp":1789497162175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/e9d68b0659a28ce8382f76f341650870.js?ver=50870 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SyB4O%2BuKhS4Iz1IV4xIzwmNlTPTpsG%2Fv06VsBixcpLfoEBBf9bYA3cJnVYwD5ZbC5QYInlbKGLzWHlXAKvYS%2FJOyDlYCkWZIYBrZrJqvmIwQQZyQYbDAVOKcO7WtY7QSPzmj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b7300e523ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4352,"size_decoded":2100,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4350)","md5":"73dcf1072af1f64ef05cc8861120e8d6","sha1":"074db6a35af3c41ed29f0463d28ea19bd1bacb66","sha256":"c5c8fb82d490b89200d9417e80c1a96b84c885b2ee61f4a888f79fadaa90e02b","sha512":"dbe5aae373b1203116d36fcf9c4b95000b89d48f0554ee2a048f20e7cb7dad4a3df59fdef9cb0ec226b7e5a96fa2200d7f6e0c7019423fb772a9aa92f0454f19","ssdeep":"96:8mJQb8DHwbTtwqfDZa27MXi/NCa2St01Zyw6VfQ0GfV5VO:FKwWpwQFa2N/NCa2St01Zyw6VY9fV5VO","tlshash":"649173ceb121e4b693a22d82602fda850533383ff08694f8248aa6e51f359456577f3f","first_seen":"2025-12-11T02:31:21.624153Z","last_seen":"2026-09-15T18:33:40.560574Z","times_seen":1738,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/plugins/complianz-gdpr-premium/cookiebanner/js/complianz.min.js","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.088Z","timestamp":1789497161088,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /wp-content/plugins/complianz-gdpr-premium/cookiebanner/js/complianz.min.js HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T20:51:43.703029Z","times_seen":18482263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/0e37ee50722512337b6e5c9149d1b7c5.js?ver=1b7c5","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.971Z","timestamp":1789497161971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/0e37ee50722512337b6e5c9149d1b7c5.js?ver=1b7c5 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qQo1SgvUK%2FjOjbLXAzbU7u%2BKSSpVaeADYDWZVMsfG9OZKWkLt%2F9wgBzQ2c76ndkXynFqoS4FrupMA1XG%2B1Gf769RrfkDugKP4F2dfh3MKbEunq7fdCk1ey3TnsFCLXlEoa2g\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72e6d253ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1384,"size_decoded":1302,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (386)","md5":"3ce9821c0f44758274d2065393107fa4","sha1":"fee03512384094f297bea2a5f6a1eab16c176b5b","sha256":"66aed13ee7180a479daeb082fdc9a11e214a2da6bf4a1020f5ff3c750fafa8d6","sha512":"46201f5350d073cc4a82b1691cefcbab6e12de897ff05bdc39dc869d02191b67e46ea997da9b0618b902a4ca3e31f42675d5fc08b56677fe4aa790c4d8101cf1","ssdeep":"","tlshash":"342104bcb7a12d5592d310b0887a6911939b56d5c304a85cdb594aa52cecb0932bf71c","first_seen":"2026-09-15T18:30:44.551819Z","last_seen":"2026-09-15T18:33:40.561169Z","times_seen":2,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2020/10/ekspresy-do-kawy.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.202Z","timestamp":1789497162202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2020/10/ekspresy-do-kawy.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b72fee313ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"591f-6140586e-a569cc6c7d971ff6;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 14 Sep 2021 08:08:14 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xHQaVpXwfoxNrmzUkMAM9zJueKy84X3gtAz8ZjSLyz%2FIpGIqg%2BqkT1vKYIZpe%2Bhpa5a0NWlo2NlSYG9%2FVYn83pyQuoeX3I5HUQeA6aFYw5H2vm8GGge8VDzpREnoHYGMEJzzHs4xXtPaWjUy0A%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22815\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22815,"size_decoded":23652,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 423x199, components 3","md5":"d692fcad587cd04adc683ac7b2c85eca","sha1":"7852076e0db8995aa58d4b5002f4461f6efd2ca3","sha256":"e17908eb06c173c255365d86293abfc58818734d8277a637fa55bb860287fce9","sha512":"81b2f4e72368b536de63c30644e20759a9ac24ccc453c810a3a4bd09d858ecdf2a2e9d80f6f40c85c54588cc891a419c30e4b04b61fc924e36e8d0051d2b53d0","ssdeep":"384:BYNg7AqMqNaf+sB6TkXjT88ZT3jfak5nvVYifVboGMaYRDBZcQ6h+OG:BYyvMWaWskT6j48dltVbIaHh+b","tlshash":"1aa2cf3f4f26e1dec621df38498139e752a5b75b6340eb1a90647e2275a82c3d2fb250","first_seen":"2026-09-15T18:30:44.836011Z","last_seen":"2026-09-15T18:33:40.56181Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/12/fresco-dystr.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.210Z","timestamp":1789497162210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/fresco-dystr.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72fee403ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"2938-6759b1df-90c0e0572191569;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 11 Dec 2024 15:38:07 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eKJa2Na0dqoqFzOCyWWF3ZNKLKyrwHDU7N60mTA9eJgUtDrU2IABt5LdwMu8YO7r%2FQuso1W1Zhw258aZzYjGVMr8sf3Jt%2FpiHF3RyDgnq5xiUZrqpSTvqxzbvVA8OegSZuUwPK13eHYN%2FczyLQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10552\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10552,"size_decoded":11386,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bf98864a93eb5fb18bcbb1dd91b94026","sha1":"7e51d26fa69423157a95eae447bbf59ad5ab2262","sha256":"e0b90300aefb0038544e02dbadc9b8b613d5d1972b6b5cc5963154141c365981","sha512":"76c9d6b7d69cc36145b7afbc5825628bb14fa98ea2075e0dc1a8e6317a27f5f2c4c7a0af1a9dbab0e6fb50a7a6db3ded8e06e62a7b5d5847a9c4312ef3267456","ssdeep":"192:U1vltxo6QYMudgBwDVnWMr+k0Bo3wipApOtoASSlr:UR4YMDgc1je3wgGOt4Q","tlshash":"7922c046a6972ffd3496ebd221b1bd7b0508397faa55127ddbc46814ec839e320c198c","first_seen":"2026-09-15T18:30:44.816868Z","last_seen":"2026-09-15T18:33:40.56244Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/11/franke_logo.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.297Z","timestamp":1789497162297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/franke_logo.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b7306eaa3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"364-67498304-d9b09be10555bac6;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Fri, 29 Nov 2024 09:01:56 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P6%2BYRFqy9ThWbHXeDJHKRjLrSNXKZYRnq1U%2FXh2mCfRxfI1b2st477iOG8Q7uWasoMbywhjwKEIb40O1x0HFE3KQygvnHZGJ3LgiFzye0fRZEchtBTMpmgo2%2B4mOyPMIpO6HgvZBDIs%2BZXmPRw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 868\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":868,"size_decoded":1701,"mime_type":"image/png","magic":"PNG image data, 188 x 61, 8-bit colormap, non-interlaced","md5":"d44b1baf9285a44cac2d0dd2fc1794bc","sha1":"097bd92e92df675068e00db70206535027d7dde2","sha256":"f7bdef4ce2d9e645325589e12712346c4f3f850845bdeebeb57bcf27db446502","sha512":"3feaaf66abefd1a942e37e93b191e85b798f36bfb0697ee8081b881c764e68eb5d62a44b5db624b3bae1e03cb57c20e13499680f7250033c7354e2ec51621da6","ssdeep":"","tlshash":"d0116730ef6ed76d40821376c5b5d8149665d3034c1612f4a2850a6446ab328c4e29e1","first_seen":"2026-09-15T18:30:44.469048Z","last_seen":"2026-09-15T18:33:40.563072Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/11/Logo_caffe_Corsini.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.310Z","timestamp":1789497162310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/Logo_caffe_Corsini.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b730bf013ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"231b-67498065-59f868ece3d1da68;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Fri, 29 Nov 2024 08:50:45 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VeO6YBD96cTxEn1q0qgs2j1Ub7S7PTXWSqVrt16biIDiAyYonphMN9pxI8YtYAF4siTKqYQlO9uzGk7be6fZTVzt6Ri98nStj5JFp0QBshk%2FEP5RxfYLlzbemZva%2B6MF2FqP785QiIPqWvjKFg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8987\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8987,"size_decoded":9818,"mime_type":"image/png","magic":"PNG image data, 120 x 61, 8-bit/color RGBA, non-interlaced","md5":"8030633f882168663565d7da2ac5ca71","sha1":"c1c33a7a86c5afa242b37d9d8b972d1ade680964","sha256":"4cd5d308990afd8b5de4dc37f2b0d7f944f58950d23bfe97c6d3699ba46000ea","sha512":"30e5783fafd777a443fd95e7472204b80d20ae7ff21bf9c95d52949437ee40ccc9e1536d928f22be07a052c0d0fbfc75cbfffa1062245e7e80c71efd8120c6ea","ssdeep":"192:JCX+w9hUMRwlsSyknsuc/Nl861P5qgWUgI2KivEC1itBIacmase:Ix2hxnsP/vtr7aKm1GnS","tlshash":"9402aeb8e85188702a99af4e31d622d31bbb17949fc474423cf70d06ea521f8cde118b","first_seen":"2026-09-15T18:30:44.621111Z","last_seen":"2026-09-15T18:33:40.563799Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/plugins/yith-woocommerce-badge-management-premium/assets/fonts/open-sans/open-sans-v27-latin-ext_latin-regular.woff2","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.594Z","timestamp":1789497161594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/plugins/yith-woocommerce-badge-management-premium/assets/fonts/open-sans/open-sans-v27-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 15 Sep 2026 18:32:41 GMT\r\ncontent-type: font/woff2\r\ncf-ray: a3b9b72c5c1590dc-CPH\r\ncf-cache-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 204\r\ncache-control: public, max-age=691200\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h5plOGLTLeXC27IP%2FEHVtSIIxgAF5YLmPy0VlFjt3IEAFng7cH2%2FGyblKvHoSpTqPvn9fMHtKkeGNuyJ2iWKqI9uy%2FENrPdnKu8sZoFu683kRiZkQfD%2FuV91GuulQrQk0377dgpJ1L18NEyYCA%3D%3D\"}]}\r\nexpires: Wed, 23 Sep 2026 18:29:17 GMT\r\nlast-modified: Tue, 17 Feb 2026 11:34:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5650-69945245-ae702a19c8fa59c8;br\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":22096,"size_decoded":22884,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22096, version 1.0","md5":"fb0d7167b94a12e75eb29711fd8e8ac5","sha1":"278521ad7d168e8049a964ac83934d8da9d3b881","sha256":"6849c2f6dd45325e6d5761c53db3dd6ecf99158e9cf1eb3b4e35f7e4025cb5c0","sha512":"801aa941fab808108ac615905e1d70a01bcdb5783dff57162df319e399e2e4223bdae9a6791fb31d7acd385f12ac45c4217ee9c76947c21f91d038181753fe92","ssdeep":"384:8dGdgFa9B2Alfk0jERqrxucnIr4NeJ293M3dm1Q2yIw7EsiIY8DM8U0kZylPEh2:8dGKcwAlf3prAcnLNL63dmRy17EsiIYe","tlshash":"53a2e15a4007ec1899107e3233fb7755f410483ad649ea6a3aca9ecf8dcb68442b6e5c","first_seen":"2023-04-06T21:42:41Z","last_seen":"2026-09-15T18:33:40.564386Z","times_seen":384,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/b221db4f2d773baa13807c4a4b343b46.js?ver=43b46","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.983Z","timestamp":1789497161983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/b221db4f2d773baa13807c4a4b343b46.js?ver=43b46 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BOryKAzUK7XgY85glDsvryA73Vxi9hfRghZ%2BMoX4HDaQcnio%2BISVYTNVuzHW9N%2B8l5EfDkOT7sTfKolmu7h1XN0Uk425q59DsQfKVXofM1d40cHTF56U%2B6zOZ%2Fv6Eg4g1ihO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72e7d383ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1220,"size_decoded":1181,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1218)","md5":"00362b089c35a67bb58cb631388641a4","sha1":"128de708b6afb80a8dbd538be54b034ded9a7bb7","sha256":"7496312df23937240a33bf29e54f57835f49c07f974bf0b5b301cf82d4363270","sha512":"f935e2fd01e1931a465d9e124fdb3246477e1ffeb3b0f437965c949793a6a011902d03419d88feec61264f7b5664f2ef4446f794f2fad84c02d250da12cfaf91","ssdeep":"","tlshash":"ea2104fa3421687609af150db5bed3ca797051a0aa0b7882c57cd4ad0131edf5485eae","first_seen":"2025-06-23T04:04:48.631251Z","last_seen":"2026-09-15T18:33:40.565247Z","times_seen":22,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/d6a3a4c6f28351acaa331dcea2e12a20.js?ver=12a20","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.997Z","timestamp":1789497161997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/d6a3a4c6f28351acaa331dcea2e12a20.js?ver=12a20 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BVldOWDor8p%2B3cP5rFBqLuiLTtZT8VJNjS4SXLlDX3%2Fix2sUwdFCl4g9n02m4rPhVyt7N8C3mJc4ORCqdMKS2HhlHNAeSOdVmkCSAKrEm79Z6YbPz9aKMjJh89SUcZbNulxg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72e8d4d3ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20218,"size_decoded":8519,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087)","md5":"0c36a0145b06f33ec83ed96b75dc5bc0","sha1":"4a68aa6165d392494a3826c8737e3955d1735d62","sha256":"6562c065727f5ecbbca42e74d7fa8ee4e42158c0a534ac8939312e9b816f02d3","sha512":"614946bc4d43177b038e56defbf4fe3959834a7a2f87697f0abca7b4ab2a26a46ea68a7cdda88f2cf7b398e21971e2b353473e7706bf617d8457411ec164bced","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmsc:lPBIt8I5h5t1qkOLCMsc","tlshash":"23921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T14:00:10Z","last_seen":"2026-09-15T18:33:40.565912Z","times_seen":694,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/877fbca461ed71bc8bac0bf6f92faa1c.js?ver=faa1c","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.119Z","timestamp":1789497162119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/877fbca461ed71bc8bac0bf6f92faa1c.js?ver=faa1c HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=InzMvqZqJ%2BNC5fdghZEm0Ibj80A%2BbU76vP2eClcnCHOIMIZ72gDke14lbzUaITe9YBkuai73SfvqxSuZqQ5DhfwTGeX4PfxSdbO7Tx2UppUCPozuKnifYhLeLBpt7yBIIZKn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f4dd43ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22854,"size_decoded":7617,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22852)","md5":"0cfeb660f1bb34a02ba7052b055bae55","sha1":"1185b652b1757e49a8b34f265c88651fcf678e75","sha256":"3264abc0e2c42d073d3dcc597e0050e3a2727ffbb37c74c42574ece0686247ea","sha512":"510147b8eb2e9f821f5f67c2fb3610a85d7982bec97c0cb990b4cab74e7728705a556999a1ea974a33de43d6f06abf4df480b4354826a8bf27b2eca634f70df1","ssdeep":"192:QxscwJLr8s/xD/3bClMgD0y4oiB7TrToqv7KUN7KUgWv0y1N+cymA86nuKhuBj9u:rxX83mXZ7KUN7KUPvF1cyASKhhBr5","tlshash":"c6a20a8eb7c6b3110747707d932fac05557c9ca2a645c4aaf5709888ed34298a273ffe","first_seen":"2025-07-07T17:47:21.449678Z","last_seen":"2026-09-15T18:33:40.566654Z","times_seen":10,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwaPGR_p.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:43.119Z","timestamp":1789497163119,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwaPGR_p.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kawawbiurze.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 5552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 12 Sep 2026 03:38:41 GMT\r\nexpires: Sun, 12 Sep 2027 03:38:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 312842\r\nlast-modified: Mon, 15 Sep 2025 17:11:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5552,"size_decoded":6384,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5552, version 1.0","md5":"33c906549bd61edf700e9a28132f25f8","sha1":"30128ef02a089c98139c978a2a0cedaadd634dbe","sha256":"3a5797f440bc67b59830cad81e59a71011e35cb45ed7f747b61a69b0a9b0d6ae","sha512":"dc4a63153cec46714504239de7184f87585c5805498300c8d1ba066053135ca04895f1484e739ee3fc492baba6920b5686e40a05ade1b962e5113a9635013503","ssdeep":"96:tg4V29KoaW+ekf+c3aIw2Lp/HwoGccbVjNRFRf7g/v/88V6PnW4+Kydey7kh:tnKKovjHULVHwMcbtFR+v082njyPg","tlshash":"c6b1ae0c7d929cebf5ac14792c508c34199b5eac8f5ee94c8c860c2a02e25dd1e0e7be","first_seen":"2025-09-17T01:22:23.26484Z","last_seen":"2026-09-15T18:37:39.777803Z","times_seen":3970,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/238a9ed5b549652066133cc6beef36f2.js?ver=f36f2","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.148Z","timestamp":1789497162148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/238a9ed5b549652066133cc6beef36f2.js?ver=f36f2 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=411y7EabjwG5d69ix5UzW6rQ8XXwHFBl6Pz%2B08AQM%2BybLejUVoZbMJ8469r4K%2FKYLQZ0L6X97R0q3NViG%2FOpz2pdTFBIv%2FThvmAMmUa3veUkdXIf6gvTa1rWc2i8xfaRI9hg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f9e013ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15317,"size_decoded":5704,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15315)","md5":"bb29c69eae002e711d327d8cf3199ae7","sha1":"e674dfaf3fdcafb985fa55940c5cbfbc1871cacf","sha256":"575c0f9a2c3ba67a9dd2deb1b0c9f6f1be9a31f97a2c17301cdf1ad16400d7e4","sha512":"77d13048b579e20be50b901dd363e6da2f654872385f6a2e5ab84971adf0c9f5935d403141106c74e0128b2d114a8142d86dd24c701ebf07e8faeb571f1a1671","ssdeep":"384:1wNWSiRVRS4tdanZkYH5FL736ePkPakFW:qNdi7anPH5FL736ePkPe","tlshash":"a162e945756050358aa111ac283b018f613adc3aa6f46834ef18e4ae387cede50fbb7d","first_seen":"2024-06-22T15:32:55Z","last_seen":"2026-09-15T18:33:40.567632Z","times_seen":4240,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/02/kawa-kolejne-500-4-450x450.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.231Z","timestamp":1789497162231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/kawa-kolejne-500-4-450x450.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b7301e613ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"18d18-6a7ec292-4054f1144f2ed870;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Fri, 14 Aug 2026 07:24:02 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xtTB8X1Vd8wbGOKu3O2v6SX40YMK%2B33KRa3%2BmY1JmYN5FuS7qaqtXM5RFwn5b9Q6d%2Blvgd6lJKY0r4H%2FPdH7sNksEUHm4OzWlPBg60w4VBCu%2FqfmaxXXNmi0p%2F0FB72nP2SZ6UOBqOitasMd5g%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 101656\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101656,"size_decoded":102498,"mime_type":"image/png","magic":"PNG image data, 450 x 450, 8-bit/color RGB, non-interlaced","md5":"e7907bc1a463ff499360645d0b825d55","sha1":"5d8b1fc81e14e220f33bf56a087da7bcf1d30094","sha256":"63675444c8824ce936a43182d6b8d718d99f7f590997f15a793c1c0771bc9df2","sha512":"3d263c3c733e0f2d6e6891f1ba22dffb23ee885d0ad7e8745f798de83791b135275b2c0e7a0ec2804480a03d00daf95a47b6fc32cd018dd0758353668f3dc272","ssdeep":"3072:L2fSEcP4MBgXYkng/88gW1O+xeYoVC0BxM8AR7J:uS5PjBgoW88XW1O+wDVC0b4J","tlshash":"a4a3121fed00fce6cf15a8355a45c8ec5e6faee8ce5e2ad184602c5ae7914e800177b2","first_seen":"2026-09-15T18:30:44.443148Z","last_seen":"2026-09-15T18:33:40.568158Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2018/03/tel.png.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.046Z","timestamp":1789497162046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/tel.png.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72edd733ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 381905\r\ncache-control: public, max-age=691200\r\netag: \"5a0-69f9e1a7-48d14b8ab512f7a1;;;\"\r\nexpires: Sat, 19 Sep 2026 08:27:36 GMT\r\nlast-modified: Tue, 05 May 2026 12:25:11 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2BVfsRO1tETRpERZZii50hmtDJvKgJ%2BbRay6g46Gkd29KxCsl%2FcxA8uTWk%2FOkgF%2BlmkLyWPA4gVtEE5mJibwFkKI5Qw3Y0tclA9K%2FJvA93GMDeoamVOfGqg6x%2FBHdgIRRgnSRHh5RzgdkXjk%2Bg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1440\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1440,"size_decoded":2286,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5b4a45c4e65ef219724cf6755ac757d7","sha1":"1da72e0200abbe3668120b62af71dfbb8f87e5cf","sha256":"ffa682fdfd9830ce5036a1c01b97d0b07f7b2cd56086e072b89c3f115850c9aa","sha512":"d1f394101f1f86737e91b754320142ba02a8c381f2f240ca64794205ad0376df07a052f663ce6df007416d701bae58822cff5e876da03afea4bb424bb2833070","ssdeep":"","tlshash":"3621c8bb6b11cb40e5e156bc38e63711c748be110b60e2d3a345094b8fc06c0adbc5e6","first_seen":"2026-09-15T18:30:44.468143Z","last_seen":"2026-09-15T18:33:40.568717Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/03/szklanki-4-scaled-1.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.214Z","timestamp":1789497162214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/szklanki-4-scaled-1.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b72ffe443ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 130092\r\ncache-control: public, max-age=691200\r\netag: \"3b16c-69bd5646-3fb7597e0c071775;;;\"\r\nexpires: Tue, 22 Sep 2026 06:24:29 GMT\r\nlast-modified: Fri, 20 Mar 2026 14:14:30 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1mVDtNq2T%2FtOLr%2BDJM97TEIvhR%2BlhoTa1LHJBRJibAzjlvFvYSr1K7gITmT1eAa0oNlsV4hi3nrGR44p7pUvSoK9hVW%2B5emHVQgdMpvviWvbbukrY1CUxkQ2YzBCQ8P3vW%2By3NZ2A2zEqYDIzQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 242028\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":242028,"size_decoded":242872,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 2560x2560, components 3","md5":"3bc1a0e841fdefadf5dfb24784aa758d","sha1":"ca2c542401a8a381d0f556a336fad76fac317647","sha256":"f61efd43bf95e8c688b2e760965f989978102af8f42e5168fe76cdbc9c5469ed","sha512":"fc30ea6de2bd320101b9907d9b631fb136b80d28f94cd7d00776636f903c5ad1bb60eebde1bfda50e1ca21f70d7316631fe61e6d6002f99fb1769c8dabd49fcc","ssdeep":"6144:3T8F8uHw8T5GRyY7nd2jrVz5eRHpUFfIRD:3T8Fnw8I2jrV98aFQRD","tlshash":"24341275fa0d48a2f68ca77729e24f01443d7451a812d912314e4d1b6f3af8b7e7f486","first_seen":"2026-09-15T18:30:44.806736Z","last_seen":"2026-09-15T18:33:40.569354Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/03/szklanki-5-scaled-1.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.216Z","timestamp":1789497162216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/szklanki-5-scaled-1.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b72ffe453ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 130092\r\ncache-control: public, max-age=691200\r\netag: \"38e9c-69bd5647-406354910281b856;;;\"\r\nexpires: Tue, 22 Sep 2026 06:24:29 GMT\r\nlast-modified: Fri, 20 Mar 2026 14:14:31 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fC8hP6iIp2uxiIFtBhcTY%2B%2FqIw7wWNjSZBrJokIzWbiFXjtFscqxjUB1CYz1rBO7BpitEzQbzTGqlMxheTB7iDEmLc09pIcuJ5L%2FeGlDsJHv5niB6JKGzz2OClji3WAt5if6HRVV4hg8wGtkQQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 233116\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":233116,"size_decoded":233956,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 2560x2560, components 3","md5":"f786aff7a370d47a501ba0d16424adfc","sha1":"1af959c8eeee58e324e3fcef9b5d4e32ac88cec4","sha256":"9214353402627cbe05cbe18961d76431afbf63b6034c87949908be4c1d9b9681","sha512":"fb99e54027e0cf14ab9429ce540150711a275da2e4bb4bb46e637c5ed48106b206932364467d9f8c76b0d5443ab88386c148c5116b8b13abe6264ce8f7bd9090","ssdeep":"3072:w8jBlwydg0TqCZe2qm2lwk54/3SfzquuqnG8GnMXl6kZAEtEWfolkOiK7KBWh6Zu:8yJTqGqmCVZjnHG+dAEKWQ6I7KBWhKu","tlshash":"b0341268a1d1f24efa609b75c6cde7810443068763aa24cc76bcfec1278a7e06d75793","first_seen":"2026-09-15T18:30:44.716087Z","last_seen":"2026-09-15T18:33:40.569902Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/07/dzierzawa-umowa-495x384.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.286Z","timestamp":1789497162286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/dzierzawa-umowa-495x384.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b7305ea23ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 43367\r\ncache-control: public, max-age=691200\r\netag: \"1372c-6a8313a1-71f22ed63bef4e48;;;\"\r\nexpires: Wed, 23 Sep 2026 06:29:54 GMT\r\nlast-modified: Mon, 17 Aug 2026 13:58:57 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RU48vVYMQvru%2BnD833Wk0YIRqwBoDaV1Lm0yQAgNBIbF3I1RaJ2UO9EOBAbar6wcNWj34upAn02SzCtD%2F9jNEsUfCEoAdeX4f2RoiTFuAr0hPlHgo3n6NOqswHwAJuXVxnSTSgK57MTcb72Whg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 79660\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":79660,"size_decoded":80496,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c29492be89f651ef4ff72fbf6885d836","sha1":"682a26f37de97ef4cafbfc055e86f5795c47ac96","sha256":"366a7cea2b3ca9d908c218c18425f3a775b16bcfd5a37ce476fef98e73e86f58","sha512":"661b5327b177a807861f5123a2050f48dd0bd922c599e1123e68a5370fae710f2ba2ba9bff45b52336c338336d3827a05d491418efa76c5317a18024bd11e09b","ssdeep":"1536:cXw/k6+zYZ0JxfSzQPfR1MWI5R2wi6wRzGmDAiAGaYO4UP/m:cXMk6T8hsQnXBIxaRzGmDAchUP+","tlshash":"45731255fab0634ff11927d6426739086cd596a8edd1ceac49fb1ccb02e6e07d0b28e1","first_seen":"2026-09-15T18:30:44.632547Z","last_seen":"2026-09-15T18:33:40.570451Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/plugins/yith-woocommerce-badge-management-premium/assets/fonts/open-sans/open-sans-v27-latin-ext_latin-regular.woff2","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.826Z","timestamp":1789497162826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/plugins/yith-woocommerce-badge-management-premium/assets/fonts/open-sans/open-sans-v27-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/wp-content/litespeed/css/f21b75b4cd577831db66fb212b893289.css?ver=79359\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rT3k8BzXIZr5c%2FxEG1khY1jsSAdFiXoWXb8yB5v%2F7ewYhXcl6j%2FUJos7eQxav%2F0vT7%2FHghum7qfXzR0s57ziu2bo5X3v%2B6HzBc7yEtNqB9Anf2N2ZWXkiraXthKpFX%2B8Ogo4kFSsCPmAJFFq%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: font/woff2\r\netag: W/\"5650-69945245-ae702a19c8fa59c8;br\"\r\ncf-ray: a3b9b733b8923ca8-CPH\r\ncf-cache-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 205\r\ncache-control: public, max-age=691200\r\npriority: u=3,i=?0\r\nx-turbo-charged-by: LiteSpeed\r\nexpires: Wed, 23 Sep 2026 18:29:17 GMT\r\nlast-modified: Tue, 17 Feb 2026 11:34:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22096,"size_decoded":22917,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22096, version 1.0","md5":"fb0d7167b94a12e75eb29711fd8e8ac5","sha1":"278521ad7d168e8049a964ac83934d8da9d3b881","sha256":"6849c2f6dd45325e6d5761c53db3dd6ecf99158e9cf1eb3b4e35f7e4025cb5c0","sha512":"801aa941fab808108ac615905e1d70a01bcdb5783dff57162df319e399e2e4223bdae9a6791fb31d7acd385f12ac45c4217ee9c76947c21f91d038181753fe92","ssdeep":"384:8dGdgFa9B2Alfk0jERqrxucnIr4NeJ293M3dm1Q2yIw7EsiIY8DM8U0kZylPEh2:8dGKcwAlf3prAcnLNL63dmRy17EsiIYe","tlshash":"53a2e15a4007ec1899107e3233fb7755f410483ad649ea6a3aca9ecf8dcb68442b6e5c","first_seen":"2023-04-06T21:42:41Z","last_seen":"2026-09-15T18:33:40.564386Z","times_seen":384,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.ceneo.pl/shops/Widget/Content?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026contentId=ceneo-widget-small","fqdn":"ssl.ceneo.pl","domain":"ceneo.pl","tld":"pl"},"ip":{"addr":"5.134.209.153","port":443,"asn":42656,"as":"Allegro sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.897Z","timestamp":1789497161897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ceneo.pl","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 16 Apr 2026 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:CC:D3:01:00:A0:05:79:8E:68:CE:35:3A:AC:33:47:4C:C9:EF:60","sha256":"16:C7:26:1E:69:F2:8A:15:1C:08:E0:A4:C2:5C:2A:3F:0E:5E:F6:20:91:A4:C7:2F:A4:AF:9D:83:F6:0B:50:F4"}}},"request":{"raw":"GET /shops/Widget/Content?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026contentId=ceneo-widget-small HTTP/1.1\r\nHost: ssl.ceneo.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public,max-age=600\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=10886400; includeSubDomains; preload\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; img-src * data:\r\ndate: Tue, 15 Sep 2026 18:32:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T20:51:43.703029Z","times_seen":18482263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/08/Coffix1000-big.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.066Z","timestamp":1789497162066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/Coffix1000-big.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b72efd873ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"368f8-6a8bf3da-43039c0c1ba4861c;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Mon, 24 Aug 2026 07:33:46 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hLqu4KaLFutZvqKfKpO2Qwammp0i5n8Dt2Gitncs7sNhA5sxBEJD4lqHkjocmeFqY2dqJ0X5fewyDsVJtpiTPXGXwlYJHWf4cdj4P%2Bt1LGrb1sJ3yLBTAZ3ws7HWAQB%2FfMObgxGx77%2BYeEPEzg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 223480\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":223480,"size_decoded":224317,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.0 (Windows), datetime=2026:08:20 20:44:59], baseline, precision 8, 2560x430, components 3","md5":"10140a07d30da775fb86589a3f6ddb87","sha1":"b028bf3f440b62c1bdea525b7a0e9b16816ab256","sha256":"588c8ab05284d3b16e0ba3c706a235e1f598d8ea1fbceb5540926af831a160f6","sha512":"5000f5ceb861c18f098d76b34a05e343f13edca8467562b50180c4e05f22bed4d5573c8826254792c792eb0560fb1d9db12e75fd6aec24ebc2aa7d199d5460f0","ssdeep":"6144:be/ixTAlnhmhs4GRuxaI7PRryE72+/QJ/IxeWAo3Vv:bekTUBRu90EK+/NeJo3J","tlshash":"32248a355f698a918dd73e37a644e9b583360fd80b4b37e2be3c365ca79aa14042143f","first_seen":"2026-09-15T18:30:44.643637Z","last_seen":"2026-09-15T18:33:40.570977Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2020/12/DSC8592-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.258Z","timestamp":1789497162258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/DSC8592-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e973ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 130092\r\ncache-control: public, max-age=691200\r\netag: \"e95c-69b011d2-4db041f63d675b8;;;\"\r\nexpires: Tue, 22 Sep 2026 06:24:29 GMT\r\nlast-modified: Tue, 10 Mar 2026 12:42:58 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mc%2FKPCGw3GKQv9Qp8m7aorGttBmH%2Fgqa2cjaXg7cEICUSZUSxBrk7RZQi1k2bh6E%2FObOCUpJ93LwbyQcLp0ej0hvGLSMVLNm8mLTJ4tRfJsV%2FUNSxeCZMd9RwQOcpzj9Sbx2cw7CpxuV085pTQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 59740\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":59740,"size_decoded":60579,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, copyright=Kasia Fiszer], baseline, precision 8, 450x450, components 3","md5":"3803e84e431cbe762f6415a9f9e54e08","sha1":"23fa7a6261b89569ae958e797fa798b0ba8531ea","sha256":"a754f18ab4f318a59b890512f5e36dfe238a2bab12514de051c57e0160806a14","sha512":"bb97d62772989af80a1d635230215789b1f084ac6047541af7c9abf3f28f72f3c863b4eb8b94c07e56a484fd1540db28febf56c33ecb7f8adcd54a83a3e9fc6e","ssdeep":"1536:Q6kEvnuxY3P5epJFU9CvyGBNH3dvaZHy383NcPI4ZPI:ZjnUY3o5UhcNYHyM2ASPI","tlshash":"8c43353e4b76a51fc68f2c60c5b10bcb837b1702c96a5531e594d6d3a373b89a362d0e","first_seen":"2026-09-15T18:30:44.791019Z","last_seen":"2026-09-15T18:33:40.571556Z","times_seen":2,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/fc517bab7523f91089b76d23995feb4a.js?ver=feb4a","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.984Z","timestamp":1789497161984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/fc517bab7523f91089b76d23995feb4a.js?ver=feb4a HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K2Bl944dAA4ImAOWQl3v7ld2Cv1lZe7GQov%2BxHWIhy2KcNOqRek%2FAwmim71JUNJvY342j4VYkaEqNyjN0MLEVTOnrqhhwVxrQTMG0s9YXP0ofIAOynKztxD8zTfbQOOBkMwF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3b9b72e7d3a3ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74622,"size_decoded":23013,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64065)","md5":"ec85b46fcec26d5f1c269f079750dfa6","sha1":"9ab9f6bcf2a6561d5f8a39b8a29b4ce1c90b084f","sha256":"ee5458cd3fc6f7013d6db1ea068ab4fc712913308165045bc060bc231e26a155","sha512":"360b4d5541fd5b1d9152a28a3fbae08aa68a29bdaedf4593557e120e0b39b77b1f07f9e1ea25bda6c9a376086c2ea39d27090a7bebcc0cebb3f595041c4d423f","ssdeep":"768:joEhmCqvnMMuYfxC8zIR73+VqlGBokOl/Ne1Xn6T1f20xBc3XL3Nl+PvnPFnr5RF:f6xzIRHkOZ8q+NlYfPspU2xJj0","tlshash":"6d73a44cba53723542af20e2256f150d2237bb3e600b9268b428cce95eb9d55735bf3d","first_seen":"2023-11-04T15:09:14Z","last_seen":"2026-09-15T18:33:40.57212Z","times_seen":199,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/f4c3ecf52f1b3b879a4fa956081ce604.js?ver=ce604","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.085Z","timestamp":1789497162085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/f4c3ecf52f1b3b879a4fa956081ce604.js?ver=ce604 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mCQE79f55HmRU5xmXCAamCjWh%2B8cmvahXbFeycawYYE7uCuUv5y7NKE%2FNBnioiH%2BrgtoRAIdgyIW%2BeR4Ce6ojrBQya3I4%2FgJ7jJ1GWSalZ0dqcNCwF69EEuy1KCuYZKf2onW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f1da33ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90560,"size_decoded":33908,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65473)","md5":"e4aca2deb5f96acb63f1855e82daeb88","sha1":"61fca6bdd2a1561d814bdbdbc2fe6c2be8fcebf2","sha256":"6a7df9326d40afca09ca7b06e6a1cd59b34a588f9503be8b3317649d055a3cb7","sha512":"86a7492d23207eb27ea8bffde03a088b98a76df3bbb5671881780787ab0ddc61825db26670dfaefc523cc6126a6bb8600c0ae450cb536fe2ae1c1d358d300ab6","ssdeep":"1536:6l7RLi9gxGUs+4Ezy4bx60BWTkkWyAuFX18bJ5pDVGf9oOcEBMjsBj0yGHIka/O8:6Z45XqbJ5TlBryitYgPS","tlshash":"63930addb2cab06347a770ba40bf550bf2361999684d4400f125e4e9bc78b4a927bf3d","first_seen":"2026-09-15T18:30:44.837625Z","last_seen":"2026-09-15T18:33:40.572872Z","times_seen":2,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/plugins/woo-fly-cart/assets/perfect-scrollbar/js/perfect-scrollbar.jquery.min.js","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.108Z","timestamp":1789497162108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/plugins/woo-fly-cart/assets/perfect-scrollbar/js/perfect-scrollbar.jquery.min.js HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HmZbSlfPDUwHykbWraGhPHEDo6fvmfLIZ3%2BlliFwB3duQiacKHAQ%2B8PJGu8Ok92%2FJgsiWTuhqyMldoCaG03ICWNzxM7QdyX%2Bp9YgjH2IyP4oaVGcg%2Fmsa9Ut9h7Fmo%2BMTsvy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f4dcc3ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25332,"size_decoded":7697,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25300)","md5":"87583eea85683b0972c2e0f6068615e8","sha1":"d06d4edb1752c34bcc9d73ac926dd6068b6455e4","sha256":"52021253d22a3ebd3cde96cb996eae15dba9aae3218b87d464f80226dcb9faae","sha512":"161b71c0349d3faefd1c0b6b7a505da97a1294fdb517189d8ef14793f89f9beb497ccfa333fc8bd4119a1c18225540d38e85d6a6bfc1d2c554835d8f1bace6f2","ssdeep":"384:RCnffouNtwIXhqsXmcRxo3kfZNUF/UF1xcjhUrAXo2G2nyvuJisJv4HRVgyoL3HH:RC4uNtwIYsVAXQ3oLVl","tlshash":"f6b28208b21430a092ff319dd4cf870e71724553b74fa5d0a490dfb8a9b47ba6362b6e","first_seen":"2023-03-07T12:08:24Z","last_seen":"2026-09-15T18:33:40.573422Z","times_seen":2592,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/af534397320ca88b40572dea2d12e698.js?ver=2e698","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.123Z","timestamp":1789497162123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/af534397320ca88b40572dea2d12e698.js?ver=2e698 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BZIY%2BdYdbTPg%2F3GtLQigbRIuN6lgaKtCCpFcCiTpfkpo1ZKaDCYvDytECYl6H7mrxA8QKFOHZSSxoTZLgSLEOCj%2FO1oMga7QzMSxoXx8%2FHm4vNOPiX%2BiF9Ae40OhHcmHXfN9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f5ddb3ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20728,"size_decoded":8577,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20599)","md5":"794c32fbbdfbb488b065b582facea1d6","sha1":"18418401fd9704cb0479a27382bbfd1361a90cb6","sha256":"843abd3b5ed496861416ac80916d30c51f135c92edbbf812ab106306ed07caef","sha512":"6f1925ee2233c0214e65860fa1fcd127a1c009b5802bc3f34db8a344cb8de74c4ec05c445e41ccf12440fc1398b71133a6198bd2eb3845f573360db0406bc357","ssdeep":"384:Kbroi4IJAJW68RddRHXOvC2xQ+n//Y3C9DFvw9z/2s4LN2ZsZw:KQDCMQ+n/rRFo92saNlZw","tlshash":"88921b58f1a3b21783ab75b86c5f240c3b72a626c907c0057659d8e86cfde84a127f3c","first_seen":"2025-01-07T15:38:30.214379Z","last_seen":"2026-09-15T18:33:40.573947Z","times_seen":32,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2025/04/lavazza.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.194Z","timestamp":1789497162194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/lavazza.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72fee383ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"2928-67ed24c5-b489eee46a4d8655;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 02 Apr 2025 11:51:33 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=btY8ZbQzkEKzQaUrugGt1KIklBfJv6X7TTjCEGPsMcx3TeCmpYwrui4QQjz1YLi3zt1IKZ8xJynWYiuOxMI4upYuO4TDEzLFgSgnfWf%2FPP0czZroEDEpVEA9aCDYoccKuwFuMTPBD7%2BzppG9mg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10536\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10536,"size_decoded":11369,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 327x175, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ed3207317d2e860acf6cba4978b14819","sha1":"1864913440e959d82afa9c7157d18acbc5c759a1","sha256":"efbfe91b60a7c47161912e61e4da2039ddf470c2981da2cc0d50263f34685b03","sha512":"59929ccf5218540f6e2c61ec40c27c400d2189305f2f0d710a3d1ce8cfb3fb58aa7520bee0bc3dc66489017d3603c51f1d1158c71a6544223366dc522fd032ce","ssdeep":"192:WvqqfoTQvxyoMXyogzf+1JnLkTVe7NcAxwRQUaL9CK2qG9isIPgfq+N3qhN:WvqquQvxyokgK1JLkTViKAxye9CKOvIH","tlshash":"eb22c17b9003d3c0b32455f7ed17e1663d4bc576ee84a687f1a50025b198345a7cfc11","first_seen":"2026-09-15T18:30:44.638577Z","last_seen":"2026-09-15T18:33:40.574492Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2018/03/Kawa-ziarnista-Lavazza-Qualita-Oro-Arabica-1kg-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.242Z","timestamp":1789497162242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/Kawa-ziarnista-Lavazza-Qualita-Oro-Arabica-1kg-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e883ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"13cf0-69b00d64-7e8f468659b8c3e0;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 10 Mar 2026 12:24:04 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c0UgoL9iHQM98a2qVxDcsgsolrTS3qbnFjmJOxVvKan3zwjwy3x52VozE%2Flr5R5QtKwYxBXhM2bE580XIlkh6xSbdRyxgkIaTV3g2MPevf5CffRRXsf7qxnBuzuGSay87Xr%2BmrNhDOunLGXiEA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 81136\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":81136,"size_decoded":81970,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1], baseline, precision 8, 450x450, components 3","md5":"699a92fc9355fa242a3e804249742fd4","sha1":"2874234af36ef94bd37e57d8531bf6692558ad93","sha256":"862384d5d5b3c0ff60cb13e00ad42e018dd3b99cfddc6b4e3abca2cbf3393205","sha512":"0bcdeeb36ce2dc44e5ba18401847459984f6a936f3518283505781671d695996dfbea7d68711dde4013caed42f0196c35c66f237c60b44f0b941f2383e8823c6","ssdeep":"1536:dnCmPiQcHMdAGF+PdKQ5OG4Bzz/iux+yI208s0SlAoqccn:1CA7tALLOXzqHv8lYN4","tlshash":"6a83f1c647b52a1fbe27e7bab8b5570a70078192e3545365920713a1f28379bc3807fd","first_seen":"2026-09-15T18:30:44.691704Z","last_seen":"2026-09-15T18:33:40.575026Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/04/Baner-nad-wpis-na-bloga_Jak-zrobic-Matche-przepis-495x400.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.288Z","timestamp":1789497162288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/Baner-nad-wpis-na-bloga_Jak-zrobic-Matche-przepis-495x400.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b7306ea53ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 43367\r\ncache-control: public, max-age=691200\r\netag: \"41e2c-69f09cb3-1e5c88eff1a379e0;;;\"\r\nexpires: Wed, 23 Sep 2026 06:29:54 GMT\r\nlast-modified: Tue, 28 Apr 2026 11:40:35 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EwfuGjjzTwHW%2FP1sFm%2F74bB9okoMHmgTEm5cacwST4zbRGSjdgZOX%2FbwyTy76O1Rvf4aGJId7Mbr6DJiU4t8I8Wow5WNKw%2BYuEdpD0LaI1DiAr0%2Bl7f2KP5MANOdIiE6xfT%2FpXhjCe7Kcj9O%2BA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 269868\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":269868,"size_decoded":270715,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"de0f657e8f5ecbd4e9bb209dc840b322","sha1":"35062a13fcc109727d11382719dcd8a1c4c4c2dd","sha256":"377d5e557c29f88546ad321eaf3da1f2d083d274b4171f9bd9ded606e9840dcf","sha512":"0329a8502553e7b5e867c66d58b93988bea34b69dbd817a918706ce12ba13b931252260387e5f7f556352a72834c2b63caebd1141b8d8c99ca82716b0c275a69","ssdeep":"6144:RXumSk/3tMjltFcDrSwxEuk1rDnEfiUJ0LcfW5+4qaent9PzmL4V5e6OSP:qk/dSGFEddkfT45Ot9Pz2a5PTP","tlshash":"eb4423b69ed9d2cb11b5233a3c3fdb5f8a8c9550c256b800a7fb3ec3698d48941542db","first_seen":"2026-09-15T18:30:44.603985Z","last_seen":"2026-09-15T18:33:40.575568Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/2f8d52af5e7f9103e13988711f991a8d.js?ver=91a8d","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.150Z","timestamp":1789497162150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/2f8d52af5e7f9103e13988711f991a8d.js?ver=91a8d HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZA1YqVYg1X8tBHT7sj0wA%2FBgFpJtnK0OVpJS%2BoRlX%2FPd4ksXlEibl61MtQWhPWMN5%2F%2FnuXVB1C2P06%2Bi7IIu1pNhdD9ylJemKBzIwR8lxQH5XLDLOEWxYtHu%2B8gflZ8YtOXa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f9e053ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2441,"size_decoded":1794,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2439)","md5":"6d2eb626147a55b0aac50b528c77f52c","sha1":"964d5180ce85536acc29b91483ce768accf90578","sha256":"5beb63de67d351eace05556208479daf1dd460531af183ae591b134a3c99e1f6","sha512":"b3e6b1a080b10680269aa247c19a2d6455168b603e7462c3c38234500e33974f77ba818d8d35db5845cc07e73a0054cd6c7cca387534de7bad7c60e81131cc42","ssdeep":"","tlshash":"f2518335b001a826c37782d997aba651b335662d760290dca19c8cb43a39c0b7972cbf","first_seen":"2026-02-07T04:48:35.459834Z","last_seen":"2026-09-15T18:33:40.576134Z","times_seen":1431,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2025/04/jura.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.185Z","timestamp":1789497162185,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/jura.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72fee363ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"2352-67ed1d83-dadeed37afdcd195;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 02 Apr 2025 11:20:35 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8NVegMrrdDACeryVu75zhoMBUWYuYukomOz4d5wqTjYaLllBVyxZbiotl6OncEJdpuhZSUTnhXLFB1ahOvZByPXMr%2FUErxZwXFHUqxoP3Vf8ztyN02z%2BuwogsY3EVcc5C3q%2FLBu4uxXLcNByDQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9042\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9042,"size_decoded":9876,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 327x175, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eadc5c521b873c004d5fcec4bcf98f3f","sha1":"9c93334f224ed697eef5ca34fc26fff6fd9ac83e","sha256":"c437ea8c6286447bbe3e014b426e738feb4ab396ce424a9da4c20ab651a3e30a","sha512":"71315fa6423b2cdfdcc8de159a155422ce33139e04ce5c5927acb023810ed4cb1e160f0fa609b16cb1257984d6ede11110eb51a9306a1baab374ffbad0b304ad","ssdeep":"192:EBiiSEceIwOuEPeJobeORPrhY2jnPlr7+8U6xfUwrjfxhU:6PcnVPHbxPrnj1ccQ","tlshash":"7112cf0563cd1d6bb1570c9be812104e9498f92de063a39c6fb310573aa370db9e367d","first_seen":"2026-09-15T18:30:44.636543Z","last_seen":"2026-09-15T18:33:40.576663Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/12/Caffer_Mauro_logo-2.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.306Z","timestamp":1789497162306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/Caffer_Mauro_logo-2.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b7307ec83ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"1ce7-674ef42c-e87e4abe085241e7;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 03 Dec 2024 12:06:04 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2BSk5974z6WIPnGQ0SOGy3nBdR%2BpBqTFGEb7Q4ZW7ZKUa4jUCCZuc4g9u94Mu80Gfn4WLsLQhggidR%2B4DaRYch6ZRX9nde0WluqU4ptuP6TO4j4I3iR65sxVn1kCre4VNTcwyMN%2Ff4KYiL4zKQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7399\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7399,"size_decoded":8234,"mime_type":"image/png","magic":"PNG image data, 177 x 61, 8-bit/color RGB, non-interlaced","md5":"90d0bf403174d34ef68fe9b536dc6cc1","sha1":"b56cdd32214c8c9be9df33a846f15b305a1af2a0","sha256":"259aca71541eda534a81208a7b9650cfb09a8f1b5b99a8a2fe8ad91875451948","sha512":"76ab0be02418247029a20705f09d1ef1385a2ba8dfe37827d3aa2b7ea6aa400384b1abdfcdaf7f8cf82538b200a35ad0c50013f3cd2ac01ef8baa8af73372a9a","ssdeep":"192:9CX+w9hUMRwlxkn651HguEBAZMDLdN9oM:Ux28n651Hg7BAZMDpN9","tlshash":"94e19d9de490ec40545daecc71d6d2633bb71bf0dbaa38013cd6092b65019f6c70e087","first_seen":"2026-09-15T18:30:44.7694Z","last_seen":"2026-09-15T18:33:40.577251Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/11/wmf_logo.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.337Z","timestamp":1789497162337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/wmf_logo.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b730bef93ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"17b3-6749830a-95b61ac9fb698b38;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Fri, 29 Nov 2024 09:02:02 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1a05zBgYWmfoe8sDQdrnOkwvkb%2Bk%2BtxoJ7wSyr7E7gEIlIPxC3rxRWgYYeCqNuGuldJQc9O83jg0BLYa7XzFhmBaU0s4jzhs6MZTt%2BueI0r10Iie0uo92yuTdfBu%2BKQTihZV0%2B6ahZwo8wAWFA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6067\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6067,"size_decoded":6904,"mime_type":"image/png","magic":"PNG image data, 52 x 61, 8-bit/color RGBA, non-interlaced","md5":"2f8169e10ce206bc60a2f56594cfe1a7","sha1":"afa4d34afec19dd1421f053099e5bfe806378d72","sha256":"cea0fcb8b25078d2a8861546de2057084be142948c01058b477461ac9bfb4605","sha512":"41661d10ad866f9e516cbd7798b5acd122601f3f0bcd3d1d75724f41f0db0f8f1137c9c74f4ed18b12add945aecc20225f895daa4fe7c0b2a98c5c63eb3962b9","ssdeep":"96:IXQP55b+2aXCVwt0aWUoUMyEB9Oldx4yFnQfSyknmWIEgePYHTDHgL6EEXrTBhou:IXCX+w9hUMRwlsSyknTYzDy6BXcu","tlshash":"23c17d3af554a8601046fe4c33f6a2d71eb71f99cf95a001bcee4857ba510b8c748056","first_seen":"2026-09-15T18:30:44.730859Z","last_seen":"2026-09-15T18:33:40.577833Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/avia_fonts/type_fonts/open-sans/opensans-regular.ttf","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.823Z","timestamp":1789497162823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/avia_fonts/type_fonts/open-sans/opensans-regular.ttf HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/wp-content/litespeed/css/f21b75b4cd577831db66fb212b893289.css?ver=79359\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: application/x-font-ttf\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b733b8863ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 205\r\ncache-control: public, max-age=691200\r\ncontent-encoding: br\r\netag: \"17aa4-6082e7a6-e53417cbd90248f5;br\"\r\nexpires: Wed, 23 Sep 2026 18:29:17 GMT\r\nlast-modified: Fri, 23 Apr 2021 15:28:38 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VJvUh%2BgNLGrSmr%2FTkemhTnQHMgDy8tAT5xKTCTqv7W2RP0qM%2Bd%2B%2BN1i44B3y1WCzgl%2BcM8z43WavS95FtzWeCwcRFt3rYfuWVp7LbquR%2BW7i22d04WQU0LYkFssyadVZd9aEBO%2FZ%2BNX4TjJ5mw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 56679\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":96932,"size_decoded":57580,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open SansRegular1.10;1ASC;OpenSans-Regu","md5":"3ed9575dcc488c3e3a5bd66620bdf5a4","sha1":"babe8dce93a3e48b6c3c79720a0c048e88dd1fe7","sha256":"037236ed4bf58a85f67074c165d308260fd6be01c86d7df4e79ea16eb273f8c5","sha512":"7ba57687079a7e1d2ac2a64d210753b6014877eeadb6cc4dd86b836f46f7a3b8d34e4350d264f4d7361b1bd4488a1169f0f3cb49a7dcfec0ade9701f4e468416","ssdeep":"1536:rCL26+E8THZqxKuTJlD7qGrIJD5BmurUsb58igg90YiQvnAZ1Bab4XX:rqz+EWaTXD/rIJPdQMjiQvAZvpX","tlshash":"9f933b07d322bf399d1370fbc1520bc45557b844b70ac38f7aca97baa98619cca48b57","first_seen":"2023-04-05T15:50:05Z","last_seen":"2026-09-15T18:33:40.578315Z","times_seen":4934,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.ceneo.pl/shops/Content/img/badges/zo-shield.svg","fqdn":"ssl.ceneo.pl","domain":"ceneo.pl","tld":"pl"},"ip":{"addr":"5.134.209.153","port":443,"asn":42656,"as":"Allegro sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ssl.ceneo.pl/shops/Widget/Content?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026contentId=ceneo-widget-small","date":"2026-09-15T18:32:43.191Z","timestamp":1789497163191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ceneo.pl","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 16 Apr 2026 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:CC:D3:01:00:A0:05:79:8E:68:CE:35:3A:AC:33:47:4C:C9:EF:60","sha256":"16:C7:26:1E:69:F2:8A:15:1C:08:E0:A4:C2:5C:2A:3F:0E:5E:F6:20:91:A4:C7:2F:A4:AF:9D:83:F6:0B:50:F4"}}},"request":{"raw":"GET /shops/Content/img/badges/zo-shield.svg HTTP/1.1\r\nHost: ssl.ceneo.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ssl.ceneo.pl/shops/Widget/Content?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026contentId=ceneo-widget-small\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 1998\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Apr 2026 04:27:48 GMT\r\naccept-ranges: bytes\r\netag: \"1dccd596126fdce\"\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1998,"size_decoded":2214,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7c1f0c7f06c744fb1d841df88ed57cca","sha1":"47fc1075eea82146e805d1753deefb437b41a6c0","sha256":"8ec5fcad3c41e10d3fb4cbee0e0c63e96f267f92f7c9622054bc82219831c2b5","sha512":"29855ae9f7843370773297d61986f90b96f9cfab3d6c9ac38e7639eb155d70f0e37565383042ebefc22a9ab3af959a46b974c504415f34d50ee8df1a01e299b1","ssdeep":"","tlshash":"b941d01a4280e7b9e9b6497c9e5499c2f7a044d3c018d2c0b5bf1063ffaacd4754f65e","first_seen":"2026-04-18T10:07:30.428544Z","last_seen":"2026-09-15T18:33:40.579022Z","times_seen":42,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/07/Rossini_Arabica_it-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.250Z","timestamp":1789497162250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/Rossini_Arabica_it-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e8f3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"15a04-6874c1fd-d8a0f9e40f2fd21a;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Mon, 14 Jul 2025 08:38:21 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CzrtmGfy9fGiG7uIP0empOnd03rXbHVYlMJc3toUkxbmj%2BToqyjwlDQJjT8sARDERLPF1e7lkkofcDCfhabgDDFsHsrEuv%2FrfJ%2F6lh4C%2FObOE9NGVuqeTDYoRH2lMyBZNCJkAPERyHSqDjo3MA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 88580\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":88580,"size_decoded":89418,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.12 (Windows), datetime=2025:07:14 10:23:26], baseline, precision 8, 450x450, components 3","md5":"014b99e027678c6cc82cd6a9dc22db54","sha1":"311adea9d729ddbbd236ec1754e79719af2f7574","sha256":"1cb549f3bb49d839b79e2e395f8e1c4e2c6f0934c68a7ffc4aeefd9dca3816e8","sha512":"243572db5608c15d154dd17a7d0e3c43f4a9630d0b6708f5d5595754f3df8ddf42e95bbe33d7cae110fd65c6905a416550d9cfd8ca88ad3aa99d860c5ec9c082","ssdeep":"1536:b23Z+9wtrqQaQP7Yp9Vtnzh0yudTAnZxnLn07x9obyqBsEFuE/cjY07o9n8:bstWQam7Q9VruyZMPpsf/cZX","tlshash":"de83e032465dce76cce655319c6ab301b6e5caf121c1c096708d2892f7b06e6ff6ca98","first_seen":"2026-09-15T18:30:44.444458Z","last_seen":"2026-09-15T18:33:40.580016Z","times_seen":2,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjxAwXjeu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:43.340Z","timestamp":1789497163340,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjxAwXjeu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kawawbiurze.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 5612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 07:43:48 GMT\r\nexpires: Fri, 10 Sep 2027 07:43:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 470935\r\nlast-modified: Mon, 15 Sep 2025 17:09:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5612,"size_decoded":6444,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5612, version 1.0","md5":"633f8feda2188d767d2396652da17377","sha1":"d35cc70037f82ab61d86f2c4d80685a474821d45","sha256":"8b9fc9737043f88c1a9a7195c27a239bd329cc33d928ffb67736c61ae7a1dbbd","sha512":"edadc35473adc7d3d2b6c0bc04789dc78c7f38c0eccac6f08625738d5c8cfa9203c1d9ef2ee6ce721fabc5a4eba41cd19f47e56dc85ff3bc1f7f0ede2ec5ba0b","ssdeep":"96:iD0G8mpQLE+J8uftoCUdUZ/OGjfSg7uov39XTr9a8dBmhPk7jJ5lpqaAjiv/8qBA:7xXLZ8uVoCUdUFOGjJ7Pv39Pw0MiZ5cB","tlshash":"23c1af36b54e1d4bf74201b8137b823e41c70c621637356dbb16aa9418dcf4161371e7","first_seen":"2025-09-17T03:45:02.002945Z","last_seen":"2026-09-15T18:37:39.781484Z","times_seen":5597,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/784ce96bceeb286faf3b3392dba105ad.js?ver=105ad","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.979Z","timestamp":1789497161979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/784ce96bceeb286faf3b3392dba105ad.js?ver=105ad HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jrtw1AkquRWhpNP%2BxZnmDzOAswnXpq6L3Yh8980KHBHp4lac4WeaJX6pFD%2F0GM3x2ZMczo8BTayRCLE%2BhNzTvDqZLY5Ae0hPs3%2B5%2F4i%2B27KSvzaVslMa5AMiyBDkwIzkhGfn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3b9b72e6d353ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1722,"size_decoded":1465,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1690)","md5":"d8e700054016daeef658a1eb4e7f659a","sha1":"02c7d90c53dd4b7e0798946ef63c0a16703bc4a3","sha256":"4ac68d937e60146e186906ebd9a4c0e0173d9950d1e377ba0ded25e36bf9a4cb","sha512":"d32bb00f2984b9ed7a8553712107c30af814ffd8f480b6e7b1ef9c3fd04335d3c492ca0f86a0dfbc0828164c627ff2fe2109003a67a8e1fbda7238b35ae7bb7f","ssdeep":"","tlshash":"6a31b6d93095a8da06171490463f1207f2f91e27eecd98906264e8f50bb077a01ebf6b","first_seen":"2024-03-29T16:52:43Z","last_seen":"2026-09-15T18:33:40.580632Z","times_seen":4339,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/09/Pera_GranGusto_2pcs-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.273Z","timestamp":1789497162273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/Pera_GranGusto_2pcs-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e8d3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"29206-66ed1b3f-3dbbf2328853dad7;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Fri, 20 Sep 2024 06:50:39 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2BgmksPg2LERaB61pPZLXaTetg26jMqcucVt24a%2F%2F%2BShlnGJ5cfVoD16U9ye4vxGQuwsDJnLmgEt2WDxCLgoyk9JkGyIueQHBieKPDj7yXFR0MsuajSZPGPm1XXyWMP%2FEviOE2UlOutXPvPTIQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 168454\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":168454,"size_decoded":169297,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x450, components 3","md5":"ce4b5c0e2a1fc0ec273e92933f8a5044","sha1":"69621c4d0e2b61b181737d04702d6ed9f0ec4d56","sha256":"586426f0bc5a1491a0dca302009dda20e426e7e9ad8e13fb355d15158b3cdfa9","sha512":"a8f29bde7c52d74ec08e8b14653a27f81d3c413b10cc31bd1ccba33921a4fbeffffed9291bccfa97046c39abb7bf3a2239f291a6c4cc36adf9bb770c64aa7769","ssdeep":"3072:xSur81W/bdUg0V7az4o1aqwgreA5JK8UmkHogdGGd2MF0yGmj9Nb3:P82eL7az4kaqve2ZCo6NTt","tlshash":"54f312715bc3f10cc3d322688abcaa7a27659ac73958f7ed06530a95d2b1f2c09175bc","first_seen":"2026-09-15T18:30:44.668069Z","last_seen":"2026-09-15T18:33:40.58112Z","times_seen":2,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/12/Caffer_Mauro_logo-1.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.317Z","timestamp":1789497162317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/Caffer_Mauro_logo-1.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b730bef83ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"1ce7-674eefa5-e65e64bbb8141a1;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 03 Dec 2024 11:46:45 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YGxnGHxPVPqVUjqrtHcTZ8Ze2V9MefMm9axhXVARmB3%2B1aohzIGexYk3eNg8H3xvPmxDvQGtFBfBqBIAgbCx26j%2Fp8NiFdFKI3auY90bKjKl%2FxZI4TYmewjCS7aoXMXsX1PTJKVPebP3USgHHw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7399\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7399,"size_decoded":8231,"mime_type":"image/png","magic":"PNG image data, 177 x 61, 8-bit/color RGB, non-interlaced","md5":"90d0bf403174d34ef68fe9b536dc6cc1","sha1":"b56cdd32214c8c9be9df33a846f15b305a1af2a0","sha256":"259aca71541eda534a81208a7b9650cfb09a8f1b5b99a8a2fe8ad91875451948","sha512":"76ab0be02418247029a20705f09d1ef1385a2ba8dfe37827d3aa2b7ea6aa400384b1abdfcdaf7f8cf82538b200a35ad0c50013f3cd2ac01ef8baa8af73372a9a","ssdeep":"192:9CX+w9hUMRwlxkn651HguEBAZMDLdN9oM:Ux28n651Hg7BAZMDpN9","tlshash":"94e19d9de490ec40545daecc71d6d2633bb71bf0dbaa38013cd6092b65019f6c70e087","first_seen":"2026-09-15T18:30:44.7694Z","last_seen":"2026-09-15T18:33:40.577251Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2018/11/multi-bg.jpg.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.849Z","timestamp":1789497162849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2018/11/multi-bg.jpg.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/wp-content/litespeed/css/f21b75b4cd577831db66fb212b893289.css?ver=79359\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i\r\ncf-ray: a3b9b733d8a33ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 446217\r\ncache-control: public, max-age=691200\r\netag: \"352e-6a0e512b-db7a010a8c2266be;;;\"\r\nexpires: Fri, 18 Sep 2026 14:35:45 GMT\r\nlast-modified: Thu, 21 May 2026 00:26:19 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FyLTacyeG0yRUMPFW16vjexdA8zf6%2FMrNt1kta3FHdogvLvTMvUJjLNJkCnOPkA5bdsKS8%2B4NzvNIa3c30luHENm%2FUGUCXxPARdrx5FC%2BX1gGsd%2BCvSMMiJmhwsMppUknhOLLmuciZD5UUMSWg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13614\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13614,"size_decoded":14456,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0d01a9e2d41042a1d0107778ad07fa46","sha1":"66a9dc1ed39dd6e4f1c231a3f6040bee47091b0b","sha256":"842fd9493754fe714426fb0a321312882441c7f68e1794c916ba26b5efea9b6a","sha512":"4bbd22c825b05894bfa6f90f26cda225c698ebbaa0f89754442598d13f594488a2fe72b5f7073070c3dda929f946bdda9c8969edb8b612dc3623d4e8813916f0","ssdeep":"384:azqH0n5u3CU+Ng9DmrT8Om5PsMoy5qmtiE:a2HOaCU+NgcAh5qI","tlshash":"a1526b0236850debc5e241b8ff812519f7ce7ae6095adef75344734a9d2578b3808c2e","first_seen":"2026-09-15T18:30:44.650393Z","last_seen":"2026-09-15T18:33:40.581636Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:43.594Z","timestamp":1789497163594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kawawbiurze.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:36:06 GMT\r\nexpires: Thu, 09 Sep 2027 10:36:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 546997\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":36181,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-09-15T20:31:49.928232Z","times_seen":34103,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.087Z","timestamp":1789497161087,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T20:51:43.703029Z","times_seen":18482263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-woocommerce.js","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.107Z","timestamp":1789497162107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-woocommerce.js HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r8kc6kgNO6ikpQdxOFGxNTLgiqYaq3TpSkOIXPXpiPgTu5XVUpjU0A9Ap2NSUeSDYXz%2FZ1syApq5KZPkg2oaXKnJErgcgocbDIJGGsj1mEGSmjhW92W99Nqbvo5zu1xviJul\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f4dcf3ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11314,"size_decoded":3925,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11314), with no line terminators","md5":"989d23f083c412cc45c6a43b778aa2b2","sha1":"b06368fd8fd550d80cb22d0f7c14cedcd1060529","sha256":"a8a63553a91615d0593adacea04fc8d73e6897b59454fbf6b6b617310bd49726","sha512":"f95134ce64acac3166248910565807f12a9674b3ed53be91010598872ea205f665442c506da5e8840e82d78ef0eb40d40769540b8192922611ff175e81933c56","ssdeep":"192:Z5jPLsCWS163xXbRK5lZJ6Fs+w2rq8H6Pgd9:vVDaOl/3mqI6Pgd9","tlshash":"3432b6e1d6b394f1a0ff613624d63feabb601889f1ce40535c7dcc1829948539267aee","first_seen":"2026-07-23T00:51:43.51498Z","last_seen":"2026-09-15T21:16:13.780794Z","times_seen":384,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/4b0e692e7a950b72522d99e231de46b9.js?ver=e46b9","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.141Z","timestamp":1789497162141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/4b0e692e7a950b72522d99e231de46b9.js?ver=e46b9 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dxq1fuHvwgBxL%2BXAlYWjaVtGB5UGbM5qcfe3Itwpxc0Vszz4eeyTiU397%2B5yvySs0tt0L%2B4GSTXeiJXHYWhD9C2089WBRBLOr4WedSp%2FpMPzXTLZQ%2BLlZMuF91aK%2BDCGU8FJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f8df73ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2973,"size_decoded":1718,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2971)","md5":"355813d1e5b680203e029575ed680e22","sha1":"488ee5fd086e014c62d79b72c92269e2b387c836","sha256":"769ef2735f6cc96772a8b39f8346cc717878e9118be785be75f83f988acef7ea","sha512":"eb49dd1c43487d3d68066a66e9495425326009ad3aac03fb7caea32937c32dd85e0fb395af0382a35ed10ef58da972e0ddb990b2867143a9bc419a812b3e05c0","ssdeep":"","tlshash":"bf515543f4a0a45a02ab91b4903b2143f2ab257c0641dc6066d3995477eda4e47efe9c","first_seen":"2026-07-06T03:24:59.531923Z","last_seen":"2026-09-15T18:33:40.583013Z","times_seen":10,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2025/04/filtracja-konserwacja.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.153Z","timestamp":1789497162153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/filtracja-konserwacja.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72f9e023ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"374e-67ed04ee-286e29597019a2e7;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 02 Apr 2025 09:35:42 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bjje9GLu55IU0chFsqgfJnwZy8e3NJK7s0Tf%2Fmw5mL7rkJYzlLHE9EsbpzZjqUVuTqvZWbY4XdbgmZPit912d%2Bf3cFqjBTHyQBMYPBg%2BaPKhBMNLSC1K6Nc3sCMes%2BaYxn0%2FqggcjVVfHV20pQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14158\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":14158,"size_decoded":14997,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 327x175, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"423b18f4dc31c9fb51b1e670eadc0eae","sha1":"06382f6067501f7e794e1423d703915b0d97f239","sha256":"c3aa0f190a0cbc0046dc78033e5825205b05f89da662cc6722678d7aa05ef8f2","sha512":"8353b91456280e26d3ad77e8bb4b17eba5987976f52af7253764cbcb3464310f03c44ab6026ee301e806c7b5e4d8474c015e47a2a87cb56fe00a317abb24d72f","ssdeep":"192:E1UibbI6m3yGAj5lv9q9P19ULksRRR2u/02h0WaTnhrTCX3o6Xo45t3ul/oeMCB:E1zm3yG+LvW19/kRRb02h0JBKH/ezMa","tlshash":"7452d11777d130235e35941b6fcebb70f7220d5d43a617ca28018ae3bb631a678d8a90","first_seen":"2026-09-15T18:30:44.829336Z","last_seen":"2026-09-15T18:33:40.583504Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/7007e4852bcb8114bd9ae725d9c0245e.js?ver=0245e","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.163Z","timestamp":1789497162163,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/7007e4852bcb8114bd9ae725d9c0245e.js?ver=0245e HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2BOFDXkmyaI8YCGegAbj%2FaKuVz%2BrCbrjb8BRnjf6iYgVyaWIQDg98zOkF6nQtaX0iNOfXWyl297sg0DAT5BzwCgjB7dibQ7iyj1auhei6kXgXjiaQIIqY%2FVjXwrJi%2FSuvHHV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72fce1a3ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":901,"size_decoded":1104,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (899)","md5":"ce02ff980839899816632f5def2ee303","sha1":"21db2fb7e9dd18ce8f061fed1e0ac44b68bcc759","sha256":"75f6a371b822d7e60f873bf07448ee27b6d17abf537a40c5e015cf06422d3176","sha512":"28fb48cbd8416e851b12cb65db93118fe5cbade85cffa43baa07bc5798215287ae6647683e663f6bd54f123dcc93165e8a309b04a7defdb283a7e51b82fb51d1","ssdeep":"","tlshash":"16110488b316686c41ff2172399f359119119f594009a80f899e74a06fe8e9960bbf2f","first_seen":"2025-11-03T06:26:55.174596Z","last_seen":"2026-09-15T18:33:40.5841Z","times_seen":3,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/apple-ico/apple-touch-icon-180x180.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:43.275Z","timestamp":1789497163275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /apple-ico/apple-touch-icon-180x180.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc; sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-09-15%2018%3A32%3A43%7C%7C%7Cep%3Dhttps%3A%2F%2Fkawawbiurze.live%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-09-15%2018%3A32%3A43%7C%7C%7Cep%3Dhttps%3A%2F%2Fkawawbiurze.live%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fkawawbiurze.live%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:43 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\ncf-ray: a3b9b73689a43ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 205\r\ncache-control: public, max-age=691200\r\netag: \"14e7-6867fbe6-67596bcc48ac24b6;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:17 GMT\r\nlast-modified: Fri, 04 Jul 2025 16:05:58 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RfNcX5uBCXjVlL7iymsYQb3dkHb9lhOb7uhd3tFAKLqEzFboh2QfIuLil%2FvX0uvSdeElqgx%2Bd%2FXD0dqr%2BXeAUhIQVNVzM7Dls3TvpajGBjWUb2o%2BhiXd2reCkF6mLrsj%2FbgLWz%2Bp4rjqcqaarQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5351\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5351,"size_decoded":6195,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"16b3b2f159ec31888b3a7a7a079da152","sha1":"69affd67b055ef2636ddae6938bb0a41e98853d5","sha256":"0c808b17b669167af9a6488fb2051064a46a424db02967ff3471ca89fcd0724b","sha512":"2e4561199ab5f48c957b0debc355c99262e934807ab24d209965720c0baac0b2acb7b06e88146387b6d3fbd43a80a14bc2ba08d25bb81f43994ee5cd4ef11109","ssdeep":"96:rLusPu2R7m2EhkF/CY67LO3XTO3Eb1RrPmeAGN/Cqz0NUyXKw0/VYnkpIx:rnPu2R7m2EuFqYkLY6czP0qglSjpIx","tlshash":"48b18eb1cb2692bdf410d613bf246e469762177b99d814c9e216d028da409ad0c38375","first_seen":"2026-09-15T18:30:44.570401Z","last_seen":"2026-09-15T18:33:40.585005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/06/Baner_na_strone_glowna_desktop_2024x340x2_Mamma_Mia_webp-scaled.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.072Z","timestamp":1789497162072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/Baner_na_strone_glowna_desktop_2024x340x2_Mamma_Mia_webp-scaled.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72f0d943ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"ebf9c-6a4239c7-a0f4b07507a7082b;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Mon, 29 Jun 2026 09:24:23 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HN3b5FLFjIOEyoagDnqxp4zK4R4ItlQjQ7Y8wxYBMw9zNtvW%2FBqTupM4vyIFhVAfBsLMxVUTlOvYolW8gT%2Fn%2FsxLUn7GGKayktB5d9RRGBqmvbKpSm1oNcFXF5b0zfyUo3OZHc3xVfgo%2BCuWwA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 966556\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":966556,"size_decoded":967395,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"39f5d9519ee94f8093be60a32a116bfd","sha1":"109e5d567e0214750299231e8f977983be202a0c","sha256":"9ff50f0e0d9dd73e6e932c8d223ce4f4fa6d903830dd27591381ce5f856bb0e3","sha512":"ab5aa70fe80195dcafe42ac13f1b1432233bce49651bb3d58a74382f1d42d686834ae76bf293f149a256a167d680127bd118af8b3049655845b25ab07a60612c","ssdeep":"24576:mhPTj9NcUyDiF8nY6zYtHWLSr8YfDNztWhD:Yj648nNzYxWe4YfD2d","tlshash":"c82533d2969c57e7db431b04e7d7714dd2e5142e828abaae5ebd634f032a048f085c2f","first_seen":"2026-09-15T18:30:44.597519Z","last_seen":"2026-09-15T18:33:40.585694Z","times_seen":2,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":283,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.097Z","timestamp":1789497162097,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 21:10:25 GMT","end":"Thu, 12 Nov 2026 22:10:06 GMT"},"fingerprint":{"sha1":"79:90:42:E8:74:20:D2:D0:39:4A:8D:45:CE:B8:4F:AB:BC:6F:44:CB","sha256":"19:83:5B:D3:2C:DF:FE:44:CC:51:73:F6:5E:98:2B:5C:42:6D:3A:01:F4:37:63:E0:EC:11:45:78:B5:24:15:3D"}}},"request":{"raw":"GET /turnstile/v0/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public\r\ncross-origin-resource-policy: cross-origin\r\nlocation: /turnstile/v0/g/330e41bb475c/api.js\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3b9b72f1a000883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T20:51:43.703029Z","times_seen":18482263,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2025/04/leasing-ekspresow.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.155Z","timestamp":1789497162155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/leasing-ekspresow.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72f9e043ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"352c-67ed09e4-4d801d036803a96f;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 02 Apr 2025 09:56:52 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4fyFyIugqLTiAbMME4yhfbXRvafVsV2dMCHETWdhPyExKaZ86uUCRp%2FjgVt18KT2TvCplFxWmlfF6%2FuA4PKAMZXxJkj40G%2Fnm5ZIer6O1GnnomJlOk7dOeMTfd1R8d0%2BWh1AtPUGbzGQ0ZKDiw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13612\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13612,"size_decoded":14449,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 327x175, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0b3bbde781b5b7d38e4861c671c4c015","sha1":"8e5fa5bc776e5997c5ff0b409820cfab7ee4cdee","sha256":"5456a68366a143280e294845dc19769e8e1717c47a5832202b00d7fe386a6e02","sha512":"a01d5f69b0dd630f13e1135f5a07ae4c334a4166b090c8cca6e267b8fbeb987e2a3d06ee661aa5181c5508d8652fbf89a491e24ae3b93c78d5edebd6212ea71b","ssdeep":"384:WCorPzgfzmO3akFFfDvAMQ6x9g72LlY+S4WnjFO:WX7Wxfc76zA2KA+jFO","tlshash":"7a52d0faead94ea2d9fd0bc4c2332806e20a50f1b1905c5f20bc395bc6c5513e7e2b55","first_seen":"2026-09-15T18:30:44.525271Z","last_seen":"2026-09-15T18:33:40.586776Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2020/03/akceosria.jpg.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.203Z","timestamp":1789497162203,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2020/03/akceosria.jpg.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72fee333ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"1f80-6a26f615-9aa77983bbe2fca9;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Mon, 08 Jun 2026 17:04:21 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fTtI8VySJXpU1RTtW9GKCzmt1d7hJtvXU%2FF%2FIvNTZzGSM97WwD7S%2FgCNlI7ZVK660I2A46PttQ33LD54WvCVMfOr%2Brg6OaCq8d%2FU3L9aQ7QMv301KILRLXzt5QxVZMamNTKG%2B%2BUOxuh6bjWiLA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8064\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8064,"size_decoded":8906,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ca7fed7755d52b1ec134a749b16cf95a","sha1":"c432cf59f1a5a89dbf47e74c82e9188a00766b7f","sha256":"dfb62f7cc6b9037263f01cf532766740d4c9cf94a0c427ba597543c759c37820","sha512":"68a8987822b6ae3b7540383c91509b1979cd097c14b1a3d6a5bea60921f4e8d2ca62fbcd5edcd4b64b4e887172c5509b5318b8fba5dbf6c046fbb64564d33d2b","ssdeep":"192:BzVASKbne+u2ZQJb1tN+ml8LJ9mQbQGd8m:BzV3KbnLBZQl1tNx8KQEGz","tlshash":"0af18dd76755e70bdcc41c7bac882b3b6e111e432793417f4345a61a8e06e60cfb9992","first_seen":"2026-09-15T18:30:44.666506Z","last_seen":"2026-09-15T18:33:40.587386Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/09/Rossini_GranAroma_2pcs-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.280Z","timestamp":1789497162280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/Rossini_GranAroma_2pcs-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e9d3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"2c419-66ed1b6b-2cdcd07dc1f40d4b;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Fri, 20 Sep 2024 06:51:23 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P6YQuXzK6E0ItBr7qFBrCKoQnmNA%2BmUdDCwQ3FcMEhxrdVgJBQVHhrfxEtMWrZN4HvyTVna1m%2B27WNOetZd3qmd4ZGj2BnkpgNwcOpQuEl6oEV3sCHqwSyjCICU%2F6GxCvxfE9pqu6BwlQfvh3w%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 181273\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":181273,"size_decoded":182110,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x450, components 3","md5":"c9ab76eabb315144ea0a0bd391ee5fc0","sha1":"97e7c450ca59031d30b7e3cfbfc23f0892825b86","sha256":"76f174a77496cdba1bd8f1804f661636474bfc42e339333167ebabaadbeafd55","sha512":"cf86ce07de4ef6c833165f8982efd37904fabbc5879fa45b63b0a35b4a157dd74e8985c70910c72bef9ff73edca7f44fb97db185acbdc08d262a53220aa155f0","ssdeep":"3072:v7AJFKFSzpHA7UZfgftQKD8YgEKu6YVDxb4r7pxc8hmpK:zADKF8pHA6sxsY154r7pdhm4","tlshash":"f9041211b2e3ea8bcb9d11bb1dfd7d39839892a1dd404c1795276518e031dbe0d829be","first_seen":"2026-09-15T18:30:44.767863Z","last_seen":"2026-09-15T18:33:40.587941Z","times_seen":2,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/06/WALENTYNKI-2026-scaled.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.064Z","timestamp":1789497162064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/WALENTYNKI-2026-scaled.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72efd863ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"32631a-6a1e8a42-adae660ffd0ad536;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 02 Jun 2026 07:46:10 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PDp66xpSqCnkWd96ZUb9316XgMcegLwdQxOJfz9Pr4uU0IwKgXf4WlMJ2u73gZ9kdM2upguBHNzhbmWKglsTahWmMRy8SyrObt0tLTwv1dpTAqCwBeZmfmwLSnRaVrHL2cnLKjYixnOhp%2Bgi4A%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3302170\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3302170,"size_decoded":3303005,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6f27e40d464627d14f9535d84f8db7c6","sha1":"8ba82386ab065455f19112bfc32bbe692186294e","sha256":"75818766b6f1dccd07cf7a61b48f345335c28a8f164d239090d8e17b4ac443cc","sha512":"171308a2f027a04e29b5c143cede2ab1ec8cb23039be74a6016b3344648c2183ee419e4214bf45205b4f3a96cf30ab17fa23f77841ba59f0bce5f814e7b3cce4","ssdeep":"24576:c80i/IovJ7CR1mlzbhYde51YXY1DRmnVqbCBH26xWDO+:c8h9B7+1mxbhme51CsMVqbY2+h+","tlshash":"1b2533d8e4e99794cc939a7715a51739c1007da1f8877033ba7c2a4b3bb8109ea3f5e4","first_seen":"2026-09-15T18:30:44.714257Z","last_seen":"2026-09-15T18:33:40.588752Z","times_seen":2,"resource_available":false,"data":null}},"time_used":805,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":772,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/34104112b9f44ecb3cc7f5efcc75b2e2.js?ver=5b2e2","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.120Z","timestamp":1789497162120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/34104112b9f44ecb3cc7f5efcc75b2e2.js?ver=5b2e2 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qKGJdqKP5CTLU49uieSeQjPEHhUK837Udr31RlAFd8AEkoKTm4m7ZP9FL5GeAZrfuxvUfDQyZXe9KYdztxfcgHof%2BhPTAJA7CSdgutLZv2vR1eOBHZJcrezYmGevcywcIiLj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f5dd83ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7378,"size_decoded":3004,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7376)","md5":"b58cbcc12e9be38ec1eb3b6a4f4a9ca9","sha1":"8ea553f171b856da116e1ad5bc5663f76f5aa7d8","sha256":"e99ed022823364257494d44baab30772a58effe4368f0ae09ceca737cacff64e","sha512":"9f90dee2e944ff413f63ea4498a246fe8851eb6161a4b8354c5ea101405daa20a7cc749663b5a097aff5321372d4423d3a1b6cbfe7e62d235acc0aecc793289c","ssdeep":"192:c+tyxFsK15PqmHApEiO5qirN9NvwIZ/o9SVTnpv2Uv01X5dTyeaSAsn3Q94znh/E:fcxz15y0Aup","tlshash":"70e1548473b7ec575186a316c1ee1e03441eb59922b0a86fb72dd2de4ca8b4e103e777","first_seen":"2025-07-07T17:47:21.47006Z","last_seen":"2026-09-15T18:33:40.589308Z","times_seen":10,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/1bf5e27c9f4f6764cbce06cbfc7b2eb0.js?ver=b2eb0","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.161Z","timestamp":1789497162161,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/1bf5e27c9f4f6764cbce06cbfc7b2eb0.js?ver=b2eb0 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YpZxHm9RlXnMUh%2FdjTzIxwfgMi5tJ57yVrh1kCVwunyPZNC9O1aSYTBx6BmqunJsh3LFt7XIS3w%2FQTJt5qtpiKQ2UVcdEeCDnAQbleExwGc0Kz2NN%2BA0FR08iId98WAPsSCa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72fce193ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":387,"size_decoded":822,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (385)","md5":"9712f1856bdbb392807576f8e2b30a9b","sha1":"a25e17b173219ffdd037bdb1090c149a27b5c7ce","sha256":"0e4ce9053e5a16a6c9e42b855b89fd81385eef8b47e88accfe660659471f7f03","sha512":"4bd45035670ff396f3cec669284825e3cc5dafdce402a25f5619833c47028b5d1a769dd8a00801b8afd8a45ece800f5ee7430a5b63398ba960ae7639961d7fa1","ssdeep":"","tlshash":"b3e0920efacd226a56d3307c3b3f9946973a6e335a059909b85391900eac07f3523c3d","first_seen":"2025-11-03T06:26:55.246135Z","last_seen":"2026-09-15T18:33:40.589843Z","times_seen":3,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/4a0f1e6e5810464b1ab8c809f3f7c811.js?ver=7c811","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.167Z","timestamp":1789497162167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/4a0f1e6e5810464b1ab8c809f3f7c811.js?ver=7c811 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TxkImwImeu8xfP%2F48slZci4zN2aMMIWI9gcsPjKhjkRIa66zkvaYGaUKJTMAXEd1QTlFD5RfMzx9ySNYp9YXOmIuOzHrkGGzL%2F5wNtLOwJpfqwvQHa4ruR2s0RBmsXvWHj4S\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72fce1c3ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9390,"size_decoded":3930,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9388)","md5":"ce5b9f4bce5d179d0765275f9436e637","sha1":"f92b0191abacabdd5d3ca1478231ff9396d0ace2","sha256":"6ad5808d8912d57c68f3be04c757e6fe362bfa5c27c7201a71fe6d3d19077c6e","sha512":"13b35fae2eb5fecea0a7de6dec8266ea7e22c58e50e68fb6e5d8ca1c401a934a296baeaa4b7fbb1ab22251199786c9ef30e7546828a66a11cb6bf33285faf7e5","ssdeep":"96:7N9zXFLW2HL/Oc4ix77TMAzKn59TUUajSuUc8PtdvNbRpcdVxcgKYxQXW2qI0aq+:7N9JLbixiFeUUXu5atJNAu4dT8","tlshash":"0c12760bb6c5a15942eb94fd166b3005303aa55e6406c778f073faddddb8f4a20239bd","first_seen":"2025-07-07T17:47:21.488188Z","last_seen":"2026-09-15T18:33:40.590443Z","times_seen":10,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/09/Pera_DolceAroma_2pcs-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.272Z","timestamp":1789497162272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/Pera_DolceAroma_2pcs-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e943ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"2987b-66ed1b3b-580f945e27c02a01;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Fri, 20 Sep 2024 06:50:35 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=556OKX7O2ogqRQ3F8N9pKC6aK3deAQElmsnPP9wCkQHrABGq62GlxooY8MKp1W0MVngDms3HpjiJ%2BHICY0REnZCYCh5YaCPoLlJ3gCWglbP3lf6UR%2Bp%2BShYyAZaBJVfHM4ImZ8lTfTBqhnuPCg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 170107\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":170107,"size_decoded":170944,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x450, components 3","md5":"60301338fbe8c9942288a207c4638dd0","sha1":"1f2b659387e99b74b6b1a6474d6dc6a570de06c1","sha256":"2be0f94273ab9cc900c687c92b26bd4d0e319dbf25ba7cbee802492ae2d38523","sha512":"5e0275c903ab65a272660f4fb0124fafc5e214041db4acf36a94b83c5dfec73cb9b63aadf8ee71dfda8902c925847a00c68810ee7bd7265f9b2bba80f779b7e5","ssdeep":"3072:awALyZN/xq+Yd1QF56R8yOQfvCRWZx5wooQdELraSg4FRP+FtYYvyvVhVzFSJFhm:BZjq3nWg8GXCRWZUohF4D+ZvyvPSJFSl","tlshash":"3af3129d72de97505be9e5dcb97c3c2112052f483ca84742fb6b8442ea89f1bc0a15bd","first_seen":"2026-09-15T18:30:44.511089Z","last_seen":"2026-09-15T18:33:40.590937Z","times_seen":2,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2018/03/brita.png.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.323Z","timestamp":1789497162323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/brita.png.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b730bef63ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"dce-69f9ec44-3025b2c02c3058;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 05 May 2026 13:10:28 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dsu2jV99CY8wsuAdNf%2BlG6m9a9GUanmS9RMsopcdCXzRaJRfD0ihcD5mf2p1LSfXY7s2FrIb8oSqeAapklMrRmggEoDG9%2FEBeqH7boAY9YnYUkVlfB9eAVJ7QmOkcfFlYjf51i%2B8ilVbTH7wiQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3534\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3534,"size_decoded":4365,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"489ee04a39c34b79d5a39f7cf478742d","sha1":"7a554b2901ae8b2fbf94ce38ea02709c15ff603b","sha256":"978e27ca199b608ef326b32a19a730012efbc8966ac7473ecc2baf02039db5e4","sha512":"f5adcea78e70688a45d4de9b6e20f19d1b03303194275f4dbd725bea10199a8c63e52df173b475c3a6bb80c9d3b0ac316cef1dd5c07f9467009bbaa002963e32","ssdeep":"","tlshash":"9c714d7b738cc346c8e056b5259287199e6d3c634f41b6ee5b4c150b08939a2be5c5dc","first_seen":"2026-09-15T18:30:44.824783Z","last_seen":"2026-09-15T18:33:40.591513Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/84c29754c881c216b65e05d4b466d71e.js?ver=6d71e","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.976Z","timestamp":1789497161976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/84c29754c881c216b65e05d4b466d71e.js?ver=6d71e HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MhN5T9ux7gFiXRjWfkEEA1z7mrDF46snV0nBOT3fmp4Br5PWsQW3mTE5ZWZXkPAfWlvDTROKLwqwuzKaAQzgBZeEbbVDiNH0MD0RWI1V5mIlcBtRgJUPrf5ajUvJ7PD8r8JR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72e6d2f3ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1478,"size_decoded":1063,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1447)","md5":"5c8e88a8adeb4d82d2409148aea8bb80","sha1":"51cf306d61a06b8197944b666544beca79c94745","sha256":"d47b392256f57ed9f3ddf004156d57245ffe7665f8a9decdd63fa39524b84ee0","sha512":"01b8a8cdef35da4837e1f67b2cd3a7b30966ae8e27edb5d54944c8e484727cb274fff84f1074e26978bf6f89947221b233e7db8671c7e8683ecc58daf9cd6a60","ssdeep":"","tlshash":"bd31ac3df1b157250cbea3b481f7f3ca247204952a1364a0c4b5d0a595f78423cafd9c","first_seen":"2025-09-20T01:47:34.906113Z","last_seen":"2026-09-15T18:33:40.592083Z","times_seen":25,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/e0446d25293eff0dc47598face0e3a60.js?ver=e3a60","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.162Z","timestamp":1789497162162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/e0446d25293eff0dc47598face0e3a60.js?ver=e3a60 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SsBONsV45AaCQhd8d54%2BxlXgKVHN6pXluV%2B%2B8ZLVjlbmZWlLTbQvSQosJqWeMBV0slx93G049sVb4so1c8skCiU4zZMmIXL%2BPe64mtJBntLiSYlMhKTqGN9bUcIonlOvPqlf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72fce183ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17252,"size_decoded":5751,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17250)","md5":"d02589c9e145ce38d2642f11e962c902","sha1":"d0c9740880806ab47321d450badc704968d93dc5","sha256":"a79524b3fd45f9cbcd158c5a0fd8051f5c9664a8b4e69836e918ae485c1ade3d","sha512":"ade92fac1c5439e91d2ff148bd407f8f5ebcf690efdb9e7b9d56a0a969b3c98a94f0aa3b9e175647986d747d5f34b075398d6a55498dd79e7566504d04391d90","ssdeep":"192:4up34RRcpfgcCcdcIUz3W/9mr97+n+rD47ICdsSsDIlG:NI8ocmIUzQ0pgYIg","tlshash":"0e72650ff20162204dab71a1111ad81993bebf386906c1bcf4ff46e99524d4971baefd","first_seen":"2025-09-27T14:46:40.88908Z","last_seen":"2026-09-15T18:33:40.59259Z","times_seen":9,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2019/04/kawa-dla-firm.jpg.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.204Z","timestamp":1789497162204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2019/04/kawa-dla-firm.jpg.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72fee2c3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"41c0-6a1a3173-fe4543fe4f127a28;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Sat, 30 May 2026 00:38:11 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lgAhcFOAMDy9m2GFHhCYGKSISJd9Co%2FjcNaPciSwS7mPAVigqbVNVernyO8RNxQXcvd%2B2Ys%2BhK5VF9VUsCVHE9HhJTaSi2ZbVk1ImPDh8g8X9ipDDey9hrE2tHKikju1KuEg%2BMZdRYU2%2B8icgw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16832\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":16832,"size_decoded":17671,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f3323b7dc8de99b3477b0d144ff9ae43","sha1":"37479682e23eccfd9bd5b97293143779b9c50294","sha256":"0b483832312b47f6bc77fdb9418c8d5831df29b91df19597b517b8453a234b4d","sha512":"5f04891b5ae7721647bda39fa4d1189b0e6de433b18fbe72fcefc12ec53800122c7180698804c55b6adadd4daa8524aa56afba0835dca8d36dfe2af8cca6f959","ssdeep":"384:PzbrFfJibOtCSLY1JFVqCyT2bCPGNd9fxUROscDxcS/:PJsOXLWJ/qCy6bCE/pUR8+","tlshash":"2372d02d3308c01fd92164b402f7b1b0b916ff6d7b611596e918c31abea9e813fd9050","first_seen":"2026-09-15T18:30:44.585459Z","last_seen":"2026-09-15T18:33:40.593079Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2018/03/mokate.png.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.322Z","timestamp":1789497162322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/mokate.png.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b730befd3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"114a-69f9ec3e-8bf0a3efd67a161;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 05 May 2026 13:10:22 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i1kVEU4dZQ1yw3AyD1FKhrW3u%2FmbhT61ZNCGijTcZ5dI8bUWmjQJuLs6HeUkdZm9KBRRj4SOFyp%2BiadfzPhHGESyjYbm4I9h%2BKszodn8eIritePd%2BxzoTheR6pCnGHJgb4P9k04bF0JTT9jm4Q%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4426\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4426,"size_decoded":5261,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dd59e7ee4361ff077cb22ce144e1c961","sha1":"654e3621115c1a2caf52efa9f767785458b326ea","sha256":"c2e070643fb588708dc47cfd4206dc15509977f123a3ee9fa246c56b00e40c43","sha512":"c732cfb7768507bc41d6d0e361e660ce0ef7d07cce2dc9de7a16df4bc54bd39781bbf34356dd348b1edf465f955882c0f9bd1576584aa4639089a75ed2a37a18","ssdeep":"96:l0zTk7k+/elQhJnRe0cXDsIQD7qMx5DwL2hQCb4dAWP5qwjIr:mzTWhgXDRKx5dhvo5fIr","tlshash":"31915c97e352ff56d4628cf0b2c5d3e5a34f7e602ab5d60fa2918026dcc16c1ac1d1d2","first_seen":"2026-09-15T18:30:44.54561Z","last_seen":"2026-09-15T18:33:40.593737Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2020/06/logo-kawawbiurze-biale.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.338Z","timestamp":1789497162338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2020/06/logo-kawawbiurze-biale.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b730ef193ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 381904\r\ncache-control: public, max-age=691200\r\netag: \"2309-5ef301a9-f605a1794b3d12c5;;;\"\r\nexpires: Sat, 19 Sep 2026 08:27:37 GMT\r\nlast-modified: Wed, 24 Jun 2020 07:32:57 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QP31Z8kmfkBazKcDzxktwr%2FAHLqQYBjwNLfyTR%2BBVa0zVfmyk1CFW%2FvZMPXQf7CoQBmbII56s6g9%2Bz6d2j%2FZAPdWn0Ex5b%2FpTFCvBImRZLk8RhTAkPl6SiZvAE5RP%2BNkC5jEeFOW9erVAL7R3w%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8969\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8969,"size_decoded":9813,"mime_type":"image/png","magic":"PNG image data, 235 x 68, 8-bit/color RGBA, non-interlaced","md5":"ea066c7aa820780e41c72ab2d1b16459","sha1":"94738f60eb5b397ef6fce86439640903faa3f4cd","sha256":"68f1f5c2b55a2cb2815aaebf1b5c604823bdac0293ffb9c035427bc6203ce3ae","sha512":"314329e73834db44ed8b7ada1b4872909350f7caae3f0b77c642906253db721a47a429a127489bca061d2b643b241992440e2d2e335d6f3e6492d1ac69f77af5","ssdeep":"192:8SDS0tKg9E05TikpF69A0cVqqT2tw2dj+6Zp7OB1/KD:7JXE051s60yqAD0Pz7N","tlshash":"3602bf9d9225b00c0cb9b1d157ed25a38216122cf97f2fb992ed40ddd07cd7b2f844a8","first_seen":"2026-09-15T18:30:44.6696Z","last_seen":"2026-09-15T18:33:40.594307Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/330e41bb475c/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:43.273Z","timestamp":1789497163273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 21:10:25 GMT","end":"Thu, 12 Nov 2026 22:10:06 GMT"},"fingerprint":{"sha1":"79:90:42:E8:74:20:D2:D0:39:4A:8D:45:CE:B8:4F:AB:BC:6F:44:CB","sha256":"19:83:5B:D3:2C:DF:FE:44:CC:51:73:F6:5E:98:2B:5C:42:6D:3A:01:F4:37:63:E0:EC:11:45:78:B5:24:15:3D"}}},"request":{"raw":"GET /turnstile/v0/g/330e41bb475c/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kawawbiurze.live/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:43 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-content-type-options: nosniff\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=3,i=?0\r\netag: W/\"330e41bb475c-api\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3b9b7367b910883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86603,"size_decoded":28492,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65501)","md5":"332a9735c5b3da5be808f159db2e2ccf","sha1":"2387d1efbcc561ea833aa24836df1c39a1ea799b","sha256":"9a0bbd1d15f8f4938e4e3fcb6ae3b5aa4c9622f2041336256827797c3bd96af8","sha512":"8e0c44566f10d3a1f270c816ef457a2ad8121f763f46cb98a029426138ef5caa95aba0934d9acd56cd90c928d269d365225c1094792ee9a47d6210b10211c615","ssdeep":"1536:DL3dUa2dOjYjUgAmPgU6aKLHXdAU7GMEBvOeTtWGqc3lL:fEOjYhT6zXdGMEBvOehlR","tlshash":"1a831bc8729a787213dac1b4a07f5353b3297d35584c8850e527d8663a7ce878273fba","first_seen":"2026-09-02T13:37:56.882331Z","last_seen":"2026-09-15T21:11:57.134688Z","times_seen":20152,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/9153a5185dc8fbabd16845ab48bf69f7.js?ver=f69f7","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.147Z","timestamp":1789497162147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/9153a5185dc8fbabd16845ab48bf69f7.js?ver=f69f7 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uGPEtgpQq5PqwclvrSrF%2Fg32G5KLacoGoX4DUEYqI8AvD8IuTGtznOgKULBR4pKcKXxUEzgHDPznud3RpqjHBRYa%2Fbbqht2qZtiUsJMJIjmIZkLLhzg5pvMiY2zmvGR2sswl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f8df33ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36750,"size_decoded":12399,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36563)","md5":"f48530a5168cbb27c427868deb844da0","sha1":"e242442aa2e345b3a0fc03889bb07ae847643c30","sha256":"ce6bb90f8f07116f1e8e05f997c09429b68c3f5e5209d84f0562eace5531987a","sha512":"ad4b5c6d31f53520f26270cfbdfacad40cb7d4ec778ec06b03cb1b7dcd45678e9dec7161e95db631f36ea3c1a6b21206d1d2caea354b920df196dcf9a20ef551","ssdeep":"768:6ovEZXteTlaCaedY5+R5SHf7QQipB72z1EuPLkhDWucxooq7:6JZXteTlaCaedY5+R5AipBqz+cxooq7","tlshash":"9cf2c51e30007d2a927b51a6053a3a179233095fad50c11cbd6ea6ee5b7cc4573befb2","first_seen":"2025-04-30T09:58:43.668306Z","last_seen":"2026-09-15T18:33:40.595519Z","times_seen":679,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2021/04/2cc250-450x450.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.282Z","timestamp":1789497162282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2021/04/2cc250-450x450.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e9f3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 130092\r\ncache-control: public, max-age=691200\r\netag: \"1c8f5-69b0128c-e02c3ad879e37d2c;;;\"\r\nexpires: Tue, 22 Sep 2026 06:24:29 GMT\r\nlast-modified: Tue, 10 Mar 2026 12:46:04 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YGXA84ZeDf%2FLauFz2sqkjoNjtjocyXdxb2tWYL0yTr7AkDkTWvswPw8irWUybdwYMBLI%2BIhGEBvdw0qfk5b2%2B4TcuyS8CMXEsXZ7ONeRVdMqjxdTftg%2BOEdsEJgKQr2K92z134aLKks4RIPDLw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 116981\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":116981,"size_decoded":117822,"mime_type":"image/png","magic":"PNG image data, 450 x 450, 8-bit/color RGBA, non-interlaced","md5":"032beffad332beb6851dd6611adf1532","sha1":"1bd68c9f40d38172e2b91a707b1c3939540c8efc","sha256":"8e87fc4409481b3e5380a86571be68efbb9f01c66e2632e22b5231e5b984f928","sha512":"ac747132e130adffa2e9d2432f9771f20b68b1d67cc2f7add3359a13b3358d7e2615ae5526e2566e655406417efe2591afa7e15fa20011bccb36e71d5ce8b779","ssdeep":"3072:FwpBnaMkIvES3IjeQys25pEwEV7efmYV0O+1hzW:F2nCg/T35pcV7dN/zW","tlshash":"82b3127f5bdce48a9619298c1d7c62723bb0851dee78dd92017b42b53a932c22a83c95","first_seen":"2026-09-15T18:30:44.777454Z","last_seen":"2026-09-15T18:33:40.59605Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/06/Baner-nad-wpis-na-bloga-963-x-384-px-495x384.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.287Z","timestamp":1789497162287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/Baner-nad-wpis-na-bloga-963-x-384-px-495x384.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b7306ea43ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 43367\r\ncache-control: public, max-age=691200\r\netag: \"627bf-6a34fec5-fd36c6216d645eb8;;;\"\r\nexpires: Wed, 23 Sep 2026 06:29:54 GMT\r\nlast-modified: Fri, 19 Jun 2026 08:33:09 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oqHWis%2BZw2z0G%2BRlkdgyBdSGf9vYpd%2FgXWQj7EAPhSCvMasgBi1DkWZOCq%2B%2BG%2B%2BYnvUTWFWHr1bgPLiEjbbzo8s768%2B2JT7krnua8KJDZFrAYq4%2FmuxXpmxOGCvddU7eeNe6MGYFM%2BmGSLLpqw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 403391\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":403391,"size_decoded":404243,"mime_type":"image/png","magic":"PNG image data, 495 x 384, 8-bit/color RGB, non-interlaced","md5":"d8be8b037c8b9794d4a9092754f3b31e","sha1":"ff20228dd84b319a6a14722bf8842cf5524da6de","sha256":"5beb4d81a717d2acbbee2c815a8d540603c926ac1c7cebc6fb0ec51660e0df21","sha512":"5c92242ed9912e816bf13168d54fbabc650cab27d2c1d9ac64c2478bdc41349ddec6087be25f12390b7d32b198b9a04d9fec45c406a7706b7aef50698cb554c1","ssdeep":"12288:Sy/lFSpJKho0IJc5fnOp7VmnR6XPHk28aW9j:SmFSjKK0hfn6MnR6XPQj","tlshash":"cc8423abe1b3aa90c9cdf3c23456ad0930b045d535f925190a9d9b37ed6b04df1f34a2","first_seen":"2026-09-15T18:30:44.386879Z","last_seen":"2026-09-15T18:33:40.596761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2025/04/dzierzawa-ekspresow.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.142Z","timestamp":1789497162142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/dzierzawa-ekspresow.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72f8dfb3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"4604-67ed0101-c6c147635a8a6224;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 02 Apr 2025 09:18:57 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2FExYaSndwjvc37KnuUWUEukNP2W0Zal4QaIMVgmHYtkl%2FHI2QoE5Z4hruu4lkONbfmrT7SxVGG3ydPa%2FGDNxM00ZJTEvi031rETjJFpF67Drpylf1xAwJ6%2BY1NWkawlCmgqbmSA1p3NuH5O%2Bg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17924\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":17924,"size_decoded":18763,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 327x175, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fffb89c739fb13a7887d9c45885f43bd","sha1":"74dc20a769957e1c5ffe4b68096af58adbac0f49","sha256":"cdcd8f6d7661840141630e567668cbbde3cbc1e45350e10dd43ddc7b83cfdf5a","sha512":"7d07a6c188c4680cc6347d2580ded60fbfae84195098e8e5f337c32fa377895ea961f5fe47767d76b19e3294424267d2744d2d74e7402334b94239eeddad670c","ssdeep":"384:kVMpFO9rdpmJfzaoSxM59CinI21zSv1md2hzMtkjU3bmbO:FpGrd8aoV59CilzS4IMCwOO","tlshash":"a882d087da26d96bfc0e251d832c51e260d918ca30a9ca86cc93958573ef1311abdf25","first_seen":"2026-09-15T18:30:44.766061Z","last_seen":"2026-09-15T18:33:40.597338Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2025/04/saeco.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.190Z","timestamp":1789497162190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/saeco.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72fee3c3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"194e-67ed23aa-8a991ce901c1446c;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 02 Apr 2025 11:46:50 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QJFyoJDz1e%2BVqJpeZnZnI8BJga9vuTTEtlbMvvBdioe7wRfVR%2F4j%2FzbrKaPLoqX%2F6AAYn5i8wAOieLf6Fu0zMKPNDhG8TsSkLIQ65TneTUYxctXtZ3q69YlfInFY9WkardApORYx4L0WdMQM0w%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6478\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6478,"size_decoded":7314,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 327x175, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5b1819477ef88a1a431ed5388e7652b4","sha1":"486bac84e75b30f22590a92eb40a18e6e25722b6","sha256":"734491e90bf77c98cb14f48e3463ac204c0e97bfb0917a74ce965e339dd6f383","sha512":"9c9133163c4cb7eecacfaa433609a91014fbf112ac0905d7a8cc3db03e0a898f54a2f4939e6f7c5fe8cac184a00d85cd153fd1ae05c1618a1b11f197440ca7ee","ssdeep":"192:FG6GyIQJlNjn4qfbD6SdaUxwhpjXKx1zFQBY+uYm2k:QHyrjn4XK98j6x0K+Jmn","tlshash":"bcd18d1e9edca3967630fcafd2534e6334322da6a15b46f68f44f8508b99c35a50c492","first_seen":"2026-09-15T18:30:44.863112Z","last_seen":"2026-09-15T18:33:40.597922Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/07/482-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.232Z","timestamp":1789497162232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/482-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7301e623ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"21a2a-6a6b114e-91fc6f4374e3e31d;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Thu, 30 Jul 2026 08:54:38 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sMAm3EpYMhSHjlx6hwXPAvwJBDQ1zihDvhIcaf1CnJeSrSv9TgOY9lMXsb%2FyUsOHfgonpPtXUnhNlcV0upmqskrMUALx3GG4Y3KcpFhn%2FxMLCQNQRLH01dbGpSWfQCJzjN5dv67QzwECdc77hw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 137770\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":137770,"size_decoded":138605,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 450x450, components 3","md5":"125170212d1ce4ddc72ee9fb354756d8","sha1":"55b6debb96edc113a4e66a9a6d721ddfc85d80a0","sha256":"637a0479d80708a6eff05d7fb63e22effcc6179b6ef1709593adc7d56aa7abdd","sha512":"22c97ec1e8f17363dfc01c7ea40680f32a195ce9ff6c5ed0afeacef755a87104c9c716cf20cd624b7aaab731d92f774ead535df8f2e5bcb2432b3f4414d6d66e","ssdeep":"3072:EleiPbyDz2d7X8k6VzSLCOFQgfTkXEtWToPaYK3VT:EFiz2d7XUVFOqEt01T","tlshash":"36d302ec38c2344e82c796f1b8e169908589564fdb0578b5bd4d4e02ff9c53b2ed21ea","first_seen":"2026-09-15T18:30:44.8041Z","last_seen":"2026-09-15T18:33:40.598631Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/330e41bb475c/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.846Z","timestamp":1789497162846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 21:10:25 GMT","end":"Thu, 12 Nov 2026 22:10:06 GMT"},"fingerprint":{"sha1":"79:90:42:E8:74:20:D2:D0:39:4A:8D:45:CE:B8:4F:AB:BC:6F:44:CB","sha256":"19:83:5B:D3:2C:DF:FE:44:CC:51:73:F6:5E:98:2B:5C:42:6D:3A:01:F4:37:63:E0:EC:11:45:78:B5:24:15:3D"}}},"request":{"raw":"GET /turnstile/v0/g/330e41bb475c/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kawawbiurze.live/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-content-type-options: nosniff\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=3,i=?0\r\netag: W/\"330e41bb475c-api\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3b9b733cb2b0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86603,"size_decoded":28465,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65501)","md5":"332a9735c5b3da5be808f159db2e2ccf","sha1":"2387d1efbcc561ea833aa24836df1c39a1ea799b","sha256":"9a0bbd1d15f8f4938e4e3fcb6ae3b5aa4c9622f2041336256827797c3bd96af8","sha512":"8e0c44566f10d3a1f270c816ef457a2ad8121f763f46cb98a029426138ef5caa95aba0934d9acd56cd90c928d269d365225c1094792ee9a47d6210b10211c615","ssdeep":"1536:DL3dUa2dOjYjUgAmPgU6aKLHXdAU7GMEBvOeTtWGqc3lL:fEOjYhT6zXdGMEBvOehlR","tlshash":"1a831bc8729a787213dac1b4a07f5353b3297d35584c8850e527d8663a7ce878273fba","first_seen":"2026-09-02T13:37:56.882331Z","last_seen":"2026-09-15T21:11:57.134688Z","times_seen":20152,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/03/loading-kawa.gif","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.077Z","timestamp":1789497161077,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2024/03/loading-kawa.gif HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T20:51:43.703029Z","times_seen":18482263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.ceneo.pl/ct/v5/script.js?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026t=1789497161740","fqdn":"ssl.ceneo.pl","domain":"ceneo.pl","tld":"pl"},"ip":{"addr":"5.134.209.153","port":443,"asn":42656,"as":"Allegro sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.742Z","timestamp":1789497161742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ceneo.pl","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 16 Apr 2026 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:CC:D3:01:00:A0:05:79:8E:68:CE:35:3A:AC:33:47:4C:C9:EF:60","sha256":"16:C7:26:1E:69:F2:8A:15:1C:08:E0:A4:C2:5C:2A:3F:0E:5E:F6:20:91:A4:C7:2F:A4:AF:9D:83:F6:0B:50:F4"}}},"request":{"raw":"GET /ct/v5/script.js?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026t=1789497161740 HTTP/1.1\r\nHost: ssl.ceneo.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public,max-age=600\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nrequest-context: appId=cid-v1:c6d2b834-9961-40f1-94ff-46263261adeb\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=10886400; includeSubDomains; preload\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; img-src * data:\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 15 Sep 2026 18:32:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4418,"size_decoded":3128,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4418), with no line terminators","md5":"d3449c18d8beae30651d59133755918b","sha1":"56931a966705d3251fbf64c4918061379eafaed7","sha256":"c995b93eb76d5e71b992b72e41c97c6aa296dfbd95508b420775980bb48349f9","sha512":"b44d2252daf9cbb6030caffb84f1cdd43f32e5bb02626c0749a9e5c5695171a9bc242c44576532bb1f3568ce6fa06131245ce2d1466fc4389d9e3ef8ae214c08","ssdeep":"96:d7V8iaulqW4ubsnLSub9CeACDiMlAl6FYyclPfycwRcDGbK37eAyHy9CjWIch:ZV8iaOqubsOubxACD3lAcYzlP7PD8mKo","tlshash":"6191c81a79e3316543da40d912bb2109f13d05693c5494e081b9e8af3e33e6e43b7f4e","first_seen":"2026-09-15T18:30:44.560162Z","last_seen":"2026-09-15T18:33:40.599377Z","times_seen":2,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":4,"connect":35,"send":0,"wait":36,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/09/mleko-mini.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.112Z","timestamp":1789497162112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/mleko-mini.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b72f4dc53ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"59a5c-6a9967ec-76944e3c0719f9ed;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Thu, 03 Sep 2026 12:28:28 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m9tRwBiy8%2BoIt6JLsAjtFvPs%2FYjAIUINpPz8v5jMGS%2BfBKbYowoOY7Q%2BFG2Wt%2B9L8zMARTSEzN3Z8wfB%2FyvBcaJpc86LOqlBjUncxEpGg3HLCh%2BySqmlfNdqz%2Bhy0T5Dqe70jbB1kmJM8sHr9A%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 367196\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":367196,"size_decoded":368043,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.0 (Windows), datetime=2026:09:03 14:14:42], baseline, precision 8, 1402x430, components 3","md5":"c9a19926907296df0fd56c12c20a4795","sha1":"d48bae8ee9659758a432d5a27d9cabd4913941de","sha256":"6c5aad6315f107e122b5ff76622abfe8a5ad81c8f03f6bc83f5be13e5743e35d","sha512":"ca9ad44efac010e1efd6d6690e02af83be2175a34f2c6cb68bab61f1e38bb1cd8c19b966e79ef3f4eb65b667a64edaaaaaddf5b3b25526095ac11a480da30b6f","ssdeep":"6144:42O8DM27gygLt4PegMEmNDyiE5Rz8IjgBO710SVXaAQVt/t2n6JdO2gCL+AGf:ZhM2syOt4PBx+DyiE5RFgi1tAFgCqDf","tlshash":"79742374a5254f26f6c028b88495dd63af122a1fbf37431a786c3ce47f3e981f562981","first_seen":"2026-09-15T18:30:44.540108Z","last_seen":"2026-09-15T18:33:40.600504Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/badd587e842f03ab0cb88e8fc1fe9425.js?ver=e9425","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.122Z","timestamp":1789497162122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/badd587e842f03ab0cb88e8fc1fe9425.js?ver=e9425 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1bMiUmYj89BOEcqVcMJ8C%2Bof9xA8Kjja6L5benqWH5M8zf2XM2VizHlYvIHYxbGEuJbZJgHOZOTgnFd9%2Feja9yUQoKzQdGDzXKgkGiVv9wJ%2FVQuZ2%2B5mg0mbchwuazZp20pw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f5dd93ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5208,"size_decoded":2251,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5206)","md5":"60948f6d78008176f894f9eefaf3af8d","sha1":"ab977a7ec4b93f47a2c744ac67be345c6d316095","sha256":"f266695689ff2188e07aedba552bc01fe0252ba06918110d1a1ed48948907e2c","sha512":"263bd1de134351cb3727a905511b3a8f3fe0a811fde328978656653c971aa075d29181b87df3c9bb00c9cc2e89bb8e01bdf3b76d5e801f95eb0192c69aa89b03","ssdeep":"96:vZ2BZKvpX1qNBGid8VbTistlg5gmQfzHudD+OlDftagG+G/3MloF3/A/AH:vZ2BZKBGB9iROMi5gmHD+FkG/MlM3I/M","tlshash":"feb1e0632b1a2c79d9cac5ad10aa16402614d187b5c1fdbc7d74d8c6c9f088b32b96fd","first_seen":"2025-07-07T17:47:21.354413Z","last_seen":"2026-09-15T18:33:40.601173Z","times_seen":10,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/8feaacc2bf0ee778343b1b0884500828.js?ver=00828","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.165Z","timestamp":1789497162165,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/8feaacc2bf0ee778343b1b0884500828.js?ver=00828 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MxsyqAEJfcIodPlaIjNQDkdlR2xP9otabyJio9W6CWHm%2BgHfZEkTeqhekWj9%2B2%2FgvCVxjw086VcsC2HjLznmX5D%2BJ%2BDlG3sglei3QdU3IgV2GU2Gnz%2BvkmSbelkbXyWdydtc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72fce1b3ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1302,"size_decoded":1262,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1300)","md5":"a9eb7ff097b842bd86898642447bc960","sha1":"04145a7d95e8b62d9a9b2a22d6b10f7e38abab45","sha256":"cecb8854487e32f5a2f20529f276bca652c7903edbc396f95bfb70ff674b87b2","sha512":"6b0d742bcb7813fc49695ba777312ca8dce603d15eb73daf78d6b9a3c42d0c55def6d1e62e2af71bb54571e019f35a8e258f6244236673436c5695484285b3f3","ssdeep":"","tlshash":"3c2135adf504d1391bdb7f75406f52855539b840e4248caebc6a24c05b3d91532a2e7a","first_seen":"2025-07-07T17:47:21.493114Z","last_seen":"2026-09-15T18:33:40.60207Z","times_seen":6,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2020/02/Kawa_ziarnista_Venezia_Barista_it-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.230Z","timestamp":1789497162230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2020/02/Kawa_ziarnista_Venezia_Barista_it-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7301e603ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"179ad-6874c5fb-235015bc2a4b10f1;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Mon, 14 Jul 2025 08:55:23 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jvUueNa2tKBD%2B6tEUH6XcmZWEofaCNMOiEwpUGh9Bnz%2Fpxmcijeqtpe7nuQQNNmLhKr1EixNXgBIHPhtRHmMAtq7mXPpaoly9tFRvycNezhn2aR6CDh%2BmkmMY0UWwsSl1hC9PzIPnPtiZo9%2FBQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 96685\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":96685,"size_decoded":97523,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=14, height=1200, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1200], baseline, precision 8, 450x450, components 3","md5":"aa7c1755a3f83ca5e2f1b7f50285d1e1","sha1":"63cb83a95aeb9e2a064c184dc63e3a452e53e1e9","sha256":"fe75eeac3d18a5b6845981566e58152f7ed89800876774937ae23622fcc834cd","sha512":"6a68fec11832b1bc4380c4412990ae97007c6207835de13b2eb01ceb61d88b08eeae67f7514cc746a4eaa7db4004bda98edb081b4228a0f328c3d9a38d14450e","ssdeep":"1536:N6Avx+2JJpHg4N8VtOPsLaJPqWs6ktvTedR9huR9Be21Z06rXC:N6kxNJJpHr8/t+dqv6GypwR9Be006rXC","tlshash":"4993bd786b72a91be5cf8931d17143d287330a46ca4f5131f05dc8d2a737b986b88dae","first_seen":"2026-09-15T18:30:44.566303Z","last_seen":"2026-09-15T18:33:40.602647Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2018/07/dallmayr_logo-1.png.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.316Z","timestamp":1789497162316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2018/07/dallmayr_logo-1.png.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b730befa3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"bc4-6a04633d-51e69ffeb4086d46;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 13 May 2026 11:40:45 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FtHYVHS7%2FevhzNy8d4nccOnq1bNDl0il65S8pZgGrA3CGS77E5sFsNJNHqwhdSCeB05RBDGIxPwOrOru0STwZJ8FXXijUhL8ggtbbUgVemkSiDstV2oXqh%2FRb%2BJTfaaOHDoPiVbYC2zmOkdYXA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3012,"size_decoded":3845,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"89567de62479e697ff8527deaef20f7e","sha1":"a8d431a817e6ff78823b88745aacb26c82698b4e","sha256":"cd1b0f13bb02cde96b396d5c44b673544a3ebc42eb0b50227e54f7001407269e","sha512":"5c50574e7ce761b20fac33e31f627ef2e67a6f70f0b8085cc7665b274cc3a05ddf250c2fa013881feea6374482d95f1564477e17e2e9ae989fdf6b9f28163394","ssdeep":"","tlshash":"15513b92e7e1e707d04453b496628723eb6f6b711618d377930905410e89cc05f2e7ea","first_seen":"2026-09-15T18:30:44.464014Z","last_seen":"2026-09-15T18:33:40.604057Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/10/Melitta_Barista_SE-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.241Z","timestamp":1789497162241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/10/Melitta_Barista_SE-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e873ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"181e3-6723763b-202687fb9a8d2482;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Thu, 31 Oct 2024 12:21:15 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bd1f7GGwoY5Firdv75OjgxTsd%2BgUmZv%2FPk%2BZTvBKhjr3Zlyqvw%2B%2Fv8Nb0a1pElRwj4TRYjf7%2BRZ6sPU7ohbDE0DzMXap4kboRRG8vu4NeMyhUm3NB63ZpO%2FRpex1HICMW%2Bvnxcs97kQ1rtHAbw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 98787\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":98787,"size_decoded":99635,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=15, height=3000, bps=194, compression=LZW, PhotometricInterpretation=CMYK, description=Barista SE, orientation=upper-left, width=3000], baseline, precision 8, 450x450, components 3","md5":"0126b7ecf9e1f8877ddc0f2c69bf9d25","sha1":"a68892950a9e0fcef2a85a3d05984b68b685607d","sha256":"eefb7d16fe76de1ebe55a37f7d7793f57ddff51c5750e58911fe2a29ef3960ee","sha512":"2936884a19f533a01f7ae0274f48c0c77fb7fe27877cd64b21cc94fbc66c0eda203fa05b5cb6d5a9f98f1ccb9be97ad95b3fd7acac27d7a03b60b86e0105cc08","ssdeep":"3072:o9PqOZuL8aGaNLuqfCEUNIuLzq35JgJc9NBd0xKNIt:otuLlLuqaEUqu/M5JTfBiKNU","tlshash":"b7a3d06b7621ad00f6e4ab349fad52be1f270ea1ceb01064f79c44613b513b8cdce955","first_seen":"2026-09-15T18:30:44.400972Z","last_seen":"2026-09-15T18:33:40.604614Z","times_seen":2,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2018/03/about-icon-4.png.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.262Z","timestamp":1789497162262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/about-icon-4.png.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e923ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"71e-69f9e1a9-d2757dde0453690f;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 05 May 2026 12:25:13 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kl7gx2nV2oz8vi4DSaYVuqz5gKGEqOCzMUlYPcvKp8t%2B%2F31xrF%2BK74aSMZMNKiwF8l2HklwqeRN5C%2BX3apw1Z35V9GYamCuVmDjb%2FNXFjRkCf%2FFPRIr2cmLzWOPfz%2FMVBPYQn4Bg%2Bi00ylaGhQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1822\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1822,"size_decoded":2665,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3012e8ef748f053a76ef6cd95f2b1520","sha1":"64b8da0cf56f9f0251a2dc23728f81633879611a","sha256":"0e1759908f5cd846acb4e851b0f0b3544a5de3477c77be4bf60b63667a516d0f","sha512":"8a28ae7186b2e39c708c5c56e3afd9e4f6faa0bfeb1bec68f923a159e8ad8894461dfbb5cde7075ef9c50067de67884860112bbe26b1962ee62c185209f452f4","ssdeep":"","tlshash":"2b31d6e65705ab47e661fe727d5aeb29c312be0282a9d14f070130065fc66c1cdbda87","first_seen":"2026-09-15T18:30:44.648736Z","last_seen":"2026-09-15T18:33:40.60535Z","times_seen":2,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/08/Coffix1000-mobile.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.050Z","timestamp":1789497162050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/Coffix1000-mobile.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b72edd7b3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"62b7a-6a8bf37b-4c993a543415aec6;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Mon, 24 Aug 2026 07:32:11 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cXHLJlvAZaDiLSV4x3VNE%2FZAj5pz3horprrtDgTsm0El9HCyUPKt3MD%2Bk4F3x6IVuCoPvlgfJUI%2BvWZn7E%2BEBXa%2FCn58xarKdasRtuZr4XInHUwHj8rFmiob7t%2FJIqjgWAniIEJpUStNZWZrkA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 404346\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404346,"size_decoded":405189,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.0 (Windows), datetime=2026:08:20 20:49:11], baseline, precision 8, 1200x1200, components 3","md5":"21f1ab3a8ffb813d5b13617792e5ad4a","sha1":"f4b8f0334ec9181a604460d37a33655c8d2395ab","sha256":"55ec457a884c3bccd6d11e02bd9010c636d1c1abe6ca290d360b414494141ccb","sha512":"345a7e84bc50794e7a5713631d5213001e106160acaba01e79fbcde0d6ed6e37ebc3ad440281065f8a1d1bbcd7ba92f8bc4e19c9c7def580e80993a21f24e8c8","ssdeep":"12288:/sessTddk+sS5XBoe5W1VuwOW//IXDt78h4ZGw:/3NjxX9gqTzt744Zd","tlshash":"9a84ce301e3c5bd8accb3e236690d82086345fd042476be7ff7d7a58a7a9a49106563f","first_seen":"2026-09-15T18:30:44.523443Z","last_seen":"2026-09-15T18:33:40.605919Z","times_seen":2,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.080Z","timestamp":1789497162080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 17 Sep 2026 18:32:42 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QWgntTP8ZyqjBYmzQg%2BWqQGKFKOUQJ2oWSlLdimMMdVRRWtzILgyvrqSUHe7IG39lIxsy262kUL1JuyPhBoBSwwyLkp%2FlC1qVJ0tbrMYc9wcY%2FDkyV8vvm24IOoEJX04gInY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\nserver: cloudflare\r\ncf-ray: a3b9b72f0d9c3ca8-CPH\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1288,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-15T20:50:07.270185Z","times_seen":434771,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/12/lazzarin_logo.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.314Z","timestamp":1789497162314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/lazzarin_logo.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b730befb3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"32be-674eee63-51ef5fcc7b3fc2bc;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 03 Dec 2024 11:41:23 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W1mQHStvm5XUQlj8KTxYZLjuITvuwFyvSmL8CJas%2BlbxAEIIby1H0rg3XJ8NSGzE%2FV2wV3B6mcMhTtlIfBD0BKFc2npc59mFKqJEBZWZk0%2F%2FQ3m4ej9fhpyUvg7Ittz5QNZ2%2BKeyTPb%2BssQ3Fg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12990\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12990,"size_decoded":13830,"mime_type":"image/png","magic":"PNG image data, 105 x 61, 8-bit/color RGB, non-interlaced","md5":"23fd005d3e045e8deca1182057cf95ab","sha1":"149cc86333d289c0ca19235a57a5c3f4b59bbe27","sha256":"a2bb38b2fc9f392ec9b26f1bc9851be66b3b70ae829ead2dbf59f7f4bd0b7ad5","sha512":"41405a022bdd242006c451809ca980b7042801801dd8cf92767c037d7aa7ce4d36f7e36c43705a052ee954cca4383bdedb0213d5aa24d86eac99b9e04409b77a","ssdeep":"384:hsx2hjnyLP3AyemWsxHfun1xbRxKezyWyyLk:Kx2hhyCsx/uLCehlk","tlshash":"0242af7da154d8458449ab7ea1faa387ff6ba3b41601440b3be3499b14708f1ca6d38b","first_seen":"2026-09-15T18:30:44.823132Z","last_seen":"2026-09-15T18:33:40.607005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/4c99cfd6b0c4b63a9b730c9a4520f822.js?ver=0f822","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.145Z","timestamp":1789497162145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/4c99cfd6b0c4b63a9b730c9a4520f822.js?ver=0f822 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=792RML9%2BWLJ9j36vl8GaH3hZl0TwzF%2FY5SGC3EcMFf2f0jMzHy78pfOPObOEPrRwRu6U6WGXzB69zr790YElMH8SULNelJa54CuFMmYaZjRcZjz4nzrqQE7lVNY6muSqNDWp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f8df93ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21466,"size_decoded":8157,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"51f55b903492a2e5d1db8fa8ba88e813","sha1":"87229051bcba805648e433f91445cdc8227827d4","sha256":"990f58dde2f1d4e70bcf833cd9775c2a3545830b8a6ff33e3954d5fbe4bfcbb5","sha512":"10a7be21d9c9d53c7bd75e9832c3639c815740444bf424abd306eb12a9fcf3a7eb1091e4755e0c45049dc952401a3b93659104a13966bb697714b36ac35ecea2","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvs:iS33ZdvK47ku","tlshash":"c1a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf4a8d8da3c7eea95173f79","first_seen":"2025-04-16T09:36:44.42814Z","last_seen":"2026-09-15T18:33:40.610895Z","times_seen":7111,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/00e18008b4e5030ebc9431d01d589c85.js?ver=89c85","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.117Z","timestamp":1789497162117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/00e18008b4e5030ebc9431d01d589c85.js?ver=89c85 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m5X%2FCR%2BCxPC6jQvrjogukPOjEsGCfiW8XXRa64yfndjBxJ3K6OPX1C5Iob1hb7wWxTIH08wbBd7SnR3QLs5LaWCVEtSX6D0fW5LHIXJ8Id%2FwukwlKlq5wcF4zuVHn0kCk4ta\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f4dd33ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7848,"size_decoded":3310,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7846)","md5":"1af295ca6b0ada9bc8d9800177d9ef42","sha1":"58aa780a65d4c671dc9e0e6f2e10b3c967e5ddb6","sha256":"47f666ad20c302f7c1c29496dfdc15ed6d25c5461773ad5b4d6fcf8af2955802","sha512":"39dbe88925376a6d50e0849c0331b0a8a975b27b6eafe0928e38e6cbf09dd5f53e51b4123ee4a40b174805c4568edce3194a53ec0f8bb797689f38608d31b976","ssdeep":"192:ch1T4KTWdMh7Fel2MJJnK+YM8QeMzFrR4JBuK6kCsCs:ux74KM2MJJn/YM7eMzFaJBuKnCsR","tlshash":"47f1ea89e35181f2919f71ad51af9a0252b69e37d708454034b50df52d3afe432e2f2f","first_seen":"2025-07-07T17:47:21.403621Z","last_seen":"2026-09-15T18:33:40.611384Z","times_seen":10,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/10/Melitta_Barista_SE_04-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.240Z","timestamp":1789497162240,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/10/Melitta_Barista_SE_04-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e8a3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"30b9e-6723780c-d98651238cbbf9e3;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Thu, 31 Oct 2024 12:29:00 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WF3hd%2BIdX6LwoLbZ%2FzG1GzcomTLQZytZ%2BfOT2B%2F3C4%2FUh2QFX9bky40TGhJpdE4ydhm%2BPgLD9KhwZP3TOlBXz4E2JDAeMFmIGYlob5YLAb%2BkodrsL%2Bcq0kvpoRJPSj3FWQU4ZciHv8hZDWlZtQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 199582\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":199582,"size_decoded":200429,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=15, height=6336, bps=0, PhotometricInterpretation=RGB, description=Barista SE, FAM, Rich Content, Mood Content, Handling Content, Coffee Enjoyment, Touch-and-Slide-Function, manufacturer=SONY, model=ILCE-7RM5, orientation=upper-left, width=9504], baseline, precision 8, 450x450, components 3","md5":"d1fbffed34731ca726dd2aecfc2a6506","sha1":"9d3454d6758fde8fdf7f1b745bfe7d22545c0c10","sha256":"f63d40dd5b3d88b8f0cb9f7a1eff63dff4b25c37673d38b4f0db1d83f22bb112","sha512":"9513948d1181c264f7907b4816ddc2a694c0ed32db99603d2801dfc8a05141927264b2abccef38ca2f6b0d87c45415910cc6438ecfa740888442e22a7c6509d9","ssdeep":"6144:fCl87vSJoFFrLZoo8J130eeGI4PoNMiUbtw:TFltopzAgPo/US","tlshash":"23141218f2115658e7696b7498c9d1cc6773e7c6dc8202223a8f2425cf72eddaccb0b6","first_seen":"2026-09-15T18:30:44.406138Z","last_seen":"2026-09-15T18:33:40.611888Z","times_seen":2,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-15T18:32:40.561Z","timestamp":1789497160561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=0,i\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: zstd\r\ncf-ray: a3b9b725de64cd9c-CPH\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nlast-modified: Thu, 03 Sep 2026 15:35:02 GMT\r\nlink: \u003chttps://kawawbiurze.pl/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://kawawbiurze.pl/wp-json/wp/v2/pages/206\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://kawawbiurze.pl/\u003e; rel=shortlink\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tC6HKOt%2BVH9%2FT3XJNHGQ4qPgSzNLik8LfIXlC78JvxjYkTu0VkcM8f3i5BRD9lwVKvZ0cqmtK49O9MXvVuDtF2Y159%2B7rzvNeFRcU%2FXBf9QRnokcSl%2BbCFRyasWlvjkpsYBXX2cOyBjSgwoeSA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\np3p: CP=\"ALL DSP NID CURa ADMa DEVa HISa OTPa OUR NOR NAV DEM\"\r\nx-dns-prefetch-control: on\r\nx-litespeed-cache: hit\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T20:51:43.703029Z","times_seen":18482263,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":3,"connect":35,"send":0,"wait":260,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-includes/js/jquery/jquery.min.js","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.510Z","timestamp":1789497161510,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 15 Sep 2026 18:32:41 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3NpWmETkqJg6CBUj7ZAV4ZcJMmUv1dEnI0La2Cmhytm3YpK7OxO9MapcTTl6xgh79fwo%2BA4eVsCDvTZ1MrK4myYPfShnyup2EQzAUpaDJNR60PI1x5ojI%2F9Jr%2BrQjngjghRA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a3b9b72c1b1190dc-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":32836,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-15T20:49:56.103392Z","times_seen":1057547,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":97,"dns":0,"connect":16,"send":0,"wait":43,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.781Z","timestamp":1789497161781,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 21:10:25 GMT","end":"Thu, 12 Nov 2026 22:10:06 GMT"},"fingerprint":{"sha1":"79:90:42:E8:74:20:D2:D0:39:4A:8D:45:CE:B8:4F:AB:BC:6F:44:CB","sha256":"19:83:5B:D3:2C:DF:FE:44:CC:51:73:F6:5E:98:2B:5C:42:6D:3A:01:F4:37:63:E0:EC:11:45:78:B5:24:15:3D"}}},"request":{"raw":"GET /turnstile/v0/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 15 Sep 2026 18:32:41 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public\r\ncross-origin-resource-policy: cross-origin\r\nlocation: /turnstile/v0/g/330e41bb475c/api.js\r\nserver: cloudflare\r\ncf-ray: a3b9b72e2bad3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T20:51:43.703029Z","times_seen":18482263,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":6,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/css/f21b75b4cd577831db66fb212b893289.css?ver=79359","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.966Z","timestamp":1789497161966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/css/f21b75b4cd577831db66fb212b893289.css?ver=79359 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-turbo-charged-by: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: text/css\r\npriority: u=0,i=?0\r\ncf-ray: a3b9b72e5d223ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 204\r\ncache-control: public, max-age=691200\r\ncontent-encoding: br\r\netag: \"11b2ad-6aa108e5-ab7a28c19a43830d;br\"\r\nexpires: Wed, 23 Sep 2026 18:29:17 GMT\r\nlast-modified: Wed, 09 Sep 2026 07:21:09 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BB2qQKsfefhsuLWamCphjrcL%2FXXuF5nP3oXY7OIeeUlUMSak9nv%2BWB7Dwv%2F7m3BRnQUC92yAi54z0gO6bG5gCqrkFoCEfuc4P0FJTLzTfcFguNXhWX%2BhQ8mGnBeVonxsDP0%2BnlLGf%2FgXrvW9VQ%3D%3D\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1159865,"size_decoded":153261,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ff520d4419cf0c25aafa3f1ff55c6925","sha1":"68344b3f609ffbcb2c86996eacc12277ae924e1e","sha256":"edb9e86620a4a664c3faa21a3133737436b05907f724689f66a2c4d640bcc104","sha512":"dd274ae1947daac3121d42150121fdc02f4fa1fecc51cbc05d26bb822e24ef2aeab922f8a2a7968867467c22314e0206e6c08e478843183446136a4cd3574ec7","ssdeep":"24576:bxezqlIhfHU+D3OHnne8Ncb2zbuQdbfxfeSVsfUVp49xBC3:bxl3uQN2fWp49xBC3","tlshash":"a825fb53e294113b75b7822cb1e0fe883168e562fa839bf6f915d214c2d72de11a378d","first_seen":"2026-09-15T18:30:44.430691Z","last_seen":"2026-09-15T18:33:40.61249Z","times_seen":2,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/07/Baner-na-strone-glowna_desktop_1200-x-1200-px_webp-scaled.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.060Z","timestamp":1789497162060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/Baner-na-strone-glowna_desktop_1200-x-1200-px_webp-scaled.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72eed823ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"1d5f20-6a5e08d1-517506a01e5e5be5;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Mon, 20 Jul 2026 11:38:57 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FSZPSVuLYkqp2mh6y2FgK4YFTmoLSrNMounsJIc%2BVesV8KVt8kKtNryfwDE0bgAS8ng0o51upU5Fvk7igP5DX%2F47FWsww6%2Fk%2BgUwBCsxQOLp1QK2yRewYach4vO%2FJQnaVLDrl6VfFBZskWl9zQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1924896\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1924896,"size_decoded":1925741,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2a4742fce3be93bf026d7d5c9b764dd9","sha1":"7a5c218482038f3d11ff38a6b301f40a78347a62","sha256":"68517cb56dee3bfac546dfad3c62cb21a634bab05d3a3123ce5b7639f0acf817","sha512":"cf026e7544b53fce358f12b24d669b1815c8737692c7464006e6abaeddbe9e3dbf17cd12b40bc0c6102641cb879bfa83a403cbae6bc5dc18cbe49ed19cba8247","ssdeep":"24576:ydTNR6y+Chz/sS927Icjoycbgh+045EamkhnNwiH6:qTNR6y+Wzng7IcjGbG+r+/Qnag6","tlshash":"cd2533aea9500f7b81647916f367fcd3a3dca104fd646cbc614376118bd49eb20e226b","first_seen":"2026-09-15T18:30:44.488214Z","last_seen":"2026-09-15T18:33:40.613044Z","times_seen":2,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":542,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d3bo67muzbfgtl.cloudfront.net/edrone_2_0.js?app_id","fqdn":"d3bo67muzbfgtl.cloudfront.net","domain":"d3bo67muzbfgtl.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.233.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:43.019Z","timestamp":1789497163019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /edrone_2_0.js?app_id HTTP/1.1\r\nHost: d3bo67muzbfgtl.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nx-amz-cf-pop: ARN53-P4\r\nage: 48624\r\ndate: Tue, 15 Sep 2026 05:02:19 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nserver: nginx\r\nlast-modified: Mon, 14 Sep 2026 10:04:29 GMT\r\netag: W/\"6aa7c6ad-96e4\"\r\nexpires: Wed, 16 Sep 2026 05:02:19 GMT\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: QVJJwOnLGlQ26JTPGJUR5g8GNr_Q4mWy71ALlIk8FoWGIakhw9okag==\r\nvia: 1.1 0eb659b3177cc8c6d47a4ad42c31ad9e.cloudfront.net (CloudFront)\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38628,"size_decoded":10942,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38575), with no line terminators","md5":"5a30bf78441dd1213021d77df99e7909","sha1":"9996e095bc955825e459415c84b2de109e8c0788","sha256":"c2dc1938d3d978e45242cece1a8f1c62e100bad93efb6066204d19e06e7c3f71","sha512":"cbdf6f68cfcffc53114ea18b7b957327f675f2f3d71fcacb8800f112053a46d7ffb5f592037c773757d859659d125ff663214ddc2d85372bd43db5f5a97ad9f2","ssdeep":"768:W1swp4OhX2BNOb/JIqIprCaIsIlVIpIdqD6yQSgGN+NMtWsNaxhShmsDNg3o6cc6:sLhmBNObJIqIprXIsIlVIpIdm6DGZ8sH","tlshash":"0403d791b47ad1246077313464ae1a8cfc7c18aa5ec5848573d9fd742bb0e4fb22bb2d","first_seen":"2026-09-15T18:30:44.677661Z","last_seen":"2026-09-15T18:33:40.613584Z","times_seen":2,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":23,"connect":17,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/09/matcha-mini.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.025Z","timestamp":1789497162025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/matcha-mini.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=3,i\r\ncf-ray: a3b9b72ebd633ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"35859-6a9967e8-74f305d28dc26d2b;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Thu, 03 Sep 2026 12:28:24 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RM%2Bj8OzePKMngI0QLTOfxv0SsxzWRBI8AVKaIeTG79KjNH1hSMih3lzkfYs4QdeogWtwxtUMckipJBxTi%2Bdie8lFNVaOka%2BI7u2WxN6gedav10r0GeueBah9oC04vKAQUNxhfUEDWBki4hWL0A%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 219225\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":219225,"size_decoded":220062,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.0 (Windows), datetime=2026:09:03 14:14:23], baseline, precision 8, 1402x430, components 3","md5":"4d899fd6b095426ff963ddf2ab44e584","sha1":"c05ee0b962d1064d53ebfcdce9387a3418873037","sha256":"6161c53d95592983a940dfb9039c5c4533133831cb3a9ae695eb08ecaf8f1e22","sha512":"de52d59d5a3817429372ebb5f682e567f3d91a57ef1eb4c323f2505d60f8f81008d83dd037071a392d8cdcb1465b53b230ae09efa7b828bb37452f31918fb266","ssdeep":"3072:uWgtxrUPmKRfnTrNGBDukiJBhRcnJRXuRNwTztvXp8zRhBA7IrOdqN/SpzCqjL5H:2xr2VNGpuinvXmNkztpYR47IvZSp3pH","tlshash":"a324120af76d4d70c0e96ebe096dcce293634ecd2b163324b89ec1d9776e281bd46412","first_seen":"2026-09-15T18:30:44.792164Z","last_seen":"2026-09-15T18:33:40.614158Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/06/Baner_na_strone_mobile_1200x1200_Mamma_Mia_webp-scaled.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.051Z","timestamp":1789497162051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/Baner_na_strone_mobile_1200x1200_Mamma_Mia_webp-scaled.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72edd7c3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"30afcc-6a423f00-160a0d3389b7c77a;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Mon, 29 Jun 2026 09:46:40 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Ek2blnzXcEskqV8DhhtIA0FeLO4hyqkWymVCZK97PoF0B5vOBC1cRDeFg21TIlBGVktd%2BGYgVv2iFIGUCDKKampafRKJRLc4w6S0n9lE9nF3eZ0AceZa1mmYhGLuLfRsuP7bkRhJpWHci%2F3VA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3190732\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3190732,"size_decoded":3191569,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9d7e908911500f26a509a9daadfab3f2","sha1":"31a9ad6f72c6efbab794ebbb8a1716042b58153b","sha256":"ef2a8b43da4ee932909725f793cb0a32cc48e271d09947c5f9c6d3d0092cc320","sha512":"9eb903b2885d721d8ca3552926155c420d4252feeeab1a96b2e2004ae8f04309e2a46f13b1f9ee45fe663d5495cf924778fda2d5f81b095b8f172ac459236b3e","ssdeep":"24576:BcEnzdaFC74HOEHYEaAtQkG3yOC8sPCv+0XgWNAR541+Mqg7Uk0IYle:BlKMlE49MY+dTA+NN3Pe","tlshash":"93253319ecaca6354775354b068314918ad705be35209bfd8493c25a12ff3ebb328e7e","first_seen":"2026-09-15T18:30:44.456926Z","last_seen":"2026-09-15T18:33:40.614714Z","times_seen":2,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":775,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/12/saeco-dystr.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.208Z","timestamp":1789497162208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/saeco-dystr.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72fee2e3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"2ef2-6759b1e9-beb06536793ed9c9;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 11 Dec 2024 15:38:17 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0KP4cUo8SKEQG78B0tiWofVrGJjD8F875NAiFmZXylag5rc3HwsOPFxFTvs0HQppEPZAUk2si1aCPqdvI%2Fc6lqKV595mq74lFP947sH%2FLwQbrqBo8f%2BnitFnxB5gjA96xsWbFmYF5NSWxKVBOQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12018\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":12018,"size_decoded":12853,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2d9dc97c348233bbb26f3419ce93cb86","sha1":"4a42cf8e18edf5a3d1b71aa5c886fa734925db95","sha256":"704fc29dd5f21de50c13d9dfa1d04848776952a2afca64b067847e8a9ee97489","sha512":"b355e32227276902991f4d613e822f8ac80dcf1724a8af580dd922663243033371dbb625759a8bc6ca632ef322f976e3a4ca88920a936cc4ad8e70599ba65883","ssdeep":"192:S8kavroUh0verh+c9tUBvVaSuiJjx+WGoNeWUt3WpM/w8lMZ/tI2ZmFwc:FkaIerLfUBvzzJjx++NhkmpMvl4/a8zc","tlshash":"7d42df06dc9aaf47277677a467c62b05fe208d24c468184cc73cc27a1a38646cde0b58","first_seen":"2026-09-15T18:30:44.428003Z","last_seen":"2026-09-15T18:33:40.615428Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/themes/enfold/config-templatebuilder/avia-template-builder/assets/fonts/entypo-fontello/entypo-fontello.woff2","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.813Z","timestamp":1789497162813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/themes/enfold/config-templatebuilder/avia-template-builder/assets/fonts/entypo-fontello/entypo-fontello.woff2 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6CmInbvKxW0dAeYTBN%2FdwxlgKBNofTvkOr%2BqOXnUXr5wOToJlGRU2NSNvPCsd1QmVVWdqycAjF8Lznr5oQ7MfOPjzUvOrPUbfOsbTxTuilKRTcXM%2F2X2pbGI8mMX2q56RzQ4%2FxOKZDmWF8CAXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: font/woff2\r\netag: W/\"9be8-6a7e285c-27d82c7706bfed46;br\"\r\ncf-ray: a3b9b733a87f3ca8-CPH\r\ncf-cache-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 205\r\ncache-control: public, max-age=691200\r\npriority: u=3,i=?0\r\nx-turbo-charged-by: LiteSpeed\r\nexpires: Wed, 23 Sep 2026 18:29:17 GMT\r\nlast-modified: Thu, 13 Aug 2026 20:26:04 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":39912,"size_decoded":40725,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39912, version 1.0","md5":"b24a50124f938a9698219b7f1dd7a79a","sha1":"55aa7750a04f700878d1efc094320b647f18e395","sha256":"23fa9cf5d6c8516350beba0ada66c1bd87998b14711c9be657c5dcfc13fbb146","sha512":"e3b94ed8df5072ee913fb0425f321bf1cbd17755e1483efdf7c01ee0f64ba3113474f62a7aec5d0daf7f450b5409f4788666bfcb1cada51eb1d9d4b0766bd839","ssdeep":"768:qWzTk/iH0uyoOkW8qw/Bip0dP6B8peF9pVkeLxhpLQzbWC/SLpKk:7fuiUuOklqwMSdP6FLLxjs6six","tlshash":"7903f1dc467f2910374e2b734498690a7cd3096c6ae352fa9837625912889cf3b5aec9","first_seen":"2024-08-26T18:17:38Z","last_seen":"2026-09-15T18:33:40.615975Z","times_seen":3393,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/f239141a52711b7ab1f7f1578ff3899b.js?ver=3899b","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.987Z","timestamp":1789497161987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/f239141a52711b7ab1f7f1578ff3899b.js?ver=3899b HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qoHBDFJojpimdvrCqCFaVKUHdWsT95dPDLbfo4SIy3YIQiylfm%2BLBEyXebHsaS7rHscBn%2Ff5Mc4yhjWdFSyWrTZOIoLtcHPkBEYJhqLlQVuXtc0AW83Jhx4JFX2sAhjOdyYw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72e7d423ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16888,"size_decoded":5834,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2338)","md5":"cff12e686e8eeef7545c0d07f2b9bccb","sha1":"2acd4a6fb0f6bcaf803dc29a583ab9e21e0935ce","sha256":"b17a59b0322767b307563a6abb2e5683bb1de4dc74a490ae3cf11277a84b4c46","sha512":"95b630ba5d8825ee567118c147f448ba66102544cf23a0a46d0935d7978152c3d1366ecf0f8efd522ba56d08b0867acdb343213c45374e9214634c7fe6abba0a","ssdeep":"384:8DhC6s2oHyLgbgrzrXKDKhtDdWFl56hbsFCA5isCsWElpAH5rNHC:8Do6SHmK2vdWT56h1GisCsWElpEu","tlshash":"1e72941a335a349f44ead0b6786f610e607a351ac21d54b09669c3f4df74cc3fa3ad2a","first_seen":"2025-07-01T12:26:32.637375Z","last_seen":"2026-09-15T18:33:40.616504Z","times_seen":7,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2022/01/Venezia_Barista_2kg-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.267Z","timestamp":1789497162267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2022/01/Venezia_Barista_2kg-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e893ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"22d9b-65f85532-76075a68111c5d54;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Mon, 18 Mar 2024 14:52:34 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zw3GHTybkOYQew7jGVMiyqtOaHsVi1V7cE7cHgBtXl2J3vVJ%2FKinWBdLfiSxlw0q1p9XzegbcLxXNvPYsQVqOi9ZEIb%2BLjYWsdSl9xVMA62EO2RiJxjGNM0Cm9OoAsdKTalpX1f1VqTZzb24Ug%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 142747\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":142747,"size_decoded":143582,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x450, components 3","md5":"b3cdf779bc0742fa03476dfed30cbc15","sha1":"a9e4a2624184b6813019a72c0df8b5871a87b2a7","sha256":"bf1127c560f4211af8ed720979d096ecee0f39b8d99724e7bf1492961a120e4a","sha512":"113a7ede9f438afa242143cbf857bf7367c65cd6e9a9b0256b5e5db14c942cbd9fce6671ce9fe43574de8bf22ecf78fd392f34e87ba80e3e4dc1fab2aaa60437","ssdeep":"3072:E0dChltNKmoZCJbXEle46O8PQ5SS6kFOhWhCE8qVkkIOao3av0:EI6AKb2JP8IsESzOacav0","tlshash":"dfd312cecfc1f686070fe81758af7d6e4b8060e4f86141875679ca20f51ab8db251abd","first_seen":"2026-09-15T18:30:44.8604Z","last_seen":"2026-09-15T18:33:40.617037Z","times_seen":2,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/942080fb03405861cded1c3fb4806430.js?ver=06430","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.992Z","timestamp":1789497161992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/942080fb03405861cded1c3fb4806430.js?ver=06430 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=muPKuT2ZFahnMAVoQQnh1bUovpX8rF30ZccxLObuk1zBlGqkbcDEP9%2F2JLsoZgVP3uml28XoTRKbZp5Aa6U9A6Sl5JBChuyPWdxeHcLTzhAsck8HdJ03mknG7lTZdpo%2FjlkN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72e8d483ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21346,"size_decoded":6943,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1647)","md5":"4a4911b661558ef5806f039e214d46e3","sha1":"1415cd822084ddb8d33072c6f88e2d5b9aec693a","sha256":"413d0fb7795d35265f4f346f3361bdbe53cba8a3e214b9b4edba765ae898ea15","sha512":"dabd32bbc2ab7aeb8be57c0ce63e565bee73a2ff3bbb392f721a92de34c720a215b87d31341cdf78e5241091c9b39d0fd30339038befdcfeede79511128792f0","ssdeep":"384:Y50Yf5kE+xUvCleyZ9iX1zD6vlXA5JGhER3CEHZcir74ROnEkMcykuVlT+aSXd7o:K0YfNvF69Y1zD6vlw5VDciHjnFPa8Fxm","tlshash":"eaa2e968b4d2191b20a7916d001ad799367760662613e76832fce4f52f3cf9232bbd74","first_seen":"2025-07-01T12:26:32.656626Z","last_seen":"2026-09-15T18:33:40.61791Z","times_seen":8,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/e03a1c6563bb586a4d9471dc486abd3b.js?ver=abd3b","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.094Z","timestamp":1789497162094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/e03a1c6563bb586a4d9471dc486abd3b.js?ver=abd3b HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YBBeUIg3oM1Rz2zrQ2pLZifLYlRIGP10JHBK4w3SfXEtKHsYSzsH%2FHEiHecto2mYt3y4%2FQfA%2F2Y0AEswLMll06XwO%2FOpx7SFHKzWJfgnIrXenJ58ZewL7bMrV94%2FtSOENqh6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f2dac3ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3904,"size_decoded":1752,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3902)","md5":"c8ec5265b91e9b40cc896fbc2682c14d","sha1":"9b8c87bac164ae947f872bbda48a5f1246fe16b9","sha256":"bed9197ad806f2aa5976145f29a766bbf8cb723504f2cfd78518f8f3977a3f92","sha512":"dd38f02fc240ddd24daedd1c890bfe87a49f9c3c47379a91ab1b2eb206a06826a35cfbd3d7e8ff87b514e76f56cb9bd8b96da818142f6276e378f6ecae72cdb4","ssdeep":"","tlshash":"e181ceece131a6711efaa837947f8d5674169e7932de451038a3afb10dfc9280356e1c","first_seen":"2024-08-20T15:08:04.959782Z","last_seen":"2026-09-15T18:33:40.61925Z","times_seen":11,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2025/10/ekspres_do_kawy_jura_C9-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.221Z","timestamp":1789497162221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/ekspres_do_kawy_jura_C9-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b72ffe4b3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"17a1e-68e3d466-9a7c388abe1b2302;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Mon, 06 Oct 2025 14:38:30 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YWyLaxsyf%2BbQ70sb%2BLXIODoB7bGN0G3UJEz90%2BziLG%2FTICWBTzRlyWvnjR%2B85W%2BLtkKoApI%2B42R7r2rB%2FoXDSefvYcG5NVgWmDqOcxTUu36Ikd7NMY4D9kFCgt4O5yFwmIEeIdDujDjMF1sVBQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 96798\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96798,"size_decoded":97644,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=990, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=900], baseline, precision 8, 450x450, components 3","md5":"77788a2770ca070334cbd3566d251bf7","sha1":"46a6355c3ff11716e0cadc4b259e2e81102e1b92","sha256":"92718abcffed8da14f3a2740de1ba62012a12bd76a5d3081d41841f8e7d17cb5","sha512":"4e162884623220c0a3011e613abbeea22a304a7217073195d0a1e893977482ef405d18e5310ee672c5e1265cac2847f75ffd3ac3b1b073ab103cd04e983fd36a","ssdeep":"1536:GyPmdrs5dKreKgSzZO2BBZ8wqbGV5HIKtedd3i8Xfj4TWkc1qS0hNYWNKUSHT9Vy:GyedIvo+Sj7Add3iifj4TWkcsSOlK3z+","tlshash":"a593f1e079c35f02d8f685b043a26ba0767315dd878b7881be8e93c2bf661c6cd025b4","first_seen":"2026-09-15T18:30:44.808194Z","last_seen":"2026-09-15T18:33:40.61973Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/12/Gaggia_logo.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.299Z","timestamp":1789497162299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/Gaggia_logo.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b7306ead3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"23a0-674ef285-2129067d089ea999;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 03 Dec 2024 11:59:01 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r4O3tUmPN%2F2d81GtP%2BfHQJ6e9aneybeLaNb4mexR6vDx%2FMcUfW%2FYy2IGqCyMgJEcx%2B0RfMvQfLfZGG3ZBFzx20EGhjOHCMzEccjUbZ1MhcdAvhniwDqPl%2Fpe848QLxrHas7AnHuHKGkG4CI91w%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9120\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9120,"size_decoded":9959,"mime_type":"image/png","magic":"PNG image data, 173 x 61, 8-bit/color RGB, non-interlaced","md5":"22a3283fea09d9882cf0eacd3c90ddcc","sha1":"4b6cd965f9b3bafc4b0473f3f1cbdd743ce3252c","sha256":"ce615735ae55e9563316add64a9a02d355ff5b42db1f064bbbe1828346c616a5","sha512":"a94e036eba024aae9b12b4cdb5395284d4ea6acce66805428298791d8e454c0d5524452e8ba1f248ba3319349cccd9a06d2b77b41e0a091ebd33a89d07e03ea3","ssdeep":"192:NCX+w9hUMRwl+knSz2M6OT+cMn9Kp2evLAN03+rJdxfN:Ex27nSyqLp3EXl","tlshash":"7612bf4ee8d4e8607110ef5fb1f692c3b99e0b819be7400579ca5c13b6131e2c72f08a","first_seen":"2026-09-15T18:30:44.502545Z","last_seen":"2026-09-15T18:33:40.620271Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/08/sq-pko.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.053Z","timestamp":1789497162053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/sq-pko.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72eed7e3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"197ea-6a71ca5f-3465668a4a72d17c;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 04 Aug 2026 11:17:51 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6M8PBWuK3CEyBixmOw1abw%2Bt6sF8I0%2BbH4pDxgVP%2FZH%2Bb3FnMiAMKa8SyVLRidZrsK37DPp5Xzw6oOERmNw4gTgZlOHDqlc7MqETaSTL9eY08k7Lu%2BiImZNEv40gr87TrRwVkI4wd3%2FO0w5J1w%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 104426\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":104426,"size_decoded":105269,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x1200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b47b94621b065251a955f82ba14cb226","sha1":"99445340986f2a6c13e01848ee9a726f3aba0dee","sha256":"f9a1b1c2c23c2483844a9d1876b78d686d747710f0cb80c3c6d3dae84ab5db44","sha512":"d30455226b510afbc8548fddf05b4528e2c127f730b678270ee17f4577ee9881ba8c790ba6be7f8ad4ebe8b5ed298719358b73db30c968b48fabeea6ea5e7e24","ssdeep":"3072:cp4WMUrdGyuB69aUJvMu307MxC/3bMiGnSElY:cp4W7royuBxUVMu3JC4iojlY","tlshash":"faa3f13d16ea6c9664f8960f0f12856f8bb4f4a6e8b7a24c4c24447ceb7cc4d09b056b","first_seen":"2026-09-15T18:30:44.700732Z","last_seen":"2026-09-15T18:33:40.620836Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/08/pko-big.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.078Z","timestamp":1789497162078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/pko-big.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b72f0d9b3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"38e92-6a71c14f-e2e2383b5ed726e8;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 04 Aug 2026 10:39:11 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l8%2F0mI%2B8CGO1eEcNMwpjanRTwybyExQg4BS8HqdKbEHgqx2HoVi6LfpD3ib5ydhoqqTU298U7d2vDRvp7P3m9J80yjwZv4AuUxWMyC2KtJqmaG2RmSCX0S6O3IEaEqjEcD1RQX0QfrW%2BonjmDw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 233106\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":233106,"size_decoded":233943,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.0 (Windows), datetime=2026:08:04 12:24:36], progressive, precision 8, 2560x430, components 3","md5":"76a6c83a4361258f4e216d3845765bb8","sha1":"3a4e916c04af5134797007456d605ba978785925","sha256":"b767a17f7899e794e160e2ba62d0b96b2577de525b1b78d469e6ec69b72b40f2","sha512":"bcfc8ff02a431d9528ff4a6353bee938e7b1f33a5e9a003dd1a56ffb54a14386becb0f88daaae4c97edc6b5107f947fad7767a4cb0581a677b15328047b7d39e","ssdeep":"3072:1qg/MtWox3mSLcF8ksLILGRzD2z4+WkWgGtlgw5UBdLrQN2i2ob63cFWBFOxnY/L:zMtWox5cF5LGFDKWkWgD2+QAi2obe7+2","tlshash":"743412176bb4ec68e8d4adf831a8d71b8683e75049778058bc4cf40a6bf7790ec58a49","first_seen":"2026-09-15T18:30:44.784658Z","last_seen":"2026-09-15T18:33:40.621324Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/dd28f1ab2cf6d1b13fa7acef6bd8cb66.js?ver=8cb66","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.113Z","timestamp":1789497162113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/dd28f1ab2cf6d1b13fa7acef6bd8cb66.js?ver=8cb66 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gTxGppFbimvUEKBBKfVZUWAJmiNVeHqNGB2YzgsFq82HgLo6uTdXRWg2X%2B7aoawqEJYe5aohdZLLdvqtVOeauwQFztzo741Tq4bhN6UvtZWrFiiYpCqIshGQwTWxdsiEE4CQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f4dcd3ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":538,"size_decoded":855,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (536)","md5":"f700409e0c67e5f135e5051d5978d1a2","sha1":"4523bc1a173e4aad929a7b0ca63624027e6a01b5","sha256":"dc65cd168c6d2f58b50970262683e878f6724ee2d1fff392e834fa0789690443","sha512":"5ed9efc5babdb95e6bb52feebc92b8096044a06e01b950bb9e2bc3cf9a781aaab7ba58fefb83ab0599be06a0b96b4da22eaaad989610bb9c8439ddfc9ec1e8ab","ssdeep":"","tlshash":"dff0f008511cc46b1d3ba76730ea5808bdd16bff455dfe0388a8a0bc7fa021da351a39","first_seen":"2024-08-29T17:29:45.585817Z","last_seen":"2026-09-15T18:33:40.621965Z","times_seen":77,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/11/melitta_logo-1.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.298Z","timestamp":1789497162298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/melitta_logo-1.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b7306eac3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"31c3-6749855b-2cd4f344ff0057c1;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Fri, 29 Nov 2024 09:11:55 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AFtrMQWEoDx6cZ5pDixAuHWhiwV2yP9aXhpsmYFltidocnUE0ieRua8Ip26vfcWfZ6hPgRrsmmXAIfo1NiGE6%2Bpw1ey8pcEVWcyOfPZc%2Fg67LsL%2B9MkZPd3xXGRSsvKDi1yU%2FmoDidJNCaT8Eg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12739\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":12739,"size_decoded":13575,"mime_type":"image/png","magic":"PNG image data, 104 x 61, 8-bit/color RGBA, non-interlaced","md5":"78dcff47acc73b33a2cfa32e362431dc","sha1":"8ad695f6c071650f300d6757a5461f13fb7dd76b","sha256":"7d6c918a3ef81767707db8e67e70b84d9864df0b27571fc08c2135ab41cd1fee","sha512":"48343dd3e43e94964ac6ec7e5acf4b58bf1cfd4c1ab5f2fa0cea284afaf2191902c75eb067440eb2c3f4a583d73afac6c8f0113cab1df20a33b14cc0b2248423","ssdeep":"192:xCX+w9hUMRwlsSYknazD22H54tBdV9vMXnjZakvm0ojUhJZqKtCVsF0kD2c4r:Qx2hjna/22ZwVWXnjck5ojUhTtvT6c4r","tlshash":"bd42b02dec905e01459aeec6b5f575534b3b472096d0a00678fe88bb4da02bedd0b54f","first_seen":"2026-09-15T18:30:44.814172Z","last_seen":"2026-09-15T18:33:40.622371Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/7f3909d726db8e0143cc133d1fb94be6.js?ver=94be6","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.126Z","timestamp":1789497162126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/7f3909d726db8e0143cc133d1fb94be6.js?ver=94be6 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GJDR%2BLE6tZNToChYIUqs4YhaMQ30Wr7sJife31Nef6QTA8BWhl8b%2F2o7SjsClm1uaNt9IeT%2B0gRiiGDcEgrePuCbmFSF4KgOjH0wSMMrraKnBJGyuaO6eOkWalXwrBnvUBE2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f7de53ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3330,"size_decoded":1846,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3328)","md5":"a81fb88243dd86fd00dbdc39ed5902bd","sha1":"4af19fd36c4cc0b87c0b48f1c73830dd48bb69d9","sha256":"4195f94060a1abda9366ed8ece389b9b6cd73b61975425df3c4f16e581d633f7","sha512":"6f90a3f2ee2581fe1ab59694e4e8874955390f16c0cb00affa89c13d59ace721cbb3aa0a670dfdca7531b3ddfabcf56c91c2cf8a4e5eed1a28230014a3c9ad20","ssdeep":"","tlshash":"2f61444df760117141afb2752dafb80d62b368751e020120a47b66750ebeb8e73e3e5d","first_seen":"2025-10-10T13:13:00.550518Z","last_seen":"2026-09-15T18:33:40.622971Z","times_seen":6,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/plugins/complianz-gdpr-premium/cookiebanner/js/complianz.min.js","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.179Z","timestamp":1789497162179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr-premium/cookiebanner/js/complianz.min.js HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RvXEIS1y37hlMXuvpFJNbiKHIwUHR3xdia0NOUY5uAYL%2FdnzwNtojfUFYblbmJIl30lDnlr%2FlEoKTFQlq9irzceDeT6oKGvJZ4y7C6yRbmixExyltcrcq7gZFO2rc06zBBaF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72fde213ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40647,"size_decoded":12158,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40647), with no line terminators","md5":"087de03e5dc079a0742ac8478a5f8c87","sha1":"b14ad9cfa3fa6ae9381806189e7f35f543d185ed","sha256":"fe345dc92f2c901c2eccac134294ff2216e70177dd054ba6f104af6015959ee9","sha512":"5742b4c16babac5856080614523b47dff4f3dff7cc102a3a5474ab1e0c82de4a1e987327beb303775042727b35d3f2498f6916c6283117415725dce206c437ef","ssdeep":"768:k4cjy6JZaYSJjv+YfzwLpstNyuGFGgxesKNVhIkYJO2ybEXoHHFC1aRHQpmiVKbX:IZal8OHQpmZNemLECFKAJ","tlshash":"3903e8b93a9c90b416ee87ed37abab48e4303961dc0fc8609565dc542258dc70f9bfb1","first_seen":"2025-10-07T21:11:17.93794Z","last_seen":"2026-09-15T18:33:40.623497Z","times_seen":8369,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/12/coffix-partner.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.213Z","timestamp":1789497162213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/coffix-partner.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72ffe423ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"38fa-6759b1d9-9fc42db7c8e959b5;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 11 Dec 2024 15:38:01 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yZ3bf8yj3gMynt2H6pnTa%2Bz3ddVG3A193BZZzADtqmZKeykSSldNG9lP53wE4FVe67co0skS58HO24XRxq2wBrqVZzwIdf%2FD3HoGfl%2BduURkj5m%2Byu9lKOpOsmxi4Y1SuQhklcKGoE%2F%2BHwIpBg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14586\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":14586,"size_decoded":15427,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2696614037183aa58db119b92bde04f3","sha1":"6be5c6a1f618e838610528e2ac9e530542b3459a","sha256":"3c8563b26c3a98e6fa312d9f13b5edc99ccf9e548f2945599ec703fb30eccf4c","sha512":"1ca1873ccdd3c732298cf5ab35515af8960a9523602391224457e4d87a549e195d62cd7e6b445d9c9f73a156eb1e051fdb92777cd5c1c04b6f1d6483ce924225","ssdeep":"384:OJqmozn4Eg0bfL6na19nASUqzbhH7DzEt:pcEt6a1GSvbhbct","tlshash":"5f62d0415aceb08df28bc1502eeb3965ba4d1c6b167ce3ec1ac9d4010f377a424da36a","first_seen":"2026-09-15T18:30:44.504367Z","last_seen":"2026-09-15T18:33:40.624069Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2018/03/about-icon-2.png.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.265Z","timestamp":1789497162265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/about-icon-2.png.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e853ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"5c6-69f9e1a9-6df2cc853b12fda;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 05 May 2026 12:25:13 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9iPCrl2lGAHri1INNlif2PvYYxfYfJ2QJOq1RUFDPHVok8R0yAB6Uf%2BBh5330VAPcHCD37BJgJDUSxrZXhqNkmL%2FBQgOCxFtrIierypa0UMrTt7T2N6vpAcLERZh7gSotQ0ZCi2UDjzAI%2FKHbg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1478\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1478,"size_decoded":2310,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"60bd41d2f61e592bfec8ee690ff5408a","sha1":"b4a4ee92d1dc47fa177c073a6ba88b2cf84605d1","sha256":"d634d06bceb7805306be990a9648ac4710b8da74c563e30d2a0f7be614659bd6","sha512":"058ede2f0822983b4a47e9b8dd8accbbcec27ec2fd13f15a3befdf5426d3fc53fcd05b0410432e07beb232b25ec7e21460d872fca6fe0bf2668790d51ef64b73","ssdeep":"","tlshash":"3331b6b4232387c5c80223bcadd1ab62e71ead628596f05e4b046206cfe0e80897c4d6","first_seen":"2026-09-15T18:30:44.554838Z","last_seen":"2026-09-15T18:33:40.624661Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/73186e13c70275e0a5d59729a777454f.js?ver=7454f","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.978Z","timestamp":1789497161978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/73186e13c70275e0a5d59729a777454f.js?ver=7454f HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4L%2Bgbqh0bCm0n5vYesSdkmPkz68mJeCntHMl13ssSh8Jx3NYVWOvhz93HoGlRcFNKKLntP5dLcG2Q6Mdh5ZQJfrCXsA6PvvZTVrj3GElhdIm6CtCLt7n9gFlkwsDQurwTTXo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72e6d313ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1686,"size_decoded":1232,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1684)","md5":"a0ca9b9d997765c56dd87ac8818501e4","sha1":"59316f94cf9b6e4edc640f7ba1e8f2f2a0d7be0c","sha256":"d19499e9329bcf3e54f07277b5054757455e619fdab4eb5ebfb36d437b3b427f","sha512":"c67edd8aa66a791cf2aca1fba9251c6d0a0d43d7dfba7f22db1393e513fa8060c3a2e277970f95b41230a79562a4534bbb283cfaa7c19b96f00f0cd0fa37c091","ssdeep":"","tlshash":"0d3114519d0c7834136d148a97fbef6173707d73284da02a776cb83c16fc68b96424a8","first_seen":"2024-08-19T15:07:01.492947Z","last_seen":"2026-09-15T18:33:40.625262Z","times_seen":249,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/07/485-450x450.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.220Z","timestamp":1789497162220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/485-450x450.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b72ffe4a3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"17776-6a6ca598-b29670a5c961fcaa;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Fri, 31 Jul 2026 13:39:36 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uljK8XCIhN%2BhBrxcc%2F10zyTqr1vRc1%2F9q29oSSXxa%2BMzGhA0hJJxQOIDCOxcHB3GijSiPoLioecYZnExmcLa3qaOf0hGHC2okqC1KDGMQ8CBPFaHwRfYuJQw4pNnpSBzbNpynktloSBDA%2BF0VA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 96118\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":96118,"size_decoded":96957,"mime_type":"image/png","magic":"PNG image data, 450 x 450, 8-bit/color RGB, non-interlaced","md5":"734f1a6e205c42e8b1639e1802f581a3","sha1":"a6821d48d4258c644f70d0cce0be0d991240e0ae","sha256":"358a640380aa6db1ff5e651de7c4176e5c3d3c364c7d07bf77f4311cf115d22f","sha512":"ee096c309937d80fe7090150c6cff25df815a5045e7eed1a65cdb48c40ed5807c06f9cb9aad44edc31694d47cee7a46836497126b20e350eb54b7ae363c38d3f","ssdeep":"1536:7a7XiLOWAehoVnF0QW/i2XKkkEVsbFVXdrj9Z+ki3vF2VurYkyy6Jr9ndr4jMF01:7iiLRAeCn+QAtXKkk3drjS0VAr3W9QK2","tlshash":"4393129e011ab9a61f77dc830b13b1d977600aa51985b0f1c086df783c9f295cab1bb7","first_seen":"2026-09-15T18:30:44.65453Z","last_seen":"2026-09-15T18:33:40.625818Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/26b78685cdec801543bb1420aab325fd.js?ver=325fd","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.144Z","timestamp":1789497162144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/26b78685cdec801543bb1420aab325fd.js?ver=325fd HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YLltT2SRvwC32gx9%2BvD%2BeXdjJkFQ2Qb4rMFeFx81dJZTbsW%2F2gp7e1TKqns8Apg8BOFuyx%2Bek%2FjMGJTy4rVqVVYsrd%2FM2FPHiyCPVsyOe2c%2BUhwoTDNTNTmMCL2Lt%2FgDT4xj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f8df83ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4607,"size_decoded":2254,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1593)","md5":"f9d262981bb66c07f08fde92c8dab6ba","sha1":"e733643f0e98191ce14a2716c22df94607565d43","sha256":"614a29bb16bdf4f8aada51c1579f2e6880f23d0673e76ad1ba48dc17b4134594","sha512":"91159391b0886c990c20fc71605d2b870c70c103476674edadde88ccd94954eca495f46c83e9c1fc6574a6aabccaf1eb418fba5054241129346ae9e6f892089b","ssdeep":"96:SSzLhwYGhTuUrTEBzA/c+GmDycbbyJWqbGsrjn:hPhhGhT13YzAdymSGyn","tlshash":"8391a54af150603348fe796b646f5a0b2b30ae429e2fd458d94c04940973e97b92f98c","first_seen":"2026-04-06T06:25:59.181797Z","last_seen":"2026-09-15T18:33:40.626568Z","times_seen":9,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2023/09/Odkamieniacz_green_1-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.283Z","timestamp":1789497162283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/Odkamieniacz_green_1-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7305ea03ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"bcb8-651582f9-ad4250241b0ee552;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Thu, 28 Sep 2023 13:43:21 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BwgQqLXgqFX0z2isL3%2BXMc%2FXPH05NAUeg9VfkVRx6Ef8aGtdknHSL30ip5Tr1KNGfV30sdEYibhit%2FzWSsXPp%2FYOTvIvpqMVPUNMhb2ieMeSdcwDEiBfmiK1%2BhFX8PxcTv%2BRVUddyEFADxUy5Q%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48312\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48312,"size_decoded":49155,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: \"Created with GIMP\", baseline, precision 8, 450x450, components 3","md5":"f3403b117dd5ae23109e081b97a48592","sha1":"c862d30bff3939b4144eccf15b27cba418358d09","sha256":"d0a5e204c0a2a73ac72d9f9340eadd0f524c58879b12cabbcae2314a8deb597f","sha512":"74d25e7a7400667bad5e7f1c0422645aad513f62779e24689e1306f86df22ee4dfaeb94ca57fa1202f4fc85cd491cd9166ed555e4e94e3d4ea76a05c2c4fce0a","ssdeep":"768:RMxNeRBuiaJgq1HBRJ8kOD5wUVCwF0vos0KB8iysQ2Chzt2cSPN1xPnkR/nriBmd:a6B2NUkm/CwVKB8zsQ2C9tAgmBmz8mj7","tlshash":"ac23e044a96c313ccfaf2a335467e3b7f4a329717679d4a21d5cdae3df9188210a170a","first_seen":"2026-09-15T18:30:44.759881Z","last_seen":"2026-09-15T18:33:40.627129Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2021/02/coffix-na-strone-logo.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.302Z","timestamp":1789497162302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2021/02/coffix-na-strone-logo.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7307eb63ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"282c-6038dc3c-dd64c94adf106c1c;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Fri, 26 Feb 2021 11:32:12 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=21zw0ZoRElVAoKrpTHlmnknNjFdCxYP7R%2FZQ53ZWiWhyOluVggyfaMu4ekQuSiLxfu92pE8ROarM4nXnB6kp2%2B4atyz6h2LWapPyMFbztMZVntfjp31Boih8LKR2G4kVmyfxxNAL1nqNQEndqQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10284\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":10284,"size_decoded":11117,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 161x61, components 3","md5":"49991fbc3cfb879f3b54fa5174b99acd","sha1":"bce983e40e6a81f9398d902a3c02dfeae7c2aab0","sha256":"0b4438c29f177146620b4804596f21aa2fca2385dec8d6f199d9393cc6ec1745","sha512":"6d037ef7895a59cd74fc5474ea62922665ee0ec2fa816502956872510310e991b18b521da28e2e93928ddb6da6e2cd2f8ffc56290dec67c4d3bce26d79aa6287","ssdeep":"192:Ug110rq0hlqvkDthUJqBRF7i6D3wKTER4P1+rRG8CVnCoiaPvv1GNEaz0LXqPIEI:LjnkDt2JqBfpK4oenbb9LvLXqPvw","tlshash":"c922bffd88a69f2de93300b14c910f63f6d20702e885f67aeb07d223e5151610cb8acc","first_seen":"2026-09-15T18:30:44.374386Z","last_seen":"2026-09-15T18:33:40.627792Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2025/04/serwis-ekspresow.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.158Z","timestamp":1789497162158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/serwis-ekspresow.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72f9e093ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"4746-67ed149c-52147dc2c7d51d5e;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 02 Apr 2025 10:42:36 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hLsB70Z4f4akH2xOjCnHY5PXYw3Wuv6VxzEH84Ux%2F%2BuQk6g11HLQ%2FRjFNpizS4e%2F2%2BtBa4P1HASRy2Gy3%2BvvGEt83BWploR0FWXzqr0CVr3aHepugFHU9eIEIcTxARY%2Fka1c405tuj9QnPNbuw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18246\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18246,"size_decoded":19089,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 327x175, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c42624745af5a5dd03a91c3df3ca0917","sha1":"3117f8b88dc7ca5dced98acc15b8f59ddf3704fe","sha256":"38036f32d66e619e56bb59d988c9a476286e197f39caad36b41cc9386c27b1ad","sha512":"20c3ac8fdce99832851626ba173969d52bfc069e478dab16f142cbab2bc02e34872a29c78f987b7180729adca9d5b70985726412969ad25a3eb9b2c3e75414f6","ssdeep":"384:no+gGHOzUxjrBeN1atK33Ezfbi7joKa5UxNPhZQ2zXrfbEiT3r9:o+czUxjrTKHEzO7jda5U3Q6X/ESr9","tlshash":"7c82d0e8033bf9931fb5df9735a57842a9e13ee3b24c8c4c5fe59c940e9598aba40350","first_seen":"2026-09-15T18:30:44.483533Z","last_seen":"2026-09-15T18:33:40.62882Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/b1e8c43d42a4bb6ed9bbd9dcd49268f7.js?ver=268f7","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.999Z","timestamp":1789497161999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/b1e8c43d42a4bb6ed9bbd9dcd49268f7.js?ver=268f7 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lTy%2Byx4EGWPqZYYq1v9XlFYCTkclgjQyOwprhRZQMlHbZWgIE8uVU%2FFBT559YcIFkUej0%2FB9INldO8x6SboKz7DsTDDrR4VcBlsDpVD2nvugLlhgpd%2FJx2ZLA8YaGgYb1y5O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72e8d4f3ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34008,"size_decoded":12755,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25371)","md5":"2597511e0a5b2d850d93792c14b6f705","sha1":"3f1d9b4d24ff8f100e5ad6328928d056d8169508","sha256":"c5fd2a851c04cad1406fac61c7de8d0ccaf137db81cc24376a44f9b79d336e36","sha512":"7c5470d6d55ab489fb4ad05fd3a5fe86f606923f891e401c0e572f6934a26df4be661bbaedb879d54d16e26cef1c00ebc89b68c9cdfa4bc1a71ce2e1c02c9c43","ssdeep":"768:H1QvQ3ezJg5EA+Kt47gdWA1D0Tj1BhIP+++yCS8hvp2ebtHSwKURQMdnw30OZa/f:Viz7FhvTcKQa","tlshash":"03e23a84f26530724a233574512f950af3375a11b04a8de1da65e5e43c7caac83bbf7d","first_seen":"2023-10-30T09:51:19Z","last_seen":"2026-09-15T18:33:40.629529Z","times_seen":9,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/08/Coffix-szklanki-mobile.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.052Z","timestamp":1789497162052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/Coffix-szklanki-mobile.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b72edd7d3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"2cf78-6a86dfd9-a91d3240c9616b05;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Thu, 20 Aug 2026 11:07:05 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N4b4bNdLSRldw6XXJoNtoIMU3A4El%2F4bnNSgyQO0Gmfjb78J74q7LEvLLo6b%2FCrHuq9FywJQFa9uv3m2Xl920TqdtoQAEt4UtHM%2BpOkopRSueC962YLB6Q17ga2nWUW2gg%2Fb1HXLdzyBuRFFmg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 184184\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":184184,"size_decoded":185023,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x1200, components 3","md5":"ea2434b6a3efc544156e98d345661794","sha1":"bbeab5de340942fd071574e5a2f5f29787b087b5","sha256":"bbe6e1d1a77919ca8a2c08306a46a44b2bb37877c82e06039fe18692451c71c7","sha512":"c774c7c6e86af1b2b795b2a921b1a9f7a09230d24d28660b37ff26c37e623252c1a43dd0c433f610758703d97523a8b617730585f72830b81910f42548e5a120","ssdeep":"3072:lBK+9liua3ELePzJopcXOcrGk8uEFCQaHPkOeym+SCplJcYG/yW2Iq4HLm:HbZK6pcXO7k8tFuvkO3mLCuYB4HS","tlshash":"6c0412c955789f96c5c820f6f3ed638baca8c61637bac384a0e68d4305c9747bd1902f","first_seen":"2026-09-15T18:30:44.458055Z","last_seen":"2026-09-15T18:33:40.630135Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/d61abd2265ffc3a274b7e1352829749b.js?ver=9749b","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.125Z","timestamp":1789497162125,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/d61abd2265ffc3a274b7e1352829749b.js?ver=9749b HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IiSRP8TvImooDN2%2FiSq8c6WOjorORz7wpc9AFkUA78Gt0iGpVl1tiRNI%2BA02wHlj8aEIyAXr9%2BJY%2FV9%2BhOFVhGzrp9rz%2FYZsTxS3jWD490yAtm1WxyXC8cx98qjp1qLjSoSy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f5ddc3ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4639,"size_decoded":2493,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4637)","md5":"cac4ed79b3817d554d6f0350076fde3c","sha1":"bd0fc5933d767e0edae600d81ee730fd6f1e4bf1","sha256":"d90607cc5675f1a12fefa5400ad5001f45220d02b02e032bb23ef530a2eb2b76","sha512":"ade52275c3041753656d425a6e28987bb2e95a6dca32c79e9c161f1d57fade92825dcdf9f17f4a41d6be8e35612830869485c2674ec1b65e79f1e7b8f02b81bd","ssdeep":"96:cgKwUSPE/U2tBKGdo31bP8PvRIG/dU6p3PLfqzRWqw/mCkjtCk8ttfNjgfN0:ceITC1bUnVUODMNjtOtfNUfN0","tlshash":"f8a1b848729764858adb60d8147e38297a76ad5d8989c4fafd3284ac84ffb8c1072d3d","first_seen":"2025-06-23T04:04:48.49845Z","last_seen":"2026-09-15T18:33:40.630763Z","times_seen":22,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/11/Rossini_logo-1.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.320Z","timestamp":1789497162320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/Rossini_logo-1.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b730bef33ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"1bf3-6749855e-de715220b66d9463;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Fri, 29 Nov 2024 09:11:58 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BcSuQ1W5D4AuxJu%2BmEWo8NQTJS5UsG48jguLVxcG1BvtnxlQE9kdXmLP14RIUWWHEuMUbp8BszyZsBUMI3q5RHLtDTODaXtQvqhbci%2FLHYOoWlNnpyb38paSqNRSlmoaPymudWUgVnViO%2BIT3w%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7155\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7155,"size_decoded":7990,"mime_type":"image/png","magic":"PNG image data, 56 x 61, 8-bit/color RGBA, non-interlaced","md5":"9f4f04e0a4b3be1e97abf3383fb3ddf5","sha1":"1f8a26a37ea76ed1060320ed2390fee9a6fd7b3c","sha256":"48504b5138e7b844c9320f4ef836fb833b6bf71145f5b87f1c7db4bb819bafd9","sha512":"99b2959faf30e5aa59f9f9ea0c5e8cd2f89e264a05156de2593143b73939bdd63b21364850f3fa88f52516bb4d89b430c6982b12c234febb8f9577dfc5a80c53","ssdeep":"192:4ZSeknxzMPrU9u/okBy3hd8NiwEqoFLjTUovK3ONClJ+f:X1nxwPI9u/Yv8r1WjhvK+Nc+f","tlshash":"43e17d5478817e22e08abf5e1df661af756303cc6281574b9ddce99128f52bdcc286c3","first_seen":"2026-09-15T18:30:44.706888Z","last_seen":"2026-09-15T18:33:40.631619Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/c62fd0b0d776ce9d94ce6e00a875887d.js?ver=5887d","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.151Z","timestamp":1789497162151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/c62fd0b0d776ce9d94ce6e00a875887d.js?ver=5887d HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CFxR%2BJZwzU6nsXcAR9NpfITCU0uPcdV1YzmxI22nSj5tcI8z2q6lk6dGhztIuYqYlfQzGNBoD3arYQfqSZ5xAlOjf08eLrq7EVZfqyEqgXnwWjrZfUrMwWtc6dfvBLJNqUD4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f9e063ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5058,"size_decoded":2253,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5032)","md5":"917e7cb4af609e70237205067ac86ec0","sha1":"e8ae86471eb0f261f0925f36e70bfd0f6f8a1d2e","sha256":"d616b6bda0e1d217bf602ef6539d988933f1bd487bcdececd7d0b5ef3f4cc00e","sha512":"a6f1bf239f5389e941fc63960cf8bc3df20cf1216b6e696d89873440058cc19aade02b34da878184ff5af72125f02bb7f7cce6f199223d4e4d46615ccb8a3fce","ssdeep":"96:ZqGQlcdUo2dbu+rybu2ybFybsfb88b5mtbueEyJSak0TOiwbTlSkM35Vkmh:E9lcyfZrEu2EFEw8m5mxBTOiwFSkM3Yc","tlshash":"91a122a673601ad71bef10ed5896d003b0ea1238c52dc8c4e17269f68df4fca7d2665e","first_seen":"2025-07-07T17:47:21.460335Z","last_seen":"2026-09-15T18:33:40.632292Z","times_seen":6,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/themes/enfold/js/avia-js.min.js","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:41.981Z","timestamp":1789497161981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/themes/enfold/js/avia-js.min.js HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WISC%2B4k%2FcUpTqRj7Iqw7r79uWphvyLJv6XLaFvmA4GiUXnWGV9hpQfy1GYpVNj6vDm6DoUHT2TLPvmq38fLFJxB0k93gUoVO7ohTfBXBwpH22aOxyVhrglv%2FfSwM4tn4d5nS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3b9b72e6d363ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1339,"size_decoded":1219,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1339), with no line terminators","md5":"b75d7a960412bcef94e81e0e41759d0a","sha1":"a982c50f9029629ece7b508f32b45e37d007727c","sha256":"d9ea20211068d114e67e60e94eb02dfbcb0778b4872153d3008a79778354928d","sha512":"f36e858838eda6cc6436c17b6f7931cf2f996730222b7c4107ceb9d65b7f3ad2edd7936fa40d9c63229303bbb71578fe8cf42c1616c36e39c8045b1af142cce1","ssdeep":"","tlshash":"732133862075a065d1b9812af1b541c2b0f81dd8315df044a3bdf4b52e61c5fe27bbf6","first_seen":"2025-06-19T09:00:45.586098Z","last_seen":"2026-09-15T18:33:40.545556Z","times_seen":344,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2020/10/filtracja.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.205Z","timestamp":1789497162205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2020/10/filtracja.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b72fee353ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"134f9-5f9942bc-e7db2a3948538170;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 28 Oct 2020 10:06:52 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v7eGK45mswk2xURwULT41B9%2B5xEW9MIYyctXYkYphPWRZDIS%2FlkjVrwQdL353lrfnG%2F06HfjzTmcHivM3FOnf3%2F2%2BaxBs8Wk3gu1ZRHVhHDWyJR%2BCRYT05Yzzl9V4uFf2SXAKqetfPbkWqmj%2BA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 79097\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":79097,"size_decoded":79941,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=199, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=423], baseline, precision 8, 423x199, components 3","md5":"83886b2eca8e6b1ab1bb49998cd6fd16","sha1":"8566a076e2d52fadcf25f985c7ae65f0a5a633b4","sha256":"141177a65c4902a4a98e1d0455431b043f018aa2009a2aab41aee0e0f53dbcc3","sha512":"aeb8a6f8c215aa82a3b13d2ddf459cb0b5755b06db1533170f33968547ad320e6e73e706fc454f741a1bc36c53712d4a595e3c01145cdddbe87929b188fe1c81","ssdeep":"1536:4qZZplxqZZp3vGFEg9oJ22gAwI97J32kQt:4qDxqDQ0o2gAwI913pA","tlshash":"b973a0447e949941e89eb63895ece580e3f32ed01e32011ebfec995a0f52d8c8dd949b","first_seen":"2026-09-15T18:30:44.775978Z","last_seen":"2026-09-15T18:33:40.632895Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/09/Biancaffe_Soave_2pcs-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.275Z","timestamp":1789497162275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/Biancaffe_Soave_2pcs-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e8c3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"27dfb-66ed1b0e-309c2d38dd198ac2;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Fri, 20 Sep 2024 06:49:50 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JSFHKwPbLDzNHcxcW3Dl7TSP0503TWAv28L40mgTWjAT9AlIOYaAEW2zg7s2trxGGrPxEa%2BeDluWYInE3MmQB923kcp2iTYLe%2F6yHeF94XKF4Mx9%2BBOTwjm6xyw4kVRRcRY%2Bw4%2FBZZLi81jZsw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 163323\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":163323,"size_decoded":164164,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x450, components 3","md5":"2bd32c1bda9107b06d5a7a05ab9607df","sha1":"9354561c7a3fba86d1ea066dba5719e7448c2988","sha256":"156a46221c74074cfad31f9b10882ca839d3a4cc94cc3b28ece59d8c32082c30","sha512":"97e70e92f80982ca91695fefc2af691b055d6bfb3240e98d93c0aa4c3146b0216f9fcdf823e4bb5ff44b27a6074b49c359a1eb7e1bef3cb747ccf9562de6aca4","ssdeep":"3072:zUu8h5DD/7moRs0YNlc2tf+JGw18oywmmWsXjLM2VxtD:8DDD5s0YvcSWzEwmmWwjLBVX","tlshash":"98f31269f7b7e7188b77853e307468e3f215039709a210b79aa37d55e5bcb3c82012b8","first_seen":"2026-09-15T18:30:44.500797Z","last_seen":"2026-09-15T18:33:40.633568Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2018/03/saeco.png.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.290Z","timestamp":1789497162290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/saeco.png.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b7306ea83ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"9d0-69f9e1ae-dbdc4df099059586;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 05 May 2026 12:25:18 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BRFW6SvWZUFuKwAFE2NZpsUyNaPbEpVpz7S1Dog94YvEShKaF2rqqTjA3IAUJymrkhVms93l821Zc1VsPyCDWqvOhcZNrz3HAGcrjFBL9cmaGW4TIlM0a5utg2MtK63t%2F3ja7jcEgp7GpA4vRA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2512\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2512,"size_decoded":3341,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d451897bd2035343c6f1e1ec997c119d","sha1":"5260b4446892cc2615717e9f4cb2c791ed957fb3","sha256":"09b76a370941cdff737ef6295ef633484f09ee19b0eb97c799ef0971691330c9","sha512":"9f1508d58cc175afe508b592ecb34504b14418af9beb29594b742d24af308374be29ca039e88673133d535e60e8e758ec481984b14a0d147b93038d42fe87a18","ssdeep":"","tlshash":"20510a77c3f14b81d194d2b16d10bb0cd792efe20a44ca760321492f5a81dd04c6a2c6","first_seen":"2026-09-15T18:30:44.780719Z","last_seen":"2026-09-15T18:33:40.635107Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2020/10/venezia.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.291Z","timestamp":1789497162291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2020/10/venezia.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b7306ea93ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"13f5-5f992cf1-e0458a50c5e31de2;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 28 Oct 2020 08:33:53 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ThTExP94GLu3KzoLTuItoy7DLkjx%2BQ3tXzmun4zBLWsImVdYDWoxJltkJxXyUe35dlP0moaM2ugE6X0JoZvOxOi%2FQCm%2Fo7KfPNUFUyu%2BXx4q97jvSVIZbrwZfdC2im8ODglIsWAwGsLxR%2BGKYA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5109\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5109,"size_decoded":5946,"mime_type":"image/png","magic":"PNG image data, 236 x 61, 8-bit/color RGBA, non-interlaced","md5":"9338a54e5975b8f0f566fce926d694c7","sha1":"19cf780bc4c5e9aad36fb54966b290d1de42ac0e","sha256":"8eeb1217a855eaf44ddda74df83328d98c764cf47f4f458c93c293a1c8e00457","sha512":"cea7614538943f7fef21825faaf2025156b194e1e715f92754f227069b15296edf59243f0714f867035ccd65d215705dff043de4fa4312d6335a4cfd74cc957f","ssdeep":"96:kSDZ/I09Da01l+gmkyTt6Hk8nTOvUx6MTQxxjygFTO9QRq05tqZ9FP1v:kSDS0tKg9E05TO46MTABTqAqaGNv","tlshash":"a6b19d6f96a4e44f7caeb64112c9a106d62e1e2c42e6362884d4b6ef40ab9479f32070","first_seen":"2026-09-15T18:30:44.515821Z","last_seen":"2026-09-15T18:33:40.635698Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2018/03/nivona.png.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.296Z","timestamp":1789497162296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/nivona.png.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b7306eab3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"8b4-69f9e1ad-4fd89cfb13438888;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 05 May 2026 12:25:17 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5es%2FR%2BUtLG1bGFhuHYlllKt%2FVbc9QY%2FNZUHvsznvDWJAKoBvJzJdFGgBVyVIZ%2F9atDfGIJjm9E5rUvxEjB7DMERyM6i%2Fshh30rct05LAVhhRJPy4rzk4jqCnZ97tvVMNveUUF4cBlGGJQAA4BA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2228\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2228,"size_decoded":3067,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"704f913ce9ab6a0bc6c767c345a4ec70","sha1":"a67583d7a8cef1d2dce956820a0dfdcd6fb38650","sha256":"6013a6cf5a916773b3f83f0f1833408261fd16624a4fe96ac8f55886bfe4c2cc","sha512":"758ae5ae47da0b4c38cc90ec4a3e203932fb076a649e46868fc91aa667d36a5af3601fec95acb24e6e4631654f18f9aca8da677f700faf89e1fee20e10a08a68","ssdeep":"","tlshash":"48411a705332dfd2c8c26a39e14087e6833c3f664159a263354ae4dd6ec00b2bd1c5e9","first_seen":"2026-09-15T18:30:44.619326Z","last_seen":"2026-09-15T18:33:40.636419Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/03/loading-kawa.gif","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.045Z","timestamp":1789497162045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/03/loading-kawa.gif HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/gif\r\npriority: u=5,i\r\ncf-ray: a3b9b72edd723ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 446306\r\ncache-control: public, max-age=691200\r\netag: \"1ef3-66070391-7833c82660ff2d38;;;\"\r\nexpires: Fri, 18 Sep 2026 14:34:15 GMT\r\nlast-modified: Fri, 29 Mar 2024 18:08:17 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mGPN1Jait%2BBG7iPfZFYMIxrbKhGZy1HilkRLXv76icizbbatdE4N2kBBpUPMh7AteWARzWG8KjwgtpRaIV6d0td7oNmhzMLZfaaMWXSXAoHfVyskltO48vHA0tRZmS5et8FLxi5daCXq3KaNsQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7923\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7923,"size_decoded":8755,"mime_type":"image/gif","magic":"GIF image data, version 89a, 64 x 64","md5":"ba1b700586814715fc0da52a57124b61","sha1":"f939bce566f77b11e312da7f3e8914697409a3ca","sha256":"ef45918d940da6abe529aba01031fc6d769b05e9f05c6f5535caffb14de4123c","sha512":"fc8ff9841bd18bcfe27b86c58f09f8e2abac89a37c278d4cb60d3fb2ef84a868192c482a33544c57ef7b9d4050b2d2ea48558a987b25783431388b3e8e720709","ssdeep":"96:h2UwmiwivEt9tSkRFx5AVtb/PgadGuz51IEzo82K4qzOf2X94gUsjGrLpaMhYaMf:Pj9Fx52Bdz51Joy4qM2X94gxjGrLzQ","tlshash":"09f18d2ebc9064e1fcc500fa31ba16fd57a3ec7661e894461d0a307b80e09b14e295ff","first_seen":"2026-09-15T18:30:44.757758Z","last_seen":"2026-09-15T18:33:40.637108Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2025/04/pera.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.196Z","timestamp":1789497162196,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/pera.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72fee393ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"2138-67ed2549-b7ee571d6ba24c36;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 02 Apr 2025 11:53:45 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2U3l6ywzFQb%2BF1%2BuDCX662STUDJsIHFv4v%2BkTR22ARz5MCbuJM%2FPHzJxzdEM4UFdKgE2nzsShg7c8aMQBmX2twgXUEITW7SHkYXwhcplC8D5fD0S3om30bZYEfVRldfhXgI9JBxNuEinnEQR%2Bg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8504\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":8504,"size_decoded":9342,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 327x175, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"98164d8e00ee720bceaa60c673ab1210","sha1":"83881b34ef65ae91df7965b5bf2bb18bcecd3e24","sha256":"806df9ab5a88be28c8aeca230a1cb95bc8696f5b0c5971747a6e2ab11e27474c","sha512":"3dad57329ed185dfc6ed18fd0d2654661ac1ff33b346f0a596ab0f144e33b658440bc983844dbf349c4d11676200b245199d7b18161def13be656bf1be2f1797","ssdeep":"192:R+D++tg/XATp4FKylUS7uWszmyvfCLMlwOlZh160c0CtpIKB3nC:RItgfI4FK8US6W1yv4MdfIM2e4XC","tlshash":"a602be4542baac2ffdf15c115167ac4901ea84adb323de8c23440007f934de2ea9b32a","first_seen":"2026-09-15T18:30:44.434713Z","last_seen":"2026-09-15T18:33:40.637739Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/12/mott_logo.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.308Z","timestamp":1789497162308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/mott_logo.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b730bef03ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"131a-674eedad-235847b7f559af25;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 03 Dec 2024 11:38:21 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D6UtFwUZF81%2BLFiQZIhNaPCSxBXvHOlQO7Hjagw5zlOsGLaJ0NaxJmb1Dvxt1mca0pT6J%2BF0lktKSLa04bTdXfyKqFwE3QuYEYyQKt%2FgObP%2F0ksuUHNj1sZJLbh4cEaV71UFSreUVS87t3B3yg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4890\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4890,"size_decoded":5726,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9e4b5d1f3f4af40a2866b5757ab297fb","sha1":"0d404bc5be3de9a0bef8f936c65739ce8e3caa6a","sha256":"656d30c5a06e5e2d30450ccdddac132e1564be7bcbd2c5d1b97dcd7d6451f61a","sha512":"5b9ec5698c8435bd96b5cf7141ece624184443c86f56e3f63513a1d6189c3ca3a760ce224f835d49caed5c115f98b1c4525bf2077d38d8a9c929e872fe1cbf91","ssdeep":"48:Q+MflsXlf/lulel4wlwx+6MjnNsvIYWiR5QkyTJbZPHXZ9u6gbVwyKzJgWjfuPXx:QbN26MT0D5MdtbZPAVwzV+zhOEUJI7","tlshash":"e7a14d75dfa7d397f832d37c54f26be1b3929228d3526e933024a62409816c49f8f1d8","first_seen":"2026-09-15T18:30:44.542759Z","last_seen":"2026-09-15T18:33:40.638924Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/12/Woseba-logo.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.321Z","timestamp":1789497162321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/Woseba-logo.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b730bef43ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"2c7e-674ef369-823c951e62864340;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 03 Dec 2024 12:02:49 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=93cHSYPbaMknn5UDCqx%2FC%2FIx9TDm0e1VDvQ5q0DMNFrRGJqWLCcDCmDQwixZ829XM84fqh6uwrcWJdkI%2BI4dHyCdFh%2BdDdhszi2KfBg5A7K2YLdaqEhOJo7uaheGni3cuiLjS6mpsSp0rXQuuA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11390\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11390,"size_decoded":12227,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b99b264bfacdb9d4bf1fb75cfa89edc3","sha1":"14b19942e28412835b346463a559c928bc0af1e3","sha256":"923a24e5472373284c5da471b9a410353d2b7be2526a525034de4b76480e9ffc","sha512":"640434f834abb592281ec7a9a2573e851a9e75ec501b341fc39eb8b5a035f594b968f9c8950e62718dbd5aa62eb489cefaa2bcd644b7eccc46fe845998aeaa35","ssdeep":"192:b2YNMtKwZAPO9eT+xhBvpNATF/lql9WqIEBQ2NPXt02a4QJ0G:KYNg7i+j5GF/eIqIa9DG","tlshash":"3c32bfa99f13db5ac539633005f76ba07356f825c3b32b0b6026966b06d04c576ae2ce","first_seen":"2026-09-15T18:30:44.696217Z","last_seen":"2026-09-15T18:33:40.639555Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2021/06/yt.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.343Z","timestamp":1789497162343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/yt.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b730ef1a3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 381904\r\ncache-control: public, max-age=691200\r\netag: \"d00-60d88abb-4f7c1dac090fc487;;;\"\r\nexpires: Sat, 19 Sep 2026 08:27:37 GMT\r\nlast-modified: Sun, 27 Jun 2021 14:27:07 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U0gVzbBJpHtdfddzZkz%2Fk4pBToU4jNrljUV7aordblxQLMQTRqwKdFjgrtCSOIoPr1DgrrCLtklYBzfxIp0aGqVOUspoIV%2FxDyJcGaj%2BZORfpY7lEtm2LRtCcWGFZ%2BuIxdnB6ZoQrsYFi8eqWA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3328\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3328,"size_decoded":4165,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"beee989c36ea6fb66a0b97cd46b96714","sha1":"b3a7f99a3a0133a62dc9b44fa3ab7aef252d808d","sha256":"c75823cbf4a1848a28879a4fb3a36c985af80baa7dc10baa9932dfe6c2d49454","sha512":"6fd43fbf6867fbd0fa225d3d58f91bb53c9b863d1d9fbf5f021148b9031cb9d1494af65d0a62a973bbad65d24de7cd7f9084ecb3134ef42b55a988d1104633fa","ssdeep":"","tlshash":"b8617ddfdd24508fb9deb8504ddd4106e378537cda8a3a3895d286ce10b1d426f36061","first_seen":"2026-09-15T18:30:44.64712Z","last_seen":"2026-09-15T18:33:40.640219Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/plugins/woo-fly-cart/assets/fonts/woofc.ttf","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.824Z","timestamp":1789497162824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/plugins/woo-fly-cart/assets/fonts/woofc.ttf HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/wp-content/litespeed/css/f21b75b4cd577831db66fb212b893289.css?ver=79359\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: application/x-font-ttf\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b733b88f3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 205\r\ncache-control: public, max-age=691200\r\ncontent-encoding: br\r\netag: \"32dc-6a7e2a8e-8181c74d403aa612;br\"\r\nexpires: Wed, 23 Sep 2026 18:29:17 GMT\r\nlast-modified: Thu, 13 Aug 2026 20:35:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9u9taoXcTVo5CmhVEXMlSOYOkoC1ewPUet22LXf8BLmWYECl81SQrnOgrscLjeq73K%2FtZX3GW9E8Y31x6sDWOnBP07yS0QTG9kenhoSE8xay6s5Vi86r%2Bv8F9haDgAqgXYn39ZJHRBfg7iJrcg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7335\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13020,"size_decoded":8220,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, woosmc     ","md5":"8218340b23cfe55bad7bab88d4f5711d","sha1":"e07d7291846c071287d7e9b1e9ddc8360b2d568d","sha256":"3498454ffc164fcc56cbc7713fedc6cc8e99dec0dff6fb7871ea1ad2121beb03","sha512":"2c715eeb7568932af72fcca61856e5eddb17b33a22a3e9ac25aafb0a3bd1d907535974d172e3c37ee3821098b5a07828808c292772f9f746311c9dbdfe0a8ba6","ssdeep":"192:QMwzi0Bj14BETU8CMyHyc93KEvs0JY+XqdNpW39SYUXWzQ971PFKV6eoJcG+K:RQx1zjCRyASY2971MEJcGT","tlshash":"de42080b535ffa8bd54206b6099562060eeee2685f2783329ccedd60f6161d0cd923fe","first_seen":"2023-04-16T17:23:48Z","last_seen":"2026-09-15T18:33:40.640966Z","times_seen":650,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/8dcc229beb67a607cf4332efabc65e53.js?ver=65e53","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.116Z","timestamp":1789497162116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/8dcc229beb67a607cf4332efabc65e53.js?ver=65e53 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wLFRXIj%2BUfdVLfcNZ7X2lb5JAXAXBiMC2y8Qbs48uDxV9pXV1BOSCCILW6xaWbWIKDKnNQDl0mml48lITzpPwbrcbDmtm6QJ6bzpaVFjgt4fW%2BsXwY1yUeNEHsZC7Ykg9o65\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f4dd13ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26275,"size_decoded":9605,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26273)","md5":"ef82bb8b86d8ffff3cac4cf5e5ba7ad7","sha1":"4caf6ab11839898c65eba8e41553b9020833dd00","sha256":"488001d3195108d60396d2f7f99e8465f8c94f885aa6d4dc05508973b29ce00f","sha512":"4c25836bcff43e9c7324018b91759482657ac1e4a1798e086632ff08de8a34ba4f9c47b34e8f86c49b7e9bae5097d51d2e94305f5015d9dbdf7af7dd156dabb2","ssdeep":"768:/pRAA7wYe9crf/avvvKSGVHDKAuFj+2xJEy:fAYwB9c2CSGVcj+2xJEy","tlshash":"bbc20a4df312617141fba1b9702f260911329866a10144f8347ecbe4ed7ef95a2e7fba","first_seen":"2025-07-07T17:47:21.383616Z","last_seen":"2026-09-15T18:33:40.64146Z","times_seen":10,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2026/03/szklanki-2-scaled-1.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.217Z","timestamp":1789497162217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/szklanki-2-scaled-1.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b72ffe463ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 130092\r\ncache-control: public, max-age=691200\r\netag: \"3b683-69bd5643-c5911faee4a75764;;;\"\r\nexpires: Tue, 22 Sep 2026 06:24:29 GMT\r\nlast-modified: Fri, 20 Mar 2026 14:14:27 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n9CB0kqBMgVxP4SiZbKMvP%2FkP0SyINJjsCZSNxTYHHh3zFn3B5jzUU5Su0wkXcB4bPphTvEKkvxAO7TWc3WVhGkyhMAAEkmVI5vTGMWhH8Rx2dT4GaZdRtKmUt%2BrUUeM904DdzgZYfAi7WIXOw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 243331\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":243331,"size_decoded":244169,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 2560x2560, components 3","md5":"adfc86882f3e72a96e877c055ea74240","sha1":"67de9d3b23c615c4b71171f987719d070be8f63d","sha256":"3ba143c21848f7769deeb2cb59298bd549a3a381ca75af77dfb03b666f1b2e7c","sha512":"0cec92a6589115d7e5e98719d2f91cbb7c2d33d44af6b173b4b876a81096539235396d6f0298827fad770ce981a1589ab9f6f1e4e7db0fb16c2bd5614e076b1a","ssdeep":"3072:J75JsUe1Is4Ch15uinMZBtvO8Cno0XeX1lAd6u5Fd5LHKcyNe4xY2qY3IJJ1I0N6:eUeKsTGOvrXUjuLHx54xY2hYNI0o","tlshash":"be341272c2fc4090d98e17b4679e56c6786a939d25c81e0afd7ec9ca17d23f2d029cd8","first_seen":"2026-09-15T18:30:44.447164Z","last_seen":"2026-09-15T18:33:40.641968Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2025/10/Ekspres_jura_c9_front-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.222Z","timestamp":1789497162222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/Ekspres_jura_c9_front-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7300e533ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"16106-68f7842d-a6fbf3d3b220dcee;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 21 Oct 2025 13:01:33 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lyqwq%2FaGqj%2BulLALTdJtm5nBDU%2FVdyT7w9FXIJIsu8t6d0EwlHXoN4aBrILjB5kGv8GIm84ChDHWgzvBSoG21RCeGi9u4XefqTmnZ00UTugbagVy%2BHTrkLa9HTy2iMtAqP7vS%2FBvUtYWb4ywBg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 90374\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":90374,"size_decoded":91214,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.12 (Windows), datetime=2025:10:21 15:01:09], baseline, precision 8, 450x450, components 3","md5":"07007c41d9f645ae879acd13f9a3d232","sha1":"2b650ced09697e2682418ec8a0386583d30e03ce","sha256":"55a89753321249b95a1b382fe3a797a037ee6c4c1066952b9aa7acbf48bff4c1","sha512":"51f02b6e9590bc136b80fe70d11136c572f89203d73d7a394b98ebb782e9334b5dc149664b01cfab80cc5413e0fda3d05a4420e0ff228ef5ae83c50ade62b6c0","ssdeep":"1536:vnWO65LeTbbKWR8+t/YQ3Q/1NfRA2OBgdW4SIDkdwrWuJHlwTlPQYIlz1wEUl2:vn0GbeW/Y4Q/1jK8fe+jJHwlPQYIl4l2","tlshash":"5f93025d6a0ade3d5351fed0a0399fb3ccba4106a3a3aa2f754e8211ff445a5c80a58d","first_seen":"2026-09-15T18:30:44.702687Z","last_seen":"2026-09-15T18:33:40.64283Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/12/biancaffe-_logo.png","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.309Z","timestamp":1789497162309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/biancaffe-_logo.png HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3b9b730bf003ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"2f68-674ef302-cb70500977c1d235;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 03 Dec 2024 12:01:06 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CA%2BX%2FFwxx7UEjKFpDzG7kARxsVTEaQLh3YIE%2BBVaZ0Ma0f2808G5DP0BFD8UXQp7VrJNP2nKYs8B11LGBPmtKdxUmMpA%2FJ7HKlubX%2FNXYK6lQGyWj20bKLvVVqVeMpnduWKjX4wccjr%2Fr586rQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12136\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12136,"size_decoded":12976,"mime_type":"image/png","magic":"PNG image data, 298 x 52, 8-bit/color RGB, non-interlaced","md5":"b0a6fc1dc8b781f37013c4c4f132c86e","sha1":"1b35fbcb36c37af0e336cc15ee5c8680f0286b2c","sha256":"1c306e65f90432a47a0e50b784531296219430242a65e249393d3860b118d76c","sha512":"b817e5be94fbd90ec68a4c5a9465303df1f4946113c435438dbd77f8775c886c3a82d0eccd453881e833de69dc60d090fcbc289796e01d348a0a01f8ac679bef","ssdeep":"192:KCX+w9hUMRwlDkn3zIz9QUtOJmqH0kTwBmsJW1wNqgB9EiOwaICfs+pN9arlR:9x2an3UzyUtLi0wEXJ1fEib+IrlR","tlshash":"b042bf24ede0d890739aae9b91c9a257db370ad4df415246bce27923c0b14f5cc6e4cb","first_seen":"2026-09-15T18:30:44.48006Z","last_seen":"2026-09-15T18:33:40.64335Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/12/Romcaffe_logo.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.311Z","timestamp":1789497162311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/Romcaffe_logo.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b730befc3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"2048-674eee48-62bce8ce9f6cbb2c;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 03 Dec 2024 11:40:56 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6MlbW8HOi54Mx9EGwDRW7F2YXfw6uBwTr3VRkIkge6DgUlZ4kUc8gKgkwx5t7dBhsREUpsWSccNykrqf9VqVBnCxurCWkwrd8CCM6JSr4YPGIsm%2Be%2BNNENzaghLrvKDcvdJKFXUVs9MzOi9ZWA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8264\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8264,"size_decoded":9096,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"288641c38521c44ca80f7c93ce42c6ba","sha1":"3afc8fea154a7c215abd2ac197b684a7c910857b","sha256":"88ddc72a3640551d3187fa73b26802ac21b38eee73e4b32683f3cfdb4b5972bd","sha512":"f83a6f839e15ad4b2d84747e67c90f17404aeaa85111ee3e95b19e257029687ec7b843ef9b949d5610a2209736e8383a612a8c693f943219e6a1971da66fd8cf","ssdeep":"192:CN2YNMtKwOR5/H4RLEpIw96TstvGCNR16Ag:dYNg74fo2z6oGa4H","tlshash":"3802afe1afb4d3a5d349d274e0f22f99e1c5e92ce321a289344993555cc73c6fb4904e","first_seen":"2026-09-15T18:30:44.37715Z","last_seen":"2026-09-15T18:33:40.643897Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-ecommerce-generic.js","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.105Z","timestamp":1789497162105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-ecommerce-generic.js HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AZ58dxyEEqPxmluD2h9tzdJj0OFncwth%2BZEfNk1%2FAaNaOA5FlBwv6iUNgOX5hl8Z3kBYxKZlN%2B%2F2YbwG2Dfpj1YWG8Y1t4UOiP25OSEcNn5eDe6Pi0KwnsE%2BIqagxSgqBlx%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f4dc63ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1356,"size_decoded":1179,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1356), with no line terminators","md5":"d48860f3a5866271825eda535d8804f0","sha1":"b899fdfa6a5e6c0d85168e15a0396e79ab49ece4","sha256":"106ca65012aff09dbcc88081bc5100244dd5cce0e32e1ff9d9f7bf13628c238d","sha512":"cefde040f6fd7beffe3b53997b12e0e03d365227d52dc0ebaf33597676dcd99dc03fde42c6664b9431932d7505517b76a14f553d7d54d0c3fa21f6010c1da217","ssdeep":"","tlshash":"b32103c276b7e0b349ed08054c7ef71bb1611f8a345cd042e905a6b42ae4dfbb009d35","first_seen":"2026-07-23T00:51:43.706039Z","last_seen":"2026-09-15T21:16:13.776725Z","times_seen":402,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/59c51d6eaa4cb33475a8d8e3d66d21b8.js?ver=d21b8","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.114Z","timestamp":1789497162114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/59c51d6eaa4cb33475a8d8e3d66d21b8.js?ver=d21b8 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=68zlEo1VlngXKVXW9hf9q0abWDQCCo2rE2CP3NoplVTHOWJ3OxVEIQKod%2FOd8KxwvQXtHVmkWlnT1SImc6yfwtmVAhAbZo0KNHHon1pNTQ7O42dwfbnbRraLQ840u3HsKXTA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f4dd03ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8969,"size_decoded":3505,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8802)","md5":"8febc92f99c2aeaa04808f0231164b1c","sha1":"91d7c46f06862f2cab09584d3562e5751d8681a1","sha256":"9c95d41f10b01d356159e0fa814dbd7088f696d622124598533ef97022a1632a","sha512":"4f01a5504b0885b16d89885602db66da14a376805c91f6a6c1f03db4b9ade2b806de04def0f9e67b00da954044b062c6cdb6b0d90fe6d6d5d306cbecd9c43524","ssdeep":"192:mEPKasXzHz9D5/6J8bvctcfq7T5EsvfikrCeexsvfip9Y8pY7pZpzbhHyQ8HFl8I:mESjzHz9Dpm8L2cfq7T5EsvCeexsvfiL","tlshash":"b1027189760174221b9f90fad91f434aa3375828b40580bdb0d4d4ee28f252d777bfba","first_seen":"2025-01-07T15:38:30.269049Z","last_seen":"2026-09-15T18:33:40.64501Z","times_seen":56,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.ceneo.pl/ct/v5/script.js?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026t=1789497163003","fqdn":"ssl.ceneo.pl","domain":"ceneo.pl","tld":"pl"},"ip":{"addr":"5.134.209.153","port":443,"asn":42656,"as":"Allegro sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:43.006Z","timestamp":1789497163006,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ceneo.pl","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 16 Apr 2026 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:CC:D3:01:00:A0:05:79:8E:68:CE:35:3A:AC:33:47:4C:C9:EF:60","sha256":"16:C7:26:1E:69:F2:8A:15:1C:08:E0:A4:C2:5C:2A:3F:0E:5E:F6:20:91:A4:C7:2F:A4:AF:9D:83:F6:0B:50:F4"}}},"request":{"raw":"GET /ct/v5/script.js?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026t=1789497163003 HTTP/1.1\r\nHost: ssl.ceneo.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public,max-age=600\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nrequest-context: appId=cid-v1:c6d2b834-9961-40f1-94ff-46263261adeb\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=10886400; includeSubDomains; preload\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; img-src * data:\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 15 Sep 2026 18:32:43 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4418,"size_decoded":3128,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4418), with no line terminators","md5":"d3449c18d8beae30651d59133755918b","sha1":"56931a966705d3251fbf64c4918061379eafaed7","sha256":"c995b93eb76d5e71b992b72e41c97c6aa296dfbd95508b420775980bb48349f9","sha512":"b44d2252daf9cbb6030caffb84f1cdd43f32e5bb02626c0749a9e5c5695171a9bc242c44576532bb1f3568ce6fa06131245ce2d1466fc4389d9e3ef8ae214c08","ssdeep":"96:d7V8iaulqW4ubsnLSub9CeACDiMlAl6FYyclPfycwRcDGbK37eAyHy9CjWIch:ZV8iaOqubsOubxACD3lAcYzlP7PD8mKo","tlshash":"6191c81a79e3316543da40d912bb2109f13d05693c5494e081b9e8af3e33e6e43b7f4e","first_seen":"2026-09-15T18:30:44.560162Z","last_seen":"2026-09-15T18:33:40.599377Z","times_seen":2,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:43.118Z","timestamp":1789497163118,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kawawbiurze.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 13 Sep 2026 10:07:58 GMT\r\nexpires: Mon, 13 Sep 2027 10:07:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 203085\r\nlast-modified: Mon, 15 Sep 2025 17:11:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23040,"size_decoded":23873,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-09-15T20:25:26.24723Z","times_seen":192076,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:43.121Z","timestamp":1789497163121,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kawawbiurze.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 02:02:14 GMT\r\nexpires: Fri, 10 Sep 2027 02:02:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 491429\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":24413,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-09-15T20:48:18.535676Z","times_seen":267389,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.ceneo.pl/shops/Content/css/ceneo-widget/ceneo-widget-small-main.css","fqdn":"ssl.ceneo.pl","domain":"ceneo.pl","tld":"pl"},"ip":{"addr":"5.134.209.153","port":443,"asn":42656,"as":"Allegro sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ssl.ceneo.pl/shops/Widget/Content?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026contentId=ceneo-widget-small","date":"2026-09-15T18:32:43.189Z","timestamp":1789497163189,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ceneo.pl","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 16 Apr 2026 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:CC:D3:01:00:A0:05:79:8E:68:CE:35:3A:AC:33:47:4C:C9:EF:60","sha256":"16:C7:26:1E:69:F2:8A:15:1C:08:E0:A4:C2:5C:2A:3F:0E:5E:F6:20:91:A4:C7:2F:A4:AF:9D:83:F6:0B:50:F4"}}},"request":{"raw":"GET /shops/Content/css/ceneo-widget/ceneo-widget-small-main.css HTTP/1.1\r\nHost: ssl.ceneo.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ssl.ceneo.pl/shops/Widget/Content?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026contentId=ceneo-widget-small\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 16 Apr 2026 04:27:48 GMT\r\naccept-ranges: bytes\r\netag: \"1dccd596126f10a\"\r\nvary: Accept-Encoding\r\ndate: Tue, 15 Sep 2026 18:32:43 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2826,"size_decoded":1459,"mime_type":"text/css","magic":"ASCII text, with very long lines (2826), with no line terminators","md5":"759ca8877603436e53140134204844d4","sha1":"27ba7bca5289d645e75e20b742a50025cd68b3e8","sha256":"26e5dadfa6431a67ed471888ae373288a018c38a3e2cb8bc758cb2c51c647ced","sha512":"669a9536dd71dd9436168b95a3e58b7902dc8612993dfbf565820d5edfdd8a75176816e579e35458e889c0a812462bc839756fdec726527a1bfb518014ec6186","ssdeep":"","tlshash":"6c5194255725563ebc1b947538d493451227b8c0cf238b48aa8fbb95e8cf5a64332f0c","first_seen":"2025-05-17T00:43:37.508529Z","last_seen":"2026-09-15T18:33:40.505861Z","times_seen":98,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2019/07/kawa-ziarnista.jpg.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.201Z","timestamp":1789497162201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/kawa-ziarnista.jpg.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72fee2f3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"215c-6a1efc64-c34219a498930dd8;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 02 Jun 2026 15:53:08 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fxLqZ31PVQ4r3LIump%2Bx5O6lXDDdh5TxtPdJ8hJv8iBRCysuTbJPsDLEUG7bbvmN%2Bbb3CMzJLwigjtMgwaxvpcl1AbJScmbJunUg4AngJ%2BTLt5pI6PWbYE5Ln7h9DmwCgYDMl9prOWHJQah9jw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8540\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8540,"size_decoded":9374,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cebd2b53ced1236cac7a9def41b18448","sha1":"ced451f84c6bdabe9c872fe18b88ba5161798dae","sha256":"80119f9bedb0edf8c2d88bea97bbcd69c89c7e36dc7bcd00405787f748bee559","sha512":"ec1b8a8ecdb9a4a08241a7b9442467304515388cc41eaedf81747403ebb9d623df7e7612fda762f47791f08b662484a4f7872c5f65173184876153e9ac273ebe","ssdeep":"192:bzilY70gTghJOvTMXMATnmIdQjEdU8POU3WHwo:bzio/TGEwXzTn04POcMwo","tlshash":"f302be624772c61ae8b12d3d5ed38f4621c2ae12a43831ba14f101dfee8ca9a8834dd4","first_seen":"2026-09-15T18:30:44.67318Z","last_seen":"2026-09-15T18:33:40.646667Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/12/veronesi_logo.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.318Z","timestamp":1789497162318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/veronesi_logo.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b730bef23ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"49b2-674ef3f7-8bd21a5d4abff330;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 03 Dec 2024 12:05:11 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jtHeDJ9hQpoqJ3A4JEZdO0V3A5DY8oMEgyxMG14o%2BAI1fQikVCHLKwAVB%2Fa3KOUEe1LLFnmtGMwI7qJPAngLhr%2B1zpQUKyUWXEOKQ5UCTP%2F7L%2BnS49yvhQs2SUx1akqV2%2FbYEZvbgNDNTXlTVQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18866\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":18866,"size_decoded":19707,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2048, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=2048], baseline, precision 8, 75x61, components 3","md5":"2244af9e6ab565b95288e2bf56928ca1","sha1":"4504effc3dfa2fc0ca20efb5ba12e48553ed26fe","sha256":"6a2c3e6903ee49a6a414cb9c83154d2913dfe6fedbf3eedd298d6325f95dcfdb","sha512":"f45fa660d58d7757116cf77d2e30a606cbf31714b777a77c07dd6748a55ea1c38202e37773a284bfc8002794b5e17e27cce9b0894c9a5440bed62b6cba67e344","ssdeep":"192:CyqgajZxFpsWTxrSy4lxUwFyqgajZxFpsWTdknmNBDQBv/rMk6MrIzkT/u61IC5M:9atJpliEatJCnmNBUxNbb8icwUFUDAD","tlshash":"7d827d1bab539e42f8d01736d468f753a311bf64aba31a16340cb342bf797a15c1d683","first_seen":"2026-09-15T18:30:44.684237Z","last_seen":"2026-09-15T18:33:40.647188Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.ceneo.pl/shops/Content/img/icons/close.svg","fqdn":"ssl.ceneo.pl","domain":"ceneo.pl","tld":"pl"},"ip":{"addr":"5.134.209.153","port":443,"asn":42656,"as":"Allegro sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ssl.ceneo.pl/shops/Widget/Content?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026contentId=ceneo-widget-small","date":"2026-09-15T18:32:43.184Z","timestamp":1789497163184,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ceneo.pl","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 16 Apr 2026 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:CC:D3:01:00:A0:05:79:8E:68:CE:35:3A:AC:33:47:4C:C9:EF:60","sha256":"16:C7:26:1E:69:F2:8A:15:1C:08:E0:A4:C2:5C:2A:3F:0E:5E:F6:20:91:A4:C7:2F:A4:AF:9D:83:F6:0B:50:F4"}}},"request":{"raw":"GET /shops/Content/img/icons/close.svg HTTP/1.1\r\nHost: ssl.ceneo.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ssl.ceneo.pl/shops/Widget/Content?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026contentId=ceneo-widget-small\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 292\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Apr 2026 04:27:48 GMT\r\naccept-ranges: bytes\r\netag: \"1dccd596126fb24\"\r\ndate: Tue, 15 Sep 2026 18:32:43 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":292,"size_decoded":507,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"344885c317f289afaedd9bfb5b5d4bf4","sha1":"a62d902b0b0b0e2781bc743fbeab2300d851fffc","sha256":"c898a021853b7a799862730400b43997ef2874f06ec3277a8f544c9db78251ff","sha512":"c3843a40fc66f0341b62f5d04812cd94779fe1be7837fa6d34a97e787e372b8354ce32cde44eb3abe70e78217ca61e1b915f648ad58af033fe1806ce740e7564","ssdeep":"","tlshash":"d9e02e348fd7e2b8028927802b22602c92dcb26c83804c3bd28834e652f23c3c8270f8","first_seen":"2026-04-18T10:07:30.357901Z","last_seen":"2026-09-15T18:33:40.647763Z","times_seen":42,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2025/04/zakupy-hurtowe.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.173Z","timestamp":1789497162173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/zakupy-hurtowe.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b7300e553ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"62e2-67ed14da-2679faf1a90ec77f;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 02 Apr 2025 10:43:38 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lkty9%2Fae88mQsDYZwGj8cXuuCO26fDl2eJdMQH71tt5rpsaX8xZSWULqYHmLRHavx2dl%2FvHQv2YUKFBMhURR60ilzlRhVPMSLPOmyM269xbKy%2FoxPWW4mfiZOrDj7jumhOc65wPAVo2LUgho4w%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25314\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25314,"size_decoded":26149,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 327x175, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6e7e2e5fe7ff6b31f04372f58644923f","sha1":"91c7628b3f915520c1731f4967325fb67be20c8f","sha256":"0cc94e45f04e0facd783ca13bb94c4ee72a90449575911ed51262eaf7574ee89","sha512":"318db1aa66661fa9ae022e213447e1bf10c67e7d5891593f6c53b0326e905e5b6c5542b778a633781c2c045b47f506d9e116ce12de697459d03d923ff25dbe22","ssdeep":"384:0Xgd3DuBkit1DC5pxvYW0mjDik7m/N/3h6P+Z7YOFHFJHZoDpsw/SIv:0XgdzqFfexY1q4Ph2+tYMHF+L6Iv","tlshash":"fab2f2e3de94ab07b2102c8d2d6dba14b8b662b035b933cdc6d7cc902c091857835b1a","first_seen":"2026-09-15T18:30:44.819958Z","last_seen":"2026-09-15T18:33:40.648873Z","times_seen":2,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2018/03/Pera_BuonAroma-1-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.225Z","timestamp":1789497162225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/Pera_BuonAroma-1-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7300e593ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"1b291-6874c2b2-7a5086a3175f9f25;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Mon, 14 Jul 2025 08:41:22 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DqKk%2FHyeKL7NVA1tHv3mcncV0I%2FA4sVy78juGQJLb%2FympKO0Y4BWq2rNxk19qKyBc7XNJzPHslzi5AnLZVdDwEalcvuzgaMINQzms97wfscXNtmtGiKlCchLTa41LaO8cWd%2FtDkzz9Ebbb%2FywA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 111249\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":111249,"size_decoded":112090,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=1000, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1000], baseline, precision 8, 450x450, components 3","md5":"f1512922a9bbde91c4a4e00a2d7ce13f","sha1":"71491642c9c91b12d559414a5f3aa1ebe3c67c95","sha256":"0f1fb1ac9b20b1b11b82336d287d955d482392927a923f2078ddae4071856d7c","sha512":"02fc361fff0742dbb23df2f7648cc2bbf2dc4ad5ec705da98f219543f900e7c4d735e4bb5519c5a8e922fae4f9d2fc8d247b6d15de9df2e17ee24a935671fff0","ssdeep":"3072:jU4Kf9RLXOysTZ3F41Rdw2g3hybM91pN6PtW:Q4OLJo8da3c6DoW","tlshash":"54b3e0072994095aefdb836f1396a185d161536798fe2339fa0c0d11cf20d963daae3f","first_seen":"2026-09-15T18:30:44.39935Z","last_seen":"2026-09-15T18:33:40.649406Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/09/Venezia-Crema_2pcs-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.266Z","timestamp":1789497162266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/Venezia-Crema_2pcs-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e993ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"26c61-66ed1b75-26bbae6053511db6;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Fri, 20 Sep 2024 06:51:33 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VWnXu7nP5AWNMiIWNf5NJhHlm7BWY1%2BpHk2kAiCIGhoFtbADPexyvmmm%2B7QfyuaKQ76TF2XXvPWrhvqSb6PEAzd7Zz0%2FPUIwfs9%2F%2FHr3QQlk%2FoMSIZiDHN28ZTPoa%2FlhoPIRYgJ43GmBFiKnwA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 158817\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":158817,"size_decoded":159662,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x450, components 3","md5":"c4beca5d6303082dd5a7904ee39559bb","sha1":"a279a8083a596f120857c2c90089c403961590a0","sha256":"e11da7cc43575b58233745ac1d71b796773aea31f5fc160beffb143e6d6254a6","sha512":"58aa557e13b9e3384291c122b28a1164c90f1e804417531ccb95ad8ab825bb4daa14f2b8772056bdfebc2107a423d59d3a2f1209276e21869a4a6a4a270e7477","ssdeep":"3072:B1pdXK8HC4C7KQro3eqxDNkmtp5XA2Dz2yy5DtrprLxjTziaVu8T0F:BHwxoO6bNL+yy5DtrhxjTxT0F","tlshash":"edf3123cdb93f27cd363962ccdae567bd2092cdf06a9650941d818b0cac5b742697b2c","first_seen":"2026-09-15T18:30:44.795639Z","last_seen":"2026-09-15T18:33:40.650051Z","times_seen":2,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d3bo67muzbfgtl.cloudfront.net/edrone_subscription.js","fqdn":"d3bo67muzbfgtl.cloudfront.net","domain":"d3bo67muzbfgtl.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.233.36","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:43.343Z","timestamp":1789497163343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /edrone_subscription.js HTTP/1.1\r\nHost: d3bo67muzbfgtl.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nx-amz-cf-pop: ARN53-P4\r\nage: 48623\r\ndate: Tue, 15 Sep 2026 05:02:20 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nserver: nginx\r\nlast-modified: Mon, 14 Sep 2026 10:00:32 GMT\r\netag: W/\"6aa7c5c0-33e4\"\r\nexpires: Wed, 16 Sep 2026 05:02:20 GMT\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: Hq44Fxr4UYCKCbIPvoai8oJzZCWSxAK4j9LjcyuD5z7KsgJzIgFYDA==\r\nvia: 1.1 0eb659b3177cc8c6d47a4ad42c31ad9e.cloudfront.net (CloudFront)\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":13284,"size_decoded":3967,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4244894e2efd38bd31819da6a784e66e","sha1":"a7e71711820b22a8e5a64167e84f13464a9fd182","sha256":"447613d70134e3a26994f444690f5c6d51ae8a806b86ab854245067858e81849","sha512":"755b48e83ea3a5137d35caf3209c952a68614ae7265af9513f311b5208f090023c27d6d59aeb56e6fdc127f7b8312f0c85ed927efd1cbf6586abbe6f5692690e","ssdeep":"192:FyOcBwSu8Yfirx3pppfyOcpL4ON/yKNzr4k8SyuRjy7CG9JMDNL4OggO2jjsziSM:ypppHc+fwpN222memNEEHPsu","tlshash":"98522f9956bf21709267207c4fcb1045f634a04b6945ce5d7e9c83949fc8eb8a2f3fa8","first_seen":"2026-04-17T18:48:40.866426Z","last_seen":"2026-09-15T18:33:40.650616Z","times_seen":124,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2025/04/ekspresy-do-kawy.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.152Z","timestamp":1789497162152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/ekspresy-do-kawy.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72f9e083ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"3728-67ed033f-35d7e174bfe3ca19;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 02 Apr 2025 09:28:31 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jg0ACmivi18Udq5nbaQSpaV66vk6hK1OuC7R2kHCe2UcNKZNlUk6hbGVv6EVnfOZWyAnbSwuYl8UfZHpg74IpuJdNpGfPtcvRE%2BiLNpRnYnfy4o5c3vUoc%2Fu63nVljpkaRsMNfsSvFMWGx0fXw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14120\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14120,"size_decoded":14953,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 327x175, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"556e488805bd285befd659b70a5d0722","sha1":"fdfbfe09c921b7046c84b835d5618e3a94e43b5c","sha256":"46fe08ac86b5dfb6e60a8c14a503087b530b61ee8010f79d4e24546a0c07cde6","sha512":"d1d0b235aef1d5f258ca9a9a54b914fa6750a012d0eb7b8d40a616b953f4bc6a7201e173a01628299f4e32de6f137f94ef202d10ee03fffdb459263b7cb3b8e4","ssdeep":"384:XtoEpqIlGwM+14QjsE/5177Z/aW14tNwfu8b7f0y/fvYVPhN:JlGwb1PjX/5JsWOtNwW8b7f0yGPT","tlshash":"e252cfb7a55ea0628ee5d92cc29768423375c6241ace0dc9dfc8060f19f22f05caf735","first_seen":"2026-09-15T18:30:44.796683Z","last_seen":"2026-09-15T18:33:40.651135Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2018/03/loyd.png.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.334Z","timestamp":1789497162334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/loyd.png.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b730bef73ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"bf2-69f9e8d4-409e0a2c0bf81021;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Tue, 05 May 2026 12:55:48 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eW7VbqMNYBCyUahGMla0Xks0789XEQgqel%2BUjyUv5qgdO%2BmK01wRGYVQ%2BYGcaj2wkmM%2BiLN5N%2BHYZABI9kPHwvYvy07b%2BqMc0n1se%2F%2BIvpJQprgHTp064nw%2B5p6JQAW51ElLdw863J5PUIjYZQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3058\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3058,"size_decoded":3903,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"601dc0084ffbefe7e185145f5d04668a","sha1":"9536abc4a502897a67cf74e2f280daf3d7afd808","sha256":"cae44339a9587b36739beeedecc3d4a5fdcba1dd21afb353dd9398e69c007cac","sha512":"d901c5a5ac12b1b4f7a56c6375e03b133941428b40c209c1aefe789be488dbd96ab1dd95799ba5ed173b1a569312f9642541f50840d3b6a5da0095d78c21516a","ssdeep":"","tlshash":"30513af777308b5eda3658b88ed02329f2b27d229310a16a438af2470f62d51de36558","first_seen":"2026-09-15T18:30:44.54895Z","last_seen":"2026-09-15T18:33:40.651685Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.ceneo.pl/shops/Widget/Content?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026contentId=ceneo-widget-small","fqdn":"ssl.ceneo.pl","domain":"ceneo.pl","tld":"pl"},"ip":{"addr":"5.134.209.153","port":443,"asn":42656,"as":"Allegro sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:43.075Z","timestamp":1789497163075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ceneo.pl","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 16 Apr 2026 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:CC:D3:01:00:A0:05:79:8E:68:CE:35:3A:AC:33:47:4C:C9:EF:60","sha256":"16:C7:26:1E:69:F2:8A:15:1C:08:E0:A4:C2:5C:2A:3F:0E:5E:F6:20:91:A4:C7:2F:A4:AF:9D:83:F6:0B:50:F4"}}},"request":{"raw":"GET /shops/Widget/Content?accountGuid=4d61c734-e676-4fa3-a419-1dc8773990a0\u0026contentId=ceneo-widget-small HTTP/1.1\r\nHost: ssl.ceneo.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public,max-age=600\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=10886400; includeSubDomains; preload\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; img-src * data:\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2241,"size_decoded":1449,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"6d5333176f45fda0eb9da68021116e79","sha1":"f7efb864efd0056ff75f3946306cc613a467668b","sha256":"c5219c11f3503ffb8c6d4982d983c3176f0cf31387005a8872a85035f91691e9","sha512":"c9703149abd1c567cc3eb6753319e832a2d288073d845c1d8e0cff0885993a7826f10a008ad705b877b6a441ae2feada73783b3d76dfdac376a7761b1ec31324","ssdeep":"","tlshash":"9141ef36e4d466215233c3a3a43233a9f961494bd6150501beed3b8b2fb8dd84827e66","first_seen":"2026-09-15T18:33:40.652254Z","last_seen":"2026-09-15T18:33:40.652254Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/litespeed/js/073b58f5146896c896805e996afda5a9.js?ver=da5a9","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.109Z","timestamp":1789497162109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/litespeed/js/073b58f5146896c896805e996afda5a9.js?ver=da5a9 HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Z9XpfN3kfD%2FANYuAG54UNU49OWLxk7eciiH8SCZIp%2BxcWups68j7Fn6Kk5eV0pNhHJftRRvVT5%2F%2B9G6O1Y5DIs4CNgk3D%2BN8Q%2FuzAjLRzpeJHahvAeS5gJ4aPvFmdS4o3zY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9b72f4dc73ca8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13008,"size_decoded":3763,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1532)","md5":"9c63d79fcd8bc729acebb3d97dcbba93","sha1":"3e09ee1242fe1b79d34380e85653471c85ffb7ee","sha256":"99a97148b859ce8fa4d36da1f0838875d6c7b60ccbfa45abe013de5f9e6b85d5","sha512":"7e5e2598d8bc399d9ea158f544fca3088352fc6d992c339e494e0aa08d76f544833a1e47fcd546aa4413e9a036d861c7150082633bdde498d66cc868f6643c09","ssdeep":"384:OIpzOPOQqB5gD2Rcc2UH+xN5ESlkTEr2xC6TtBBCm:OBM5gD2Rcc2UH+xN5ESlkTEr2/TtBB7","tlshash":"63423145b0e8f199c8f63cb0d83ff7852413ab73aa0199d4e8598526ca3cd6234db57d","first_seen":"2026-04-26T11:24:28.727771Z","last_seen":"2026-09-15T18:33:40.653231Z","times_seen":7,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2025/04/venezia.webp","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.191Z","timestamp":1789497162191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/venezia.webp HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3b9b72fee3b3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"1f4c-67ed2421-e6b2f2347e67a3c0;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Wed, 02 Apr 2025 11:48:49 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IY6auPE4z0iMSUvlKFB7jYIinE4DiOFFqdn5dtld5PuEJ4SI8qjB93HTpmCfq03376Kbs%2Bcqevs4uLAjMMFXUY9cZg%2BH3tzSyl7oUVZXVn6J%2Flr2db0gb0LoFeJJw7V8Y%2FQ2BpKf%2Bc6DNtUQfw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8012,"size_decoded":8850,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 327x175, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8c54637e4603ac31276ff4bef49060b4","sha1":"a97c7557ffa8803b3ebc967bcfaa0180c5ea739a","sha256":"309fadac2af48a5247704fee456694c6a696a877d2e8c0d949322a8e0e6a6acf","sha512":"113506f6326574a6baf96b8cd06f911f1b05b67ccd3e91bf2b95222332e5a21a1fb184f3282ce24034f9a8aa227d6cd15c6c55f28d53b13175c90e521972ad2b","ssdeep":"192:z96Ii/ArPIU8kVdISheV0Kq2JldA90Z73q/oBmft:z96I6ArhMWeVBbJl+q6oa","tlshash":"25f18e31a8162143e1cdfc659dcdf754d8107548a52ab1a7e142fb6025aa68cff4c3f4","first_seen":"2026-09-15T18:30:44.527248Z","last_seen":"2026-09-15T18:33:40.653726Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kawawbiurze.live/wp-content/uploads/2024/10/Caffe_Crema_cappuccino_2x-450x450.jpg","fqdn":"kawawbiurze.live","domain":"kawawbiurze.live","tld":"live"},"ip":{"addr":"104.21.69.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kawawbiurze.live/","date":"2026-09-15T18:32:42.271Z","timestamp":1789497162271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kawawbiurze.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 15:02:34 GMT","end":"Sat, 05 Dec 2026 16:01:06 GMT"},"fingerprint":{"sha1":"12:D0:DE:CA:ED:A2:68:30:A6:F4:BE:F8:60:C0:CF:66:11:CA:53:12","sha256":"A4:79:3A:C1:7F:24:3F:7F:3D:AE:DA:67:6D:C7:19:FE:1F:B4:3E:C5:A1:8A:C5:31:7E:E1:10:B7:6E:D1:C5:07"}}},"request":{"raw":"GET /wp-content/uploads/2024/10/Caffe_Crema_cappuccino_2x-450x450.jpg HTTP/1.1\r\nHost: kawawbiurze.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kawawbiurze.live/\r\nCookie: _lscache_vary=033614c30b7889bd63825a375f8481bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-turbo-charged-by: LiteSpeed\r\ndate: Tue, 15 Sep 2026 18:32:42 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3b9b7305e9b3ca8-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 203\r\ncache-control: public, max-age=691200\r\netag: \"2946f-671a579d-2a2a3bb6562ad3a3;;;\"\r\nexpires: Wed, 23 Sep 2026 18:29:18 GMT\r\nlast-modified: Thu, 24 Oct 2024 14:20:13 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h2TpLaq6ZuGrEzAVWXr1fFMHEQYA%2F3hMZ4oh1XRd40ZulG26P2ety15tPu%2FNR%2BdqCchhu9M7Cpm8can5bi4gtN6PXgaD8dnEMe48QKSKBQxCuy0FkNJRGjr9kO%2BqYvbeswVIhOiwvfmCrS6Gmw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 169071\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":169071,"size_decoded":169910,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x450, components 3","md5":"e86f8fc4fb758afb4c054137a06fd62b","sha1":"149938943e952a4a86288d04d002e62219cf3c06","sha256":"db6bc809c8b086039e666bfc5c6d16d7d0bb7941a1dae0c66ecb495b19ca8ea2","sha512":"2b7602ac6eeb67b3bcf3b5a2fa2d4f3fbd941bc923bcb88cac3a0a89f1c08ac3f2b38bd4ec418dcb0e72c85e8bc12d4bad7d7ff519ab54fd710f0f114f8deb85","ssdeep":"3072:AkpcCSMqpWIrThK/TGuohYm1bCtafozhjNk/1mH6CxS3j0kScZgBuP:A8tIy6b1GafoXy46CxSZScmuP","tlshash":"acf31274f7dec694cb1309acf6ffac6b1711e6e92ae3455748a23d1ac061a8c440f479","first_seen":"2026-09-15T18:30:44.818137Z","last_seen":"2026-09-15T18:33:40.654282Z","times_seen":2,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kawawbiurze.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kawawbiurze.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}