{"report_id":"7c0c7ddb-0d60-4d34-bbf4-aa29c1af4cc7","version":0,"status":"done","tags":[],"date":"2026-09-10T19:21:49Z","url":{"schema":"http","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"104.21.37.51","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"title":"Jehn Ceramika Sklep Internetowy","dom":{"size":157182,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (401)","md5":"141cc16683112b919dd724ec829a4a0a","sha1":"1913b6d14b9e09b4e23593181b19a35eb3ce1035","sha256":"66fc179e268e3f88e7f8e5b233c28dae582f945050fa88e0955e56f3ea0506f9","sha512":"9843b5cc9c1126f04a6529bace3198c763fa1e0be9071d84b0a01ff0fc5b13c0fe41e63b155208d41b942f7b5438e1bc8698e6a878e275d56ee6b3e49168e065","ssdeep":"1536:BTZm9NT3XS2dttquam5zDuC9ojet81O7uuX9+yZHAl:BTZm9ZXhPttbo","tlshash":"e0e38321e4f93427407341a87baba60e7e92e117c60b8d0477ec5be05fc2e92dd576ac","dom_hash":"domhash7653c339255310622e6f37a70891ef52","first_seen":"2026-09-10T19:21:57.045657Z","last_seen":"2026-09-10T19:21:57.045657Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"104.21.37.51","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-15T19:21:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"jehn.mom","ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":256,"request_count":64,"received_data":16858550,"sent_data":43433,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"SoteShop","description":"SoteShop is an e-shop management software.","website":"https://www.soteshop.com/","common_platform_enumeration":"","icon":"SoteShop.svg","categories":["Ecommerce"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":3,"received_data":58391,"sent_data":1733,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-06T22:44:31.282543Z","alert_count":0,"request_count":2,"received_data":917678,"sent_data":959,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":4706,"sent_data":536,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53c9654e836eb871f9038e0277a1c105","sha1":"920016ca8da1710e44144534dee1a48f55314d03","sha256":"2d897b1b081016b2e5dbf2b6601c5200be5ea3ef80e3a292947d491f34a4a692","sha512":"a6158bec28730fbff6cc33ba94f3e468b4f6654dd208b7d5df7d407dad9f3531adc1bebc0e639660f12834c667488159155fffff18293c7630147ff00f5afc02","ssdeep":"","tlshash":"a3b012c832030c5001e127500f1f7a043140310090e099210d0260491520d072240454","size":88,"data":"","first_seen":"2026-06-14T10:28:00.957425Z","last_seen":"2026-10-06T05:40:49.163752Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e320134c00ded5b64b0a80a56645164","sha1":"53516cd7f99ce8e0623721ad4ceade9da86a8c03","sha256":"e0a1af1eeab620d4b3862ca6d566dde8466d63c9879fddaa8654f62b363ea746","sha512":"1017c4f811cca18de0aad6432a1472fcc1edc52708d3e8a809440d17a7981d635b5ea277acc67721ee7d20186937fb02cc12948d89e360ee91dcc2bd18b07e7c","ssdeep":"","tlshash":"29e08cae283b28320943219f287cb4001530404be90ebfe0307e40580fdc35cdba2e70","size":347,"data":"","first_seen":"2026-06-14T10:28:00.959226Z","last_seen":"2026-10-06T05:40:49.166191Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"290df3141f12b524faade92ce209d685","sha1":"b424e118623ff822f22052eb9d6d9a5331bb87f1","sha256":"88e5b62aa8c13cf1990cbe1b669c0b6176eb74431465d1b4f6d59295251522ad","sha512":"44d1a01cbe24e5d437f381ee8671c6c7ce7421b69cadc9704d921bf79dbefaa86f8e65a9771cf8f6c71321a947558128baad43e6e62d1bd1befe84118fc44d4b","ssdeep":"","tlshash":"90a0028504684e7af91f17408326c440d807475456868971416823098d00513872d541","size":58,"data":"","first_seen":"2026-09-10T19:21:57.146326Z","last_seen":"2026-09-10T19:21:57.146326Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"23ee4673c86be34a9569601b0d5ad825","sha1":"679705e9ef855b709400bee92e0d53ff81b59331","sha256":"5d9f4499e94b91a317ac0eefa795962df3cfe8d75c59c36fb2caf028d7c9042c","sha512":"4acaaa28c5c7f9438b43d452d5a94db7605edcedf55fa93474bed5dcc6b5bcab8d4241b7819413e73558f1770740e49bed7c3065e2d807291763fd2b94877b24","ssdeep":"","tlshash":"c2412c9974be302b1847a2ab26eea006456020b72114ed6d365db0640fc1f6bdfe5ed7","size":2023,"data":"","first_seen":"2026-06-14T10:28:00.972623Z","last_seen":"2026-10-06T05:40:49.170138Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab3c531db0c37b31fea7a16ede844940","sha1":"02a271d52662499938e4e9df0d533de4772d9d36","sha256":"e6b4bba979a1e4fcb7ebd751fd56943759955d15d72adfc781855c8cb1da6cea","sha512":"9896dc069fc5e441823100f0871cfb55f6dfccd17629418fec1fb4827162c33596b5a4012c1267b3e5f2cbac29cb273c83a7eb6ce5918653cc0ac5856fd2b6ab","ssdeep":"","tlshash":"2f21ac28f7cc7114597b1128667f93d91d2d5a31d2008d71bdb364886ea35ab3117e8c","size":1176,"data":"","first_seen":"2026-06-14T10:28:00.97583Z","last_seen":"2026-09-10T19:21:57.150725Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7919b6fada4f9059e76abdb94ecd0935","sha1":"d786e2cb6e2ebd6c1e72e8c5da84e1163a74305e","sha256":"255791202b705fef717f513677fbba23048dc88a3374662fca3594a88db05903","sha512":"4f407f4f0c51d8b004916de845e096b8db447c905243a0bb6bb9aab2e77d00537a481ccbbd17cdc4b83d8c5a9a1c044c27e2afaed3eb9a454f854cab7d88caf9","ssdeep":"","tlshash":"5501fce0ff8c325e4c5b0419ec6fd5e41e0c9633a70105a37e7ab5aa0c8315fb669a4d","size":823,"data":"","first_seen":"2026-09-10T19:21:57.152751Z","last_seen":"2026-09-10T19:21:57.152751Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d30f68102b380dabdf7fb7e72cbd3844","sha1":"0d8b3b23804bf53b576cad11098ab6c8c8a9d3c7","sha256":"fbb5f9414ea40d3d8c97500558d2f7ffc06af85592cfeda5919f2213fd052517","sha512":"2440ac0de39efee58310e251f1ac91978d6d13fbbcfc20ddffd57800beeabbedeaa2fe02921df213adbf43cbb809d7064acd3d39daa315cc12d94be5b0d390e0","ssdeep":"","tlshash":"8331af5b3dfb20ad9663507a5bff550a211271735148d8193f0c93384fc06162d99adf","size":1753,"data":"","first_seen":"2026-09-10T19:21:57.154965Z","last_seen":"2026-09-10T19:21:57.154965Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f4cf498e9f06fd76a12e9293ab63c961","sha1":"b34ace140fa6cabf3cfe2bafde4e044ee44881c7","sha256":"5ea73297d64c80bd49bb674c40bc595c9fb201bfcd7805edf23f272a28dac37f","sha512":"33bec1d40e37dc0ff0bfdcd7fb374ad9d58dfa2a6aff2a78e5a947b7c102902ce1019b4fa7ef24f3ee56d229e6dbecb5226a516d7c9c0ed96c7aa22bd12abdbf","ssdeep":"192:86CHJM9I0JM9XkVyXA6IpvQfXU3R01al9qu0ZESJK+9+vCCKbET9hqlRHV9hqlpY:8W9I9eVyXA6Ipv8hpuuX9+JKwMtzug","tlshash":"c7829b1698973169a473213c7f7b903530a97453801ddc08fb0ca5720f9ab66edbfada","size":18173,"data":"","first_seen":"2026-09-10T19:21:57.157385Z","last_seen":"2026-09-10T19:21:57.157385Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b006c67e24bfe3a2071e35b23a6ab3a2","sha1":"27aa6e29129d5b2f34ffe4b8ee7c131c0a81010f","sha256":"adbfb675854bf97d0d03f53a4017f2d51f6afdf09661514cdf5cc00b1ac1dbb4","sha512":"b6e1e90f1d0e651d442059c1909b1af99f00ad1bda5e9df2db2e7b6a48ae2755b13275ca8ddba9306ea079e8f1722fbaa8a4f3e3330d5960f8cbd0eaa2be7c92","ssdeep":"","tlshash":"6931ed1d22f261581d7370bea36f632918351527a90abe4cbe0c02c02f8fa74d9a8f75","size":1801,"data":"","first_seen":"2026-09-10T19:21:57.159741Z","last_seen":"2026-09-10T19:21:57.159741Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbfc058777a7a8815d8c8aa1a79e9fce","sha1":"b97f5cce990980b718a74f10b00eca8cc4666446","sha256":"fee914aceea90f9aec3755b78e3ba3d003bf7f40511733b1de3333b736033bd9","sha512":"42719399ff41562218911ff05cd4b7e6420652c7dc0b57dc0eb501cb7439b5a7b54a946005b695811440afea120cbfe6b7cc4a908826a3b8fbd3249e422da974","ssdeep":"","tlshash":"9bf0a01ab8ed2e491073793b2bbb561a2f5e24372005ae083d3cd5d05fa822da80670d","size":515,"data":"","first_seen":"2026-06-14T10:28:00.989442Z","last_seen":"2026-10-06T05:40:49.186386Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4942fb18cda2aeb346d4aa487dc92c5f","sha1":"d1249c43a5d329e060c5f9fc5337e9857af49d65","sha256":"fb96e4bbbfd5d9026014edab46d27ef74e483f1741162b6411559cbfcaff3f71","sha512":"7946677e137b6ff276e9df463064d135ec6c07afdc9d880d90d0df594fad7b927a57264ef5856ef6841efc3e9526a04477af057350b582a111c53c7ace91ec9a","ssdeep":"","tlshash":"ab81225d29be2951663b20ec03df541e3b32a2176500edf0754ccf48afc1284669bef9","size":4083,"data":"","first_seen":"2026-06-14T10:28:01.002455Z","last_seen":"2026-09-10T19:21:57.165627Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c042b67fe48414421db60bb07b8eb91b","sha1":"9dc132754ae271b9ac822646590e13ac8bf6a50e","sha256":"d7780829449d590bf34a96ae9d034324f23bba4ad9a76db3280820c338dea1f9","sha512":"6e8f2466da1037a76757a7c8c4411de55d3109471499eed6e9672ad1989a9f20f7bc45dca3be5c8c9dc42bc6ec33b69955836137b4b8176e50de32157999a6ac","ssdeep":"","tlshash":"18012695ebf306cc8137202c066ba748e79e5843978bcaa17d0c07c12fc87912155ae4","size":701,"data":"","first_seen":"2026-06-14T10:28:01.005551Z","last_seen":"2026-09-10T19:21:57.170751Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9652fe0e1563b3ae218cb55da4a36716","sha1":"47a4d2b8df196812cf957275ece5afba41cb000d","sha256":"e6da6f5a9a94e7f6c0be4d49d6e7707349cf6a5dbf9c79b7877a40b42a28b66c","sha512":"4fa0745db9a04f554865993369078966bd05377bc15bf1c87c2f185206eed7802a1b0d7b2f213fe7fc55bdb9f0d01344960bd2fa1d6414dfd5d6d18963ab0970","ssdeep":"","tlshash":"cc3103c8acfeb404043374396abfb080a2a695137609ae14fa4c01f41fc9b0895a76dd","size":1737,"data":"","first_seen":"2026-06-14T10:28:01.009167Z","last_seen":"2026-10-06T05:40:49.188266Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b5bf64aadbe0038e3c127dac144d3cd2","sha1":"386637ae3cc30eb267bd1ab5cee38dd59d4b3f91","sha256":"067a9bb8d2a6aa262e133637d055c508b726dae913a2c45fb297d81f0c5ed1ec","sha512":"0a10f6dc5df074a1ed442671069d316357e147bdbdba1459c9cccfe84638f65ef9ffa80bebcddb6066a2e538840b01531abbeb2042f5a751d89c95227cae7f06","ssdeep":"","tlshash":"0a41a729baf312b1213bb4ac0ffb2a08f276446330c4ed20381c2e855f8a9741674bf4","size":1903,"data":"","first_seen":"2026-09-10T19:21:57.177691Z","last_seen":"2026-10-06T05:40:49.192171Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"64218f5698b60c794e78d180925f2cd3","sha1":"d3f7ef8a6bb1751d3de68ce8b6ec3dc4d1629dbf","sha256":"fba7e1cfdc032c49b6d22d82bce1d5d045025fd32d168c898d1ce52e9858c000","sha512":"affbfb5a2a7dbb89038024df4293a1b48b1dbd3ae27153411a9669cefc1a1c8f0fc9789bf4fc1523a36a6a931f67a1f8add807db923835c61e1ff772f2cc9589","ssdeep":"","tlshash":"d201e21a54b824920563753f1c2e5200e873a24769ef3c3039cc4a868f2c06c06aeba8","size":735,"data":"","first_seen":"2026-09-10T19:21:57.180006Z","last_seen":"2026-09-10T19:21:57.180006Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebdd118b0f5f3404894563027ea76479","sha1":"68c170d15de2c281cef97f42a5faffc303c46716","sha256":"e9c617533f6a4accaa992d09a50ae360790de1cc1d75bce38b1a740191b8fdf7","sha512":"f170c9666f2c779c05f8ef1ec6d3836db856fb5d39dd7979b67b93ba86c2bf4703f06c71e5603705cfaf5cd0673bbd12b062de0b39e9b66914622f16c4aa8732","ssdeep":"","tlshash":"7fb0123423a1355714b39560ccfb47bd385f350ed5ab0cbe7a941e841fe1468a100c15","size":112,"data":"","first_seen":"2026-09-10T19:21:57.185583Z","last_seen":"2026-09-10T19:21:57.185583Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7621503e6cbee7eadfdbd316b13797d","sha1":"ff2f0bb9d85134ac98a9a68ed0d65a7d254ebc18","sha256":"16d13c41a91315b06a0f84f1f66e3e6d803524ecf6c75232f74c264a116c4903","sha512":"88577cdd3b0250d0e8f47d7e3d2b357ee3ae4c8534711843cc4905c2211734e788c98adfe248e6d451b6669ecc0962be732ee7fc156ae6b8190582b587f930f7","ssdeep":"96:MrNqHH6tPDNSlarbNywbAbUibENomth9JZL:wYHCPR1Zyws709DL","tlshash":"47c1163abcf93519603360750f9b01592835296f5700cd2d79ccea902fd9b984debead","size":6103,"data":"","first_seen":"2026-06-14T10:28:01.013784Z","last_seen":"2026-10-06T05:40:49.228682Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c4716629df87801cc584671afc08997c","sha1":"7fa24c0dab9f15442c70692374b67b82c48f4541","sha256":"219585c1eaa7689a13833c70fc6a03d86567afa0d52ff207281813fac719d2c0","sha512":"bff885113d6b104916c66472f5593795b388e0ddc8f587e33bd498ab6bd9683407b57dc666bbefd53303fbb9435a71c35f079e82a7722dfe498a7b602b433837","ssdeep":"96:xgf2P7owgjBUNNSlavU7NSla5CNWR4w8CV9fn:xTPHgjBoR2j+SaCH","tlshash":"74e1cf39b8fe291e6133513babdb520a2835156f5300dd2d759ce9b02fc4a864c879ee","size":6948,"data":"","first_seen":"2026-09-10T19:21:57.198254Z","last_seen":"2026-09-10T19:21:57.198254Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d58c4d0d018df853ffe7da41da6fc19","sha1":"ce5026bbfbc2bbc3a47451e04647246d62f04b9b","sha256":"5ac109c57880e5058ac2a39bde6408eb8953c4e7273cec8b4f877ef3955dd20d","sha512":"6dd426c948ea8a4e64585d1a0f70f99f90c3c39d718ee7110b931503c888a20ad5d3acb822f25c4620b01a56ac0f0562afe9e6a75bcdb700ede56ed371bf5b57","ssdeep":"","tlshash":"0a41ac20a4726643c073a0279fbf5245bed5f6570354ce90384c56804f836bb8b5b9af","size":1910,"data":"","first_seen":"2026-09-10T19:21:57.201953Z","last_seen":"2026-09-10T19:21:57.201953Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"03626a019ecf836f2f8acdc07949e100","sha1":"76126197bd383e77854b5d96e8dceb0da8447811","sha256":"1d494c64eba731b1f0cf2736bce0823d7a8324e35f2ffb09689cf0543a95dbf2","sha512":"647a5a2c6865331762241e045c7298d29a6319157eb2d09da3d662d05e8cc5f5c31f9af7782a7b507673a5a7b5c693045973f09eb29b38c4a7c8326735746a95","ssdeep":"","tlshash":"1c01266978fb200e68a320b76b6b4011f1bde817500dce10f90db7605f62f5782b41e8","size":765,"data":"","first_seen":"2026-09-10T19:21:57.204481Z","last_seen":"2026-09-10T19:21:57.204481Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/cache/js/f6224338c22e77152b66c696b4f7cba8.js?lm=1788418761","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e03cec320d2125271b7890b17425a08b","sha1":"84b25e8f6058e9901ec6f125153149c3e44aa844","sha256":"d61992d97889e2ec1003079f750cfb4d3831fa489f455dcf04bd416dc6bad2b4","sha512":"fc495d07268c4631ff7c95b0c3246b9dab07628e673bb7347a3a2d7d18045ad6bf1ba64375cf26b2e9b1bc64c04573a4642395f17929b259450dc2d844590be6","ssdeep":"6144:r+vbosn5KhsSeIul5W7drr1mss6gkWCZxN0VYHAvUgeRl5qa31C:GKhos7drrQs9gCHK","tlshash":"38743b8e7391716242e771a6406f9206b3776459b809805cb579cce6ac7ce4c22bffbc","size":356810,"data":"","first_seen":"2026-04-17T06:22:54.437424Z","last_seen":"2026-09-10T19:21:57.098775Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-50821776-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"011210ac34031799e854f5a691b14133","sha1":"8f04c7fecc49ffcb84f6f3d9837462b466de1502","sha256":"4b2d663664fbb5776501842358aca6ceb69a33dacc2de1d1b71934d9f1e35f6c","sha512":"1d68ea920594d95f56bd66ead6f9bb3e6d3964af148b9c194cff5931c87312c9efafaf4e27eba6fefc3229627a27fac96abb4b8bc08ecffea06de0aa38b54120","ssdeep":"6144:JM1yDsPoEV9VKm67B3cDaOhEaM36dKZlT0aCqCP:9Qo2VKpzoj","tlshash":"76841accb3d6742283a3b574903f018bb27a7992b84cc898f286d9d42d3465a9177f7d","size":381308,"data":"","first_seen":"2026-09-10T19:21:57.114547Z","last_seen":"2026-09-10T19:21:57.114547Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39a8679ed70005ee063ea62886141a2","sha1":"52b556cb7bdbe59b9b1ab9415ff905b561b8399e","sha256":"b33ed8fd08f8cf0138f219167d4bb5817f1b09c1d9ac7431e833899ecfff40f1","sha512":"c65e2fe579412ea8ef38d29185f47dec1f4fb871ec28767c104821f1c3368793c4ff577ed58971d27a9bbac97fee734093766954f7e9d2fc0ff1cb687a0ab977","ssdeep":"96:A1VdZYqhPnjpsx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBf2PfCHiUr3:AXdZYqNjpm4yPqSMbqaQGL2QfdDayCZa","tlshash":"3ca1ca9929fb50210233b1bd1bafa918b63895236208dd61bd8c9264af94437d7f1bc9","size":4693,"data":"","first_seen":"2026-05-25T14:46:35.360433Z","last_seen":"2026-10-15T01:38:27.346932Z","times_seen":121374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"51fa67e76f99e87859cf05609714a4ce","sha1":"8be8af070d326ba0e23730e45fc5ba514a453b94","sha256":"ab908f480c5382b3a219bad63a8f0747e6418a50eb9e75e9cc79ff825fb8befa","sha512":"c9065c26a5dba216352fcc4a5d54c6f2addc3c2812c633f88e78c7a8b4762c47edebb6efdb8ac9fb6b04b39a83ec159250039b87c4914f1c67900499662b4567","ssdeep":"192:jE3gbwWEbGbdb4/TCOiiydKYy81A3OZV1Y7r26y5k/rmIG+lGh1Md94EtlgpMDi0:1bw5bf/GOibdKUA3Ouk5C7kw030","tlshash":"ca52e6a57236a1c9503f25a2703eb60990635c7ade07c150b5fa88e45bbddc832a1f9f","size":13299,"data":"","first_seen":"2023-03-10T11:13:22Z","last_seen":"2026-10-06T05:40:49.265777Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/js/jquery.cookie.js","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03b9574487d06f8f8513f95758c7cab3","sha1":"90a61ac9835905ebec2bb1499dd0b0de894f8045","sha256":"10fdbfbb18a947e7024457f52fd2dfe94ebddd612156c886731474b02aa45d23","sha512":"7851dd6cdf81a21550f85a8368fb5bfb511eff8e40c12973b288103896162879a297fbcbcc5a39476d204a4698afbcb94477412a20d089cf0b83dc2d4df349ab","ssdeep":"96:KS6+nj+zTIi0uktcIcmhGHhxBGj46NKPUff:KSLj+zp0uktKUGBxBf6NJX","tlshash":"2ab1435937e9222845d365e12837a10af538f7356488109ce6e4e2f03df5a07e873a7b","size":5496,"data":"","first_seen":"2023-03-07T23:35:08Z","last_seen":"2026-10-06T05:40:48.801368Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"225704a0be78a809163dc95c46f9ce2a","sha1":"147849259ba3aea22a2c9a5c9e0f130bb377353b","sha256":"2d19d65355ca1c580be199a82cadf09a2d2c549025cff148ba107e807116f4d6","sha512":"2c9c8637a343ee319ae0000089db83b640aaed27c9310c507e82d774c5bdc150173eeeb3c0e2894af1742b1b7a1742bf547944e8d3c85cc641dcd5a676230b43","ssdeep":"","tlshash":"b4215c9718fed133a173f9c2865f0a7e5fc6751153161201f69ca3901792ca8d82b970","size":1193,"data":"","first_seen":"2025-07-05T21:29:49.183998Z","last_seen":"2026-10-06T05:40:49.237955Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-FV9C87VRFB\u0026cx=c\u0026gtm=4e6990","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b807e46c78057d23a1f0a30006312487","sha1":"11121e565b458c659197c53185fb8a9df526b416","sha256":"a8e6eae584f38c9c6daa3b15a2d87adba8369a5541a1d528194f0d291f9cc737","sha512":"7da89b198247bcb8e64c3e2393ee05692e97f8ec1058d355430cd445c933fb8d1ae67871f213bb9229ba9c48fc40838431183dbb60a7e840e5aeede33ab1080e","ssdeep":"6144:wRM1yDY6PQEv0Vgmqc+vcZBDcDaOhEaM36dGZBlT+QhoiDaP:AUuQhVghEnZrPhY","tlshash":"4db41ace73c674229396f578803f01cb657b29a2b49cc896f18adce02d3459a9167f7c","size":535136,"data":"","first_seen":"2026-09-10T19:21:57.135633Z","last_seen":"2026-09-10T19:21:57.135633Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/js/jquery.md5.js","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c629663d7fe3432af0760b26d4b546e7","sha1":"0abc4b9564d71cf8d23b7f5b661552092c8e7d67","sha256":"41f41aa3f32ea20a820c36488c40e2acb8f022c35d91c69a1d1c75e63edebf54","sha512":"219b8e4c5efe3262021e514a8ff66afd979bc80775a4356ef7e8077ba1ce8398daf917bf6f5c29dfe945ca61b2fd883de2578c9049645bbf7217b268ce8df8fc","ssdeep":"192:13FUPDay9rNbLxM7W+5TsKjO1Cu5m6fFHBdLtKIIsTfGJz+Isf1EwLvtnsecTRBd:13FUJSTsKaoubNBFXFLGJCZf1E/1aM","tlshash":"0812c00855d7503655afe135c77b4c1ef52ca277212caa8fba5d42f05f2943483b8fa8","size":9606,"data":"","first_seen":"2023-03-07T12:28:02Z","last_seen":"2026-10-06T05:40:48.772462Z","times_seen":315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"cookies_google_targeting:map[type:null]type:object","filename":"https://jehn.mom/","line_number":1444,"column_number":21},{"level":"log","text":"META PIXEL BLOCKED - zgoda reklamowa nie jest TRUE","filename":"https://jehn.mom/","line_number":1455,"column_number":25},{"level":"log","text":"ads tracker status: active","filename":"https://jehn.mom/","line_number":1505,"column_number":17},{"level":"log","text":"ads tracker hash: undefined","filename":"https://jehn.mom/","line_number":1741,"column_number":17},{"level":"log","text":"can't ads recognize","filename":"https://jehn.mom/","line_number":1793,"column_number":21},{"level":"log","text":"welcome to direct enterence","filename":"https://jehn.mom/","line_number":1798,"column_number":25},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj65 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj66 class:Object extensible:true frozen:false isError:false ownPropertyLength:8 sealed:false type:object]] kind:ArrayLike length:1] sealed:false type:object]","filename":"https://jehn.mom/","line_number":1644,"column_number":25},{"level":"log","text":"[{\"ads_cookie_hash\":\"876e8c72569e8f8ca1ab5f622b8bde75\",\"ads_id\":1,\"ads_path\":\"Wejścia bezpośrednie\",\"ads_entering\":1,\"ads_last\":\"true\",\"ads_create\":\"2026-09-10 19:21:17\",\"ads_update\":\"2026-09-10 19:21:17\",\"ads_sum_control\":\"224f517d31ffd8166c4409b529ec8f81\"}]","filename":"https://jehn.mom/","line_number":1605,"column_number":25},{"level":"log","text":"remote url: https://jehn.mom/","filename":"https://jehn.mom/","line_number":1568,"column_number":21},{"level":"log","text":"remote address: 91.202.57.35","filename":"https://jehn.mom/","line_number":1569,"column_number":21},{"level":"log","text":"remote ads hash: ###direct###","filename":"https://jehn.mom/","line_number":1570,"column_number":21},{"level":"log","text":"remote ads id: 1","filename":"https://jehn.mom/","line_number":1571,"column_number":21},{"level":"log","text":"remote cookies: [{\"ads_cookie_hash\":\"876e8c72569e8f8ca1ab5f622b8bde75\",\"ads_id\":1,\"ads_path\":\"Wejścia bezpośrednie\",\"ads_entering\":1,\"ads_last\":\"true\",\"ads_create\":\"2026-09-10 19:21:17\",\"ads_update\":\"2026-09-10 19:21:17\",\"ads_sum_control\":\"224f517d31ffd8166c4409b529ec8f81\"}]","filename":"https://jehn.mom/","line_number":1572,"column_number":21},{"level":"log","text":"remote address data update","filename":"https://jehn.mom/","line_number":1576,"column_number":25},{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9}]},"http":[{"url":{"schema":"https","addr":"jehn.mom/images/frontend/theme/watch/_editor/prod/a463ffefb13e8e7e90e85ddb84f13443.jpg","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.815Z","timestamp":1789068076815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /images/frontend/theme/watch/_editor/prod/a463ffefb13e8e7e90e85ddb84f13443.jpg HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7828f75b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\nexpires: Thu, 17 Sep 2026 19:21:17 GMT\r\nlast-modified: Thu, 10 Sep 2026 19:21:17 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JZol1kE49vgr8s3NHzoYqbAwm27a3REDW1LuTpc%2FVsIs17eOa02d6YQX1CT937qVa3QIJxCCe%2BD1t2pF8Up9oUvjVwufbLx%2FfjzrIjpnvRO%2FMIfgURahkXuIbA%3D%3D\"}]}\r\ncontent-length: 17642\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17642,"size_decoded":18489,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=8, manufacturer=Canon, model=Canon EOS M50, xresolution=130, yresolution=138, resolutionunit=2, software=Adobe Lightroom 8.4 (Macintosh), datetime=2025:07:29 10:01:28], baseline, precision 8, 1000x1000, components 3","md5":"e787fa6eeae53a0a970b372b1d03292d","sha1":"02413acc11e2b77cd5c870da87a6c80f04f58589","sha256":"95cd68d95522034851ed37a0cbd84c83a7f91d6f706ba9a6b3691751169d5080","sha512":"81d61cf9b40e5ae374b4f799e33c39ad079ae048b02f9a43d1b87c5fcde758e188ddefebaa754230dca93a210da19dffa33306a329d637d9514446615e8f64d4","ssdeep":"96:amtDknGWl9H+hmQ/G73ZrZWNS6HxzcXlJ:ntDknNw1ruVJ","tlshash":"0b827441fb119941d045f9301df2aba7fb72f7d4cac1a3aa78cc4416df620e56c09997","first_seen":"2026-09-10T19:21:57.048604Z","last_seen":"2026-09-10T19:21:57.048604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/categories/thumbnail/thumb_38.JPG?lm=1753815551","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.152Z","timestamp":1789068077152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/categories/thumbnail/thumb_38.JPG?lm=1753815551 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7a4a1d5b0a-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=604800\r\netag: \"93c1-688919ff-a67ac03888ec7dd1;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Tue, 29 Jul 2025 18:59:11 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K7mJcSbTiYKzIfGIPxhT2sVRmvDITEpDKZ2iDZPj2z2EPk6dk1Z1TQgjMt%2BL%2FJZLvYV815rM4SxvuKhuS445%2BW9kmHlz4t%2BTh8mYMvwho5TILEWDRgmBW4Aubw%3D%3D\"}]}\r\ncontent-length: 60338\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60338,"size_decoded":61149,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/products/3627811a007dd584ccd4faadbd10fed4/images/thumbnail/small_69986f7b6b135-IMG-9821.JPG?lm=1771597695","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.806Z","timestamp":1789068076806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/products/3627811a007dd584ccd4faadbd10fed4/images/thumbnail/small_69986f7b6b135-IMG-9821.JPG?lm=1771597695 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7818eb5b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\netag: \"7828-69986f7f-a3e4ce7cc0080126;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Fri, 20 Feb 2026 14:28:15 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G37bA5E%2BqMhMw5LUzIE4LBVJDuhyquuaKaJRGR19E72Fnc1r8fOzX7xLlNRuiACRi5qyO7yhu1b%2Bxw7Lx7VhmFmlO8RFrd78ev0zla1F5JSZLLaFer0bUzNmBw%3D%3D\"}]}\r\ncontent-length: 47682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47682,"size_decoded":48482,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/products/e84105a68e5ab4167ec42d75317b9a73/images/thumbnail/small_gl.JPG?lm=1780654438","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.166Z","timestamp":1789068077166,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/products/e84105a68e5ab4167ec42d75317b9a73/images/thumbnail/small_gl.JPG?lm=1780654438 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7a5a355b0a-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=604800\r\netag: \"8d0c-6a22a166-e02f1cf651c942c9;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Fri, 05 Jun 2026 10:13:58 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M3bMFteGH%2FfKwD7nrEp6AVWW1F8bjTeY7VOm%2Fq947UYQZBMxlHhnBi4PZVEwiaebibKQYRXCZsnuJStScDJGWcW89HirAGv%2FV66O7jt5J7827V%2FKpOUEIsbzfg%3D%3D\"}]}\r\ncontent-length: 57735\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":57735,"size_decoded":58546,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/adsTracker/checkAds","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.337Z","timestamp":1789068077337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"POST /adsTracker/checkAds HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 4\r\nOrigin: https://jehn.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ads_tracker_3f3843aea002fb58df7bb0972b3c139e=%5B%7B%22ads_cookie_hash%22%3A%22876e8c72569e8f8ca1ab5f622b8bde75%22%2C%22ads_id%22%3A1%2C%22ads_path%22%3A%22Wej%C5%9Bcia%20bezpo%C5%9Brednie%22%2C%22ads_entering%22%3A1%2C%22ads_last%22%3A%22true%22%2C%22ads_create%22%3A%222026-09-10%2019%3A21%3A17%22%2C%22ads_update%22%3A%222026-09-10%2019%3A21%3A17%22%2C%22ads_sum_control%22%3A%22224f517d31ffd8166c4409b529ec8f81%22%7D%5D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4,"data":"id=1"}},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EZNBZWR5sSs73s49FpFV2frJQ8JqEdh4I1xK%2BK1nPiW8eXJERTpA1S090AMTsdomeP60qJJN3v78C5n8llT4dJBXsZv8V2Ue%2Bnd1bH4rjiIXimKmpc3yKhhlhg%3D%3D\"}]}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: a390cb7b6aa15b0a-CPH\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate\r\ncontent-encoding: br\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nserver: cloudflare\r\nset-cookie: soteshop=4fb07865f9e8be426826565ab8180ee2; path=/; secure; HttpOnly\nutl_7e9225ea83e739509f3df95d4ff2139985b08a5ce8fd66378c8b42f5d8fd9b1c=true; expires=Sat, 10 Oct 2026 19:21:17 GMT; Max-Age=2592000; path=/; secure\nutd_856b37c3d786ea51a10426f3ea55c0215dcca8d4ccb982593678e6b33d27d143=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; expires=Sat, 10 Oct 2026 19:21:17 GMT; Max-Age=2592000; path=/; secure\r\nvary: Accept-Encoding,User-Agent\r\npragma: no-cache\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval'  https://facebook.com https://mapa.ecommerce.poczta-polska.pl https://www.paypal.com https://www.paypalobjects.com https://*.easypack24.net https://*.openstreetmap.org https://*.inpost.pl https://*.allegrostatic.com https://allegro.pl https://*.allegro.pl https://*.allegroimg.com https://*.allegrosandbox.pl https://*.sote.pl https://*.googletagmanager.com https://*.facebook.net https://*.facebook.com https://*.google-analytics.com https://*.google.com https://*.google.pl https://unpkg.com https://api.mapbox.com https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net https://stats.g.doubleclick.net https://*.soteshop.com *.gstatic.com *.googleapis.com *.youtube.com *.vimeo.com *.ytimg.com *.soundcloud.com *.vimeocdn.com *.smartsupp.com *.smartsuppcdn.com wss://*.smartsupp.com *.cdn77.org smartsupp-widget-161959.c.cdn77.org *.smartlook.com *.smartlook.cloud *.smartsuppchat.com *.addthis.com *.addthisedge.com *.facebook.com *.facebook.net *.fbcdn.net *.instagram.com *.cdninstagram.com *.googletagmanager.com *.google-analytics.com *.paypalobjects.com *.paypal.com *.autopay.eu https://*.cashbill.pl https://*.ceneo.pl https://*.secure.eservice.com.pl *.credit-agricole.pl *.paybynet.com.pl *.polcard.com.pl *.przelewy24.pl *.eraty.pl static.hotjar.com https://disqus.com https://widgets.trustedshops.com http://widgets.trustedshops.com https://integrations.etrusted.com http://integrations.etrusted.com https://api.trustedshops.com https://*.trustedshops.com data:; form-action 'self'  https://facebook.com https://mapa.ecommerce.poczta-polska.pl https://www.paypal.com https://www.paypalobjects.com https://*.easypack24.net https://*.openstreetmap.org https://*.inpost.pl https://*.allegrostatic.com https://allegro.pl https://*.allegro.pl https://*.allegroimg.com https://*.allegrosandbox.pl https://*.sote.pl https://*.googletagmanager.com https://*.facebook.net https://*.facebook.com https://*.google-analytics.com https://*.google.com https://*.google.pl https://unpkg.com https://api.mapbox.com https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net https://stats.g.doubleclick.net https://*.soteshop.com *.gstatic.com *.googleapis.com *.youtube.com *.vimeo.com *.ytimg.com *.soundcloud.com *.vimeocdn.com *.smartsupp.com *.smartsuppcdn.com wss://*.smartsupp.com *.cdn77.org smartsupp-widget-161959.c.cdn77.org *.smartlook.com *.smartlook.cloud *.smartsuppchat.com *.addthis.com *.addthisedge.com *.facebook.com *.facebook.net *.fbcdn.net *.instagram.com *.cdninstagram.com *.googletagmanager.com *.google-analytics.com *.paypalobjects.com *.paypal.com *.autopay.eu https://*.cashbill.pl https://*.ceneo.pl https://*.secure.eservice.com.pl *.credit-agricole.pl *.paybynet.com.pl *.polcard.com.pl *.przelewy24.pl *.eraty.pl static.hotjar.com https://disqus.com https://widgets.trustedshops.com http://widgets.trustedshops.com https://integrations.etrusted.com http://integrations.etrusted.com https://api.trustedshops.com https://*.trustedshops.com; frame-ancestors 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex,nofollow\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"soteshop","value":"4fb07865f9e8be426826565ab8180ee2","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"soteshop=4fb07865f9e8be426826565ab8180ee2; path=/; secure; HttpOnly"},{"name":"utl_7e9225ea83e739509f3df95d4ff2139985b08a5ce8fd66378c8b42f5d8fd9b1c","value":"true","quoted":false,"path":"/","expires":"2026-10-10T19:21:17Z","raw_expires":"Sat, 10 Oct 2026 19:21:17 GMT","max_age":2592000,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"utl_7e9225ea83e739509f3df95d4ff2139985b08a5ce8fd66378c8b42f5d8fd9b1c=true; expires=Sat, 10 Oct 2026 19:21:17 GMT; Max-Age=2592000; path=/; secure"},{"name":"utd_856b37c3d786ea51a10426f3ea55c0215dcca8d4ccb982593678e6b33d27d143","value":"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","quoted":false,"path":"/","expires":"2026-10-10T19:21:17Z","raw_expires":"Sat, 10 Oct 2026 19:21:17 GMT","max_age":2592000,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"utd_856b37c3d786ea51a10426f3ea55c0215dcca8d4ccb982593678e6b33d27d143=e4b8c91e89e29aac9605aa6c74e7874c167747f79127e118bcc8ebaeca4105466eb76a017eeeb51a032fd9c0ce9f7aede4e92c2746950236d32623dd0b8a6c5a67c8b5e54ddaab939cfab4f0596a93831f1e1a2c86fc3f18899f9cd0bdb7288404b5d8e4f5632365df3e3ca6c5a91e8d10edd034abb81aeb59001f8bd0d1523d6a9f5e2845e47c155a5cea222043e6f7882892a0c7ad23b86e628bccb1b2472f59abdabd17f135df2949092bca8dcc5648a3c70f6421d8b9fc1217376e5f4796eb4b84336be208adc478f53b69d98c7d03c5f4718d1309e38ae1841d9401ea14e0cfe8e02c8932e11991ca25abe2a44d0749a9d73887ef8eab55bcc8956527bb0620ce30b650ae080e496c1d410f0bbfa2972dbf4e38bf8700fc378c0fce1f0ce106c9fcb0132d75bd504585ac7bd53ceef9a70612baa5d9c3b1839261c55c0b24ed44189847693896e8a2851f6e8a50; expires=Sat, 10 Oct 2026 19:21:17 GMT; Max-Age=2592000; path=/; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"SoteShop","description":"SoteShop is an e-shop management software.","website":"https://www.soteshop.com/","common_platform_enumeration":"","icon":"SoteShop.svg","categories":["Ecommerce"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}],"data":{"size":1,"size_decoded":4985,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"c4ca4238a0b923820dcc509a6f75849b","sha1":"356a192b7913b04c54574d18c28d46e6395428ab","sha256":"6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b","sha512":"4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a","ssdeep":"","tlshash":"c70000000c000000c00000300000000000000000000000000000000000000000000030","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-10-15T01:38:26.984384Z","times_seen":157501,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/bootstrap/css/bootstrap.min.css?v320","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.564Z","timestamp":1789068076564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /bootstrap/css/bootstrap.min.css?v320 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pZ3%2BmVuuqeH5FlpCA7qXlxarhyzKxQasfaoMd0AvQNqye2ehrqCVnmw49fLQ9tRWyGaN4s7zfxnJ9KrJmxY46JJzP1r%2BcY47M3FqdpWiWf4oxbDk2Kwv72f2rQ%3D%3D\"}]}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: text/css\r\npriority: u=0,i=?0\r\ncf-ray: a390cb76984c5b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\ncontent-encoding: br\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Thu, 10 Sep 2026 19:21:16 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109203,"size_decoded":17619,"mime_type":"text/css","magic":"ASCII text, with very long lines (65371)","md5":"d66f307b0623dec01699adf1fa74ad21","sha1":"2bbe14be0237f14390b6fdedf88a6592d10faac6","sha256":"b62e17e4eb6eddf6cf85fa1106854ce8316022cb0aac368d6d4bb694d2eeca56","sha512":"07cb4115cc06d0ee350c50ae90f78dc3d829877bf6f2a1e0ec974484a74be86adea67d6926afa139ae3432a73a5f79db5f008d307a043ab3cc3dbe6f3eb2a6dd","ssdeep":"768:ZSGxwUkBUmlpvt4uRdUGN6eABkdIUkbZbnbJN8gwaKNhL3tqNhkRQmNae:NwlRhRdUGNIkavbRk3chs","tlshash":"2fb3d7a0f11031ea7223c55a71d0ed872619a053e66b4fb7f22f25d88f895ca1773f1a","first_seen":"2025-07-05T21:29:49.166979Z","last_seen":"2026-10-06T05:40:48.982161Z","times_seen":21,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/images/frontend/theme/watch/social/youtube.png?v=1.2","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.792Z","timestamp":1789068076792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /images/frontend/theme/watch/social/youtube.png?v=1.2 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a390cb77f8d95b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Thu, 10 Sep 2026 19:21:16 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KGOORyudNIQLMimfqIvI0QSyaRlRKGKJKVIN44SZ34zQSYwQ7ZuZ%2FI6PS32ZQtBX3U46khfFqmKTlsqe5GxNbtJhsLyOvY0asY5hb15AO3HsUcQjYIR0brq7jQ%3D%3D\"}]}\r\ncontent-length: 593\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":593,"size_decoded":1431,"mime_type":"image/png","magic":"PNG image data, 74 x 74, 8-bit/color RGBA, non-interlaced","md5":"05398f31a7139317ded6a41f1bd32b17","sha1":"30143525c123d3c2c887023f21c1b0b394371660","sha256":"1dd321cc9d8da339e6e43060df4e53e241b5f382d6b13ea67c6af31f6261c068","sha512":"8bbe0dd66fcd5d0b1193603a00f042402770ed4ed3c96b920426592070ef6a6aeaeb26cdced914d5412340a856e6a418d4be8bf33218446fd40e9a964905a904","ssdeep":"","tlshash":"b6f096c07a23713c8f4ec5dc012231d15239027ea44c0b079cb807f5d30ac44d9b686e","first_seen":"2026-09-10T19:21:57.059522Z","last_seen":"2026-10-06T05:40:48.884642Z","times_seen":2,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/images/frontend/theme/watch/social/newsletter.png?v=1.2","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.796Z","timestamp":1789068076796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /images/frontend/theme/watch/social/newsletter.png?v=1.2 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a390cb7808dc5b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Thu, 10 Sep 2026 19:21:16 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sB8%2BOi1ewHbU%2FWdoG5AY0CNIy5XdSdh84in3YUDv1AC8tU%2B%2BciGLvhY8HMrCPjhoWqnk2UCqj2b8qP9YYQxmdYruMqtS1XMu7G0sE0GcT%2FCHl%2F5fKjJozmRErA%3D%3D\"}]}\r\ncontent-length: 803\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":803,"size_decoded":1651,"mime_type":"image/png","magic":"PNG image data, 74 x 74, 8-bit/color RGBA, non-interlaced","md5":"0bb09ef7dce98dfbbd70e27c7dcee810","sha1":"2e473b78e8bb7060daeab3b069af84b1064c38ca","sha256":"097b2df3583ad75ce09962bc23a71894ed8a99ba815143d47d868f58c29eae6c","sha512":"1d7189482d1a6355cc158f34bf3d785bb1bdbebaf89aa2364b2c3a8aa51c228ad15576e064a982bbeb932c46070a74a8cec4265d7c52d63007581896af037b0e","ssdeep":"","tlshash":"8c0186e2a683a3ced8bbce7988630210027c1a4d4954600acb9e8a220eb043c2e07d10","first_seen":"2026-09-10T19:21:57.062846Z","last_seen":"2026-10-06T05:40:48.72752Z","times_seen":2,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/products/6f69d8114cbde92d3f4e2cd42aa30771/images/thumbnail/large_IMG-0064-2.JPG?lm=1756727255","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.800Z","timestamp":1789068076800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/products/6f69d8114cbde92d3f4e2cd42aa30771/images/thumbnail/large_IMG-0064-2.JPG?lm=1756727255 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7808e25b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\netag: \"18c62-68b587d7-3f7cf36b530882b6;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:17 GMT\r\nlast-modified: Mon, 01 Sep 2025 11:47:35 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nhviUhj59PMBBYyRys83adsLcftlOqFjDWRMP36KTJRqiEfLzZDWr3293WlXQkT4HwUUqxuaphAxbICXqCU26uIP0j7XEUN0Al0dt9FIZpGl4lZ4AOkSMCPTuA%3D%3D\"}]}\r\ncontent-length: 173320\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":173320,"size_decoded":174118,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/products/3627811a007dd584ccd4faadbd10fed4/images/thumbnail/small_69986f7b6b135-IMG-9821.JPG?lm=1771597695","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.161Z","timestamp":1789068077161,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/products/3627811a007dd584ccd4faadbd10fed4/images/thumbnail/small_69986f7b6b135-IMG-9821.JPG?lm=1771597695 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7a4a265b0a-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=604800\r\netag: \"7828-69986f7f-a3e4ce7cc0080126;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Fri, 20 Feb 2026 14:28:15 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2B1Bhmaehbb0d%2BMkzhqFyvhmbzpdeT9si8JMKmMGsw5BeXn4BdPN0FxH0G4NWwpCOLxBlJtiGUpUXD4mJh3XGWy%2BiHgJ51N74TnLWTC1zSyFtcyl5lLI7wmJ5Q%3D%3D\"}]}\r\ncontent-length: 47682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":47682,"size_decoded":48491,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/images/frontend/theme/bianco/cookies.png","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.382Z","timestamp":1789068077382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /images/frontend/theme/bianco/cookies.png HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jehn.mom/cache/css/55470e76eee4a86089fd0b76d20496aa.css?lm=1788418761\r\nCookie: ads_tracker_3f3843aea002fb58df7bb0972b3c139e=%5B%7B%22ads_cookie_hash%22%3A%22876e8c72569e8f8ca1ab5f622b8bde75%22%2C%22ads_id%22%3A1%2C%22ads_path%22%3A%22Wej%C5%9Bcia%20bezpo%C5%9Brednie%22%2C%22ads_entering%22%3A1%2C%22ads_last%22%3A%22true%22%2C%22ads_create%22%3A%222026-09-10%2019%3A21%3A17%22%2C%22ads_update%22%3A%222026-09-10%2019%3A21%3A17%22%2C%22ads_sum_control%22%3A%22224f517d31ffd8166c4409b529ec8f81%22%7D%5D; cookies_google_analytics=false; cookies_google_targeting=false; cookies_google_personalization=false; cookies_google_user_data=false\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\ncf-ray: a390cb7bbab65b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\nexpires: Thu, 17 Sep 2026 19:21:17 GMT\r\nlast-modified: Thu, 10 Sep 2026 19:21:17 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GLVHFMmx9K7ve1SzFQPKCaEemdcqB4L6Lqw932P7MzikCFBKWK%2Fovp%2Bvk8NTe0iyrei57ffs94KCGeui37DsFJsk9GGLGkrwyIlRjczkmpeSDtoYr%2BQzA9CreA%3D%3D\"}]}\r\ncontent-length: 575\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":575,"size_decoded":1417,"mime_type":"image/png","magic":"PNG image data, 28 x 23, 8-bit colormap, non-interlaced","md5":"7b8c0c1ef18422cbdedee2bbd4b75c2b","sha1":"fd7a7968a12e0cc1c34bec101c5315a64c73f1c0","sha256":"0aab1ffbf9c7e148da26848f327bb3311d8b232b0d148e0a13379fd68130542b","sha512":"018873ebd09e190cc71b64552d58e7d82d29ca8d6659f9455669ec5fe710d93198b89475f65f96d011aba6d023bf0e3f137849d8f70af8ebae27821269d9dc26","ssdeep":"","tlshash":"1af02bd4fd45fcffcc48256f082dd557848c4b5d40f18186f8155575cd51bd4d08d65a","first_seen":"2026-05-05T00:07:22.349234Z","last_seen":"2026-09-10T19:21:57.065058Z","times_seen":7,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/products/88b89e6ba55024924a0ac6139f41aed9/images/thumbnail/small_glowne8.JPG?lm=1755601519","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.803Z","timestamp":1789068076803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/products/88b89e6ba55024924a0ac6139f41aed9/images/thumbnail/small_glowne8.JPG?lm=1755601519 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7818e75b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\netag: \"91a3-68a45a6f-9dc8c8a7fc2a554f;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Tue, 19 Aug 2025 11:05:19 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MKkfzKg6l8CU1UpeN3CYON7fkET7MX%2FtMbenh%2FDI%2BqeBpkI6bo8qVAbGACnAC1K%2FgP2xd3e1v9sRYeXYqeV%2FmWNKEwcCsdMdlj2cawFqNMQMFltWjc%2BTseFGlw%3D%3D\"}]}\r\ncontent-length: 59384\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":59384,"size_decoded":60192,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/images/frontend/theme/bianco/social/facebook-white.png?v=1.2","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.819Z","timestamp":1789068076819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /images/frontend/theme/bianco/social/facebook-white.png?v=1.2 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a390cb7828f95b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Thu, 10 Sep 2026 19:21:16 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2Bip7oGVcZvkUoTi8KXVNs%2BE%2F4M7HXjIm8rqwpDHfomgsk2WPRKGwNHCoYyzDuBTwhbunxMxJih81WVwA4ve1yhfuITUyGoxyppefeR5BARvf8NsIjSGU0CWNw%3D%3D\"}]}\r\ncontent-length: 408\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":408,"size_decoded":1250,"mime_type":"image/png","magic":"PNG image data, 74 x 74, 8-bit/color RGBA, non-interlaced","md5":"7aba9fa9578dd961f032df47d8b5a11b","sha1":"1c260f3be2a13959cf5bac8652779f3ff1b07c87","sha256":"af0bc460067ef254fd5cfed2e254ebe8697d2452d6eb583a27d3f693f7186558","sha512":"fc8fb1a43eb6a573d6a0df2b89e65fc5e63013485e25cba38df115613dc7706b70fb9e332a8d44606e70bf772028f481c4954b9be5c7b4671a1b4634cb1052c4","ssdeep":"","tlshash":"61e0f1a6aa8958f2e73e8a7921732204643b84eb008b101ccb0f0594c9b5c03c0442c1","first_seen":"2026-09-10T19:21:57.067731Z","last_seen":"2026-10-06T05:40:48.83359Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/uploads/picture/0/thumbnail/thumb_42-IMG-0004-1.JPG?lm=1754381802","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.184Z","timestamp":1789068077184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /uploads/picture/0/thumbnail/thumb_42-IMG-0004-1.JPG?lm=1754381802 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=4,i\r\ncf-ray: a390cb7a7a405b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\netag: \"1493f-6891bdea-baa3ec23f211cb25;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:17 GMT\r\nlast-modified: Tue, 05 Aug 2025 08:16:42 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UCBxkjT8QvV6nrgRiQtoHaagXb6aEus%2BCCd9FFP3%2FHuBeZyyfirHDhjEqRNU4QhWjQ%2FQILUoewcMReaLYTEXDjxqqvtjdBRjAxrVgVnUOuOIDvUwphkVnOdP4w%3D%3D\"}]}\r\ncontent-length: 141243\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":141243,"size_decoded":142047,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/products/65ced3e19d8ffc9d2a52b0d33cb2f089/images/thumbnail/small_IMG-9761.JPG?lm=1771597695","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.164Z","timestamp":1789068077164,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/products/65ced3e19d8ffc9d2a52b0d33cb2f089/images/thumbnail/small_IMG-9761.JPG?lm=1771597695 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7a5a325b0a-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=604800\r\netag: \"7850-69986f7f-d9d176680bace56c;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Fri, 20 Feb 2026 14:28:15 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n1IX7ZFUBI2veiqWszeEdQeOKLsXAwKbodOl7aBn3nhF%2BJHq3mog0uFNEUlhkCo7Kdwt4lMyBDGpgmGrxajlLSF1g975EfBkXFGNECSSTHOKHq1LWuZsV%2B1rPQ%3D%3D\"}]}\r\ncontent-length: 48150\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48150,"size_decoded":48957,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/images/frontend/theme/watch/_editor/prod/f213ffdf6fc39670cf8c7555ef868005.JPG","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.190Z","timestamp":1789068077190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /images/frontend/theme/watch/_editor/prod/f213ffdf6fc39670cf8c7555ef868005.JPG HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jehn.mom/cache/css/55470e76eee4a86089fd0b76d20496aa.css?lm=1788418761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=4,i\r\ncf-ray: a390cb7a8a465b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\netag: \"317219-68c12ee4-412c533086e29086;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:17 GMT\r\nlast-modified: Wed, 10 Sep 2025 07:55:16 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WCRWRVLQp6Dj4JBD7ZCE8QeoMYlquFkHZetU%2B0mdNCUjTGS6Ze33g4kvuU62uwUneMFangAN02tHw9vqJTQFfYY1jJuOd%2FEiNCPQSjlbzOcdv54ApG5fJLo08g%3D%3D\"}]}\r\ncontent-length: 5853943\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5853943,"size_decoded":5854747,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/cache/css/55470e76eee4a86089fd0b76d20496aa.css?lm=1788418761","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.765Z","timestamp":1789068076765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /cache/css/55470e76eee4a86089fd0b76d20496aa.css?lm=1788418761 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xWRdgRT3PJgRfK9fMdEoicbD7em6GtBifVZVpzrTuUWQe3NrSgLnMqrGDyKYqYRbrHR1K2UchWZOtcbHX%2BTn7HFxNMT9TXJAIGrB%2Fhu4FQIe%2FGRilk9cfhOEkA%3D%3D\"}]}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: text/css\r\npriority: u=0,i=?0\r\ncf-ray: a390cb77d8ca5b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\ncontent-encoding: br\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Thu, 10 Sep 2026 19:21:16 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":228303,"size_decoded":44989,"mime_type":"text/css","magic":"ASCII text, with very long lines (3634)","md5":"3801dc28d5b2b148b33d3c922f62d7af","sha1":"b39b1664642a406a49d980e4c89ba06ac5042e92","sha256":"5af530ede3e8613939b8e9122de56e765c429aabe31d2b6517cf517e967274a5","sha512":"864a9ac3d8f66ac25aa9b32251243dd628633f8fa298c91da305b2a49f05a8388bec533dc72c4c212b3ccc7bf3bd2b765fb60ecb266836a6910ce3878ca652c0","ssdeep":"1536:GBjrd++2Us7ois5gOCUCWgiurCoWf6HW2Xk58b3Fc2:6d++2Us7ois5gOTcrChf6HW2Xkca2","tlshash":"dc24e875e6b930387167ca69f1c1aed93e28e912c6234efaf463a914c7c60d60635f4c","first_seen":"2026-09-10T19:21:57.070247Z","last_seen":"2026-09-10T19:21:57.070247Z","times_seen":1,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/products/29ce576d7afac6f229a2970a3b24dd17/images/thumbnail/small_IMG-0021-3.jpg?lm=1755604171","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.805Z","timestamp":1789068076805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/products/29ce576d7afac6f229a2970a3b24dd17/images/thumbnail/small_IMG-0021-3.jpg?lm=1755604171 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7818ea5b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Thu, 10 Sep 2026 19:21:16 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xf9tlArMRW44T0QXIExNLmWNNFiA9x0YGckb5W3JropCaFFT6w4zwxwRHpLQsxQyhLH7jp9VA7SGl6t1mnFMFP0Medd%2Ff0PqzTNrejew7LGWAEONtaTPoIgvMg%3D%3D\"}]}\r\ncontent-length: 48499\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48499,"size_decoded":49340,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS M50, xresolution=130, yresolution=138, resolutionunit=2, software=Adobe Lightroom 8.4 (Macintosh), datetime=2025:07:23 12:22:03], baseline, precision 8, 410x410, components 3","md5":"c777591d943eeb1edf47bfeede8c7ac9","sha1":"5ebbe3b4f103232712cfefd8a57308166a2f05a7","sha256":"efc40c4d10b1661779f1f946d8b0a45a0e13753b4022f85acc534fab0e557b54","sha512":"9cf5b9c3822d91a75081fa57a0bb759e6766d3941db6b230b206365ee83139258b21c5236eb7126853ef21949dc6e1929357d97b3cfcaa12db01e730c5e4b576","ssdeep":"768:nwry50E0wry50EsYyE9DBifaJA/wYAOtk8jAmUso83gRjV5:O+ps9A/kO68HUs7w9T","tlshash":"01238d28fdb05dc2d4be5e3f98e696c99b236362d9821c4f74ec9504bfa3ac00d475a1","first_seen":"2026-09-10T19:21:57.072666Z","last_seen":"2026-09-10T19:21:57.072666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/categories/thumbnail/thumb_25.JPG?lm=1756304115","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.146Z","timestamp":1789068077146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/categories/thumbnail/thumb_25.JPG?lm=1756304115 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7a3a185b0a-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=604800\r\netag: \"8512-68af12f3-a29d790ec8c9ab9d;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Wed, 27 Aug 2025 14:15:15 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CUp4tjXrI3QxjpJTXCKGkCSs93Ip9xQC7GDtaXv8QYwRyKl8cn0oJjEW9V1yzZ%2FFaZvQB2DnSl%2BfsAG6f99L7QJ4sr5bRIHT9TH1OiG6ungp8c5ZMm88fhpkTw%3D%3D\"}]}\r\ncontent-length: 53637\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":53637,"size_decoded":54444,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/products/52ccf5599bbad5df190345fa0aae5a1f/images/thumbnail/small_2025-08-14-0266.JPG?lm=1755592567","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.162Z","timestamp":1789068077162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/products/52ccf5599bbad5df190345fa0aae5a1f/images/thumbnail/small_2025-08-14-0266.JPG?lm=1755592567 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7a5a305b0a-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=604800\r\netag: \"b4ac-68a43777-34cbbccfee933093;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Tue, 19 Aug 2025 08:36:07 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UgB%2FcbSsSzw%2BSe9rRqNltWkxEU5xO0wSnzwwYbGrGR44LnteL3MPeuNZYyVOLl%2BUQN0uHUD4Y5gkAjtckKWY2HSlNMy%2BIWSDEnN7OMYHVYEJyfCMhtzoiQSmLQ%3D%3D\"}]}\r\ncontent-length: 76213\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":76213,"size_decoded":77024,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/images/frontend/theme/watch/_editor/prod/bba7caebb66e9ae1ea56ad059430771c.JPG","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.187Z","timestamp":1789068077187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /images/frontend/theme/watch/_editor/prod/bba7caebb66e9ae1ea56ad059430771c.JPG HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jehn.mom/cache/css/55470e76eee4a86089fd0b76d20496aa.css?lm=1788418761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=4,i\r\ncf-ray: a390cb7a7a435b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\netag: \"26898f-68c12ee4-a81706147cee6c6b;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:17 GMT\r\nlast-modified: Wed, 10 Sep 2025 07:55:16 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xTR6Xcv0nhAXlGV9mIZQ8pfZB4qkv5Dof3%2Bg4%2BKWTmjkmHUPoaIdE9hPV5KBRoWPMG%2ByPb2CLLNEo1zVfxMDUwRj61Ke7M9oudH%2BqoHJVbyYA4G8V94hUoF1Dg%3D%3D\"}]}\r\ncontent-length: 4550573\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4550573,"size_decoded":4551381,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/products/8a18b8f21fae33e81564a9ee18c9419b/images/thumbnail/small_Instagram-post-5.png?lm=1785940295","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.809Z","timestamp":1789068076809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/products/8a18b8f21fae33e81564a9ee18c9419b/images/thumbnail/small_Instagram-post-5.png?lm=1785940295 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a390cb7818ee5b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Thu, 10 Sep 2026 19:21:16 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b0uynUB8mEFWBTtj5%2B2v%2BIFzlp%2Fq7zQnn9k1OkbL26yGpx0HwxoPhp%2BeKpuME2hoNL6ecwifDeBBkpws%2BqapE11easehGMDBSl%2Bi1qjzehac%2B8gR08i%2Bm9SNcw%3D%3D\"}]}\r\ncontent-length: 171726\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":171726,"size_decoded":172581,"mime_type":"image/png","magic":"PNG image data, 410 x 410, 8-bit/color RGBA, non-interlaced","md5":"ecbe1ebfc610e010620cb9ccf0490c88","sha1":"f1f107eec765d9ea8e9f0785837fb1d4a8e1eb98","sha256":"97939c439805e9983e7a7e285e9a1d963e897b9d6dbc5d978d6fda451469dab3","sha512":"a4544cc1a1d8b9d76c968ddc82f0c914fc3eb06fb8caaee74a8dd176fbcb071e6ca5d50ce39e062f028a215a97e96346dda9ec0d54d6f6c7e05fc964d6d67c89","ssdeep":"3072:4EBjcXl3pxB8hGO4EkPSWejsrbE2jsLtNVGVx6QrjliPvc90Jtr982R/FCyOCF2q:6pMGO4dqRwbfstGjdliXc98y4FCyOCdl","tlshash":"25f312fa11f8345197a93874c3555f26a53efa4b37a84e2b74fc626b1a3a33803d5c84","first_seen":"2026-09-10T19:21:57.08808Z","last_seen":"2026-09-10T19:21:57.08808Z","times_seen":1,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/categories/thumbnail/thumb_38.JPG?lm=1753815551","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.799Z","timestamp":1789068076799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/categories/thumbnail/thumb_38.JPG?lm=1753815551 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7808e05b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\netag: \"93c1-688919ff-a67ac03888ec7dd1;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Tue, 29 Jul 2025 18:59:11 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kkvE7WE0d7Gjdjtrf8R%2FkVYpo1TqH01viI2k7unMOfXgTgSy4fAMI%2BZfhRU%2F3XGRKgzTbfYzn6%2FNNwGSR6QrljqUXyadvFO9lYewG8N1KMN7s%2BBVGYKvTRtgFQ%3D%3D\"}]}\r\ncontent-length: 60338\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":60338,"size_decoded":61144,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/images/frontend/theme/bianco/social/instagram-white.png?v=1.2","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.821Z","timestamp":1789068076821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /images/frontend/theme/bianco/social/instagram-white.png?v=1.2 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a390cb7838ff5b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Thu, 10 Sep 2026 19:21:16 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CJ5wK2MSfmnxwF4bSuJDnRzkLuyTDLxx9ODCp9%2F638EI4yWdOKn6H2aj38yUO2HXXpjtSpT4ErE9kHtRU8xRj3%2FCUsRT9bu0kNJekD%2FKuio0LKhOR3OSIunhLg%3D%3D\"}]}\r\ncontent-length: 891\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":891,"size_decoded":1733,"mime_type":"image/png","magic":"PNG image data, 74 x 74, 8-bit/color RGBA, non-interlaced","md5":"5eaada369805be143c12789069cb503c","sha1":"0493f6eb76c9240fa2fd6ab3e8cc12fdb5f966cb","sha256":"85c62d32524a77fa5ad288328774ad7bf4203d10e3abd777141f3d13abc3b263","sha512":"27da6ce48cb2e90a50fe2e8465382079ac00dcb746d247396940357606f0037ebc2f8ec9dc47df527ce9d30e3daaf059625c6521560648a1cd8159e6c1e81683","ssdeep":"","tlshash":"751196cd5f939b6ec47a19321d5563d250332a1a15480becef098170f0f6d0d54beb94","first_seen":"2026-09-10T19:21:57.091448Z","last_seen":"2026-10-06T05:40:49.094288Z","times_seen":2,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/uploads/banner_video/40/pl_PL/dfa7df617e29acc9ed0ba8d24da90a4b.bin","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.266Z","timestamp":1789068077266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /uploads/banner_video/40/pl_PL/dfa7df617e29acc9ed0ba8d24da90a4b.bin HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://jehn.mom/\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: application/octet-stream\r\ncontent-range: bytes 0-8288205/8288206\r\npriority: u=4,i=?0\r\ncf-ray: a390cb7afa755b0a-CPH\r\ncf-cache-status: MISS\r\ncache-control: max-age=14400\r\netag: \"7e77ce-689b6b67-fca483866e6f2ffd;;;\"\r\nlast-modified: Tue, 12 Aug 2025 16:27:19 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CU82We9F6BeMyw%2BXyF1QZPfY0LCojULftLx2oN7OfoAUJM%2FvGfncjVVNMeUMqfQLMQ6ydW5i3SQXpADCaCxXtes6aAVOHzF%2Bb%2Bna%2BM2UF3twS4XtehM1wsyOSg%3D%3D\"}]}\r\ncontent-length: 15018290\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209574,"size_decoded":210371,"mime_type":"video/mp4","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":739,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":734,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-10T19:21:15.821Z","timestamp":1789068075821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cOUuRtorUlJX41TZJ2YeqAfDlchwLK1Oo1r0gidg30TVqfreRZZ6bkONzgBD19M5%2BJ8oAuyQb46BkcrNqaijSqOkL1bnkBxj%2Bb9rU9fSImnRBTkqZ6iSwhArHQ%3D%3D\"}]}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=0,i\r\ncf-ray: a390cb72df135b0a-CPH\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval'  https://facebook.com https://mapa.ecommerce.poczta-polska.pl https://www.paypal.com https://www.paypalobjects.com https://*.easypack24.net https://*.openstreetmap.org https://*.inpost.pl https://*.allegrostatic.com https://allegro.pl https://*.allegro.pl https://*.allegroimg.com https://*.allegrosandbox.pl https://*.sote.pl https://*.googletagmanager.com https://*.facebook.net https://*.facebook.com https://*.google-analytics.com https://*.google.com https://*.google.pl https://unpkg.com https://api.mapbox.com https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net https://stats.g.doubleclick.net https://*.soteshop.com *.gstatic.com *.googleapis.com *.youtube.com *.vimeo.com *.ytimg.com *.soundcloud.com *.vimeocdn.com *.smartsupp.com *.smartsuppcdn.com wss://*.smartsupp.com *.cdn77.org smartsupp-widget-161959.c.cdn77.org *.smartlook.com *.smartlook.cloud *.smartsuppchat.com *.addthis.com *.addthisedge.com *.facebook.com *.facebook.net *.fbcdn.net *.instagram.com *.cdninstagram.com *.googletagmanager.com *.google-analytics.com *.paypalobjects.com *.paypal.com *.autopay.eu https://*.cashbill.pl https://*.ceneo.pl https://*.secure.eservice.com.pl *.credit-agricole.pl *.paybynet.com.pl *.polcard.com.pl *.przelewy24.pl *.eraty.pl static.hotjar.com https://disqus.com https://widgets.trustedshops.com http://widgets.trustedshops.com https://integrations.etrusted.com http://integrations.etrusted.com https://api.trustedshops.com https://*.trustedshops.com data:; form-action 'self'  https://facebook.com https://mapa.ecommerce.poczta-polska.pl https://www.paypal.com https://www.paypalobjects.com https://*.easypack24.net https://*.openstreetmap.org https://*.inpost.pl https://*.allegrostatic.com https://allegro.pl https://*.allegro.pl https://*.allegroimg.com https://*.allegrosandbox.pl https://*.sote.pl https://*.googletagmanager.com https://*.facebook.net https://*.facebook.com https://*.google-analytics.com https://*.google.com https://*.google.pl https://unpkg.com https://api.mapbox.com https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net https://stats.g.doubleclick.net https://*.soteshop.com *.gstatic.com *.googleapis.com *.youtube.com *.vimeo.com *.ytimg.com *.soundcloud.com *.vimeocdn.com *.smartsupp.com *.smartsuppcdn.com wss://*.smartsupp.com *.cdn77.org smartsupp-widget-161959.c.cdn77.org *.smartlook.com *.smartlook.cloud *.smartsuppchat.com *.addthis.com *.addthisedge.com *.facebook.com *.facebook.net *.fbcdn.net *.instagram.com *.cdninstagram.com *.googletagmanager.com *.google-analytics.com *.paypalobjects.com *.paypal.com *.autopay.eu https://*.cashbill.pl https://*.ceneo.pl https://*.secure.eservice.com.pl *.credit-agricole.pl *.paybynet.com.pl *.polcard.com.pl *.przelewy24.pl *.eraty.pl static.hotjar.com https://disqus.com https://widgets.trustedshops.com http://widgets.trustedshops.com https://integrations.etrusted.com http://integrations.etrusted.com https://api.trustedshops.com https://*.trustedshops.com; frame-ancestors 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":133479,"size_decoded":23327,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (473), with CRLF, LF line terminators","md5":"a0c1f4b20874f45fe55ddfadd85cca75","sha1":"ce787b26b35b9cc1994a05cd132b703aaf6868f7","sha256":"7e7f1a04230301c53a868877bfba2e5aecb44cc8e8d4497003c0daa488f46400","sha512":"aee7785ccd802869b5bc07f3f6551ec540ab3935ddb36bca8371f3aaf61b4e6118581c3f8cea4ac9b0d1d759739bc60ee8442fd5d279ef8ce37d588330b34749","ssdeep":"1536:SsBRNfDpSt+WiBm+h3NQjPUt1O7uuX9+yZqAz:SsBRRpcokUOz","tlshash":"54d39621a8f93526507340b87beb560e7e95a113c60b8d0477ec9be00fc2f92dd57aad","first_seen":"2026-09-10T19:21:57.095537Z","last_seen":"2026-09-10T19:21:57.095537Z","times_seen":1,"resource_available":true,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":112,"connect":33,"send":0,"wait":392,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/cache/js/f6224338c22e77152b66c696b4f7cba8.js?lm=1788418761","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.777Z","timestamp":1789068076777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /cache/js/f6224338c22e77152b66c696b4f7cba8.js?lm=1788418761 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uBSPD4gqIXkKMfYV9O3JszGvftAh3poc%2FN6%2BsmfFGacvyuH0xNmVZMbp8U8tqnQgE3c0vFFVbBP8q5yfyK7HL4CYTv2pSgZzldiF2FwZHsBuk%2FMSb%2FYFL6ybRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a390cb77e8cf5b0a-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":356810,"size_decoded":111102,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65484)","md5":"e03cec320d2125271b7890b17425a08b","sha1":"84b25e8f6058e9901ec6f125153149c3e44aa844","sha256":"d61992d97889e2ec1003079f750cfb4d3831fa489f455dcf04bd416dc6bad2b4","sha512":"fc495d07268c4631ff7c95b0c3246b9dab07628e673bb7347a3a2d7d18045ad6bf1ba64375cf26b2e9b1bc64c04573a4642395f17929b259450dc2d844590be6","ssdeep":"6144:r+vbosn5KhsSeIul5W7drr1mss6gkWCZxN0VYHAvUgeRl5qa31C:GKhos7drrQs9gCHK","tlshash":"38743b8e7391716242e771a6406f9206b3776459b809805cb579cce6ac7ce4c22bffbc","first_seen":"2026-04-17T06:22:54.437424Z","last_seen":"2026-09-10T19:21:57.098775Z","times_seen":2,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/products/744c049a5c7f636e8f03289a75842e2b/images/thumbnail/small_IMG-0004-2.JPG?lm=1756297919","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.801Z","timestamp":1789068076801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/products/744c049a5c7f636e8f03289a75842e2b/images/thumbnail/small_IMG-0004-2.JPG?lm=1756297919 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7808e35b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\netag: \"980d-68aefabf-2b43fc05f0420af2;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Wed, 27 Aug 2025 12:31:59 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pzvpQHufp%2B2WQVSUBsHjqhtMCihYIKHHe2JwGnOIWz50SjEsGO3a2EzlecCWbgRxS1%2FG6Xc6JSTIwz2wLXMFpEaigOm9V9sY%2BfbRKaDJkglssdsEvVZsqYBnjw%3D%3D\"}]}\r\ncontent-length: 63396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63396,"size_decoded":64198,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/products/f6021e17cf86838b48a8162c28f93238/images/thumbnail/small_IMG-9277.jpg?lm=1755604171","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.804Z","timestamp":1789068076804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/products/f6021e17cf86838b48a8162c28f93238/images/thumbnail/small_IMG-9277.jpg?lm=1755604171 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7818e85b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Thu, 10 Sep 2026 19:21:16 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iEU5zgdDAqEUXK4Hhv%2BFzEubGtRBulqaijw%2Bs%2BWaVEYUZfAFuzQmg5OZx0CU2NFKpaFcwuxVsnu04Dn%2ByvTLw099Kb%2FtzigxdfJ5owgV00ZGAbqzxs%2FjOWQKeg%3D%3D\"}]}\r\ncontent-length: 50579\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":50579,"size_decoded":51430,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS M50, xresolution=130, yresolution=138, resolutionunit=2, software=Adobe Lightroom 8.4 (Macintosh), datetime=2025:07:23 12:31:27], baseline, precision 8, 410x410, components 3","md5":"f20db50c7b6f611b76c170a599fa79da","sha1":"218f5f0965cee1ed47d3bc64db89064036195bd5","sha256":"2902c5877df894e8c37762f644da3db8761af370ae9780459c5c8232d50eb631","sha512":"5961de4b1e2c8b4238c69d97d0634d8d7491f360fe52b45e3638eadbf997dcdb7ea1e243050682e1dcec983f48b685446d7fdb597ba22d8afad550209abf7304","ssdeep":"768:3xTtrI+xTtrI4Yyp9DqifTzXPGiIzyPC9XtsoSkp:BxXxnnKiIzBNtsVkp","tlshash":"d3339c35fea16cc1c0ad6d3f52c7a2a8aa632666ec830c0f74ec4a157f529c15d875b2","first_seen":"2026-09-10T19:21:57.102672Z","last_seen":"2026-09-10T19:21:57.102672Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/images/frontend/theme/watch/_editor/prod/2892f84908b9148be082cade463b2153.JPG","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.189Z","timestamp":1789068077189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /images/frontend/theme/watch/_editor/prod/2892f84908b9148be082cade463b2153.JPG HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jehn.mom/cache/css/55470e76eee4a86089fd0b76d20496aa.css?lm=1788418761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=4,i\r\ncf-ray: a390cb7a8a455b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\netag: \"18a0c7-68c12ee4-ff00b2c75bd3491e;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:17 GMT\r\nlast-modified: Wed, 10 Sep 2025 07:55:16 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oPwJM3%2BRJSZ4rYdw%2FQwv38WWs22nRnHopwQLSgaoV8OenVNwAH9VE%2BCN30j3hf5Zep3Da16IAwUeLxPqFZnkHMUWqXSP9QBP7yHfNbx%2BRl7at%2F4W%2BVtXZl%2FvVw%3D%3D\"}]}\r\ncontent-length: 2929435\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2929435,"size_decoded":2930249,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotocondensed/v31/ieVo2ZhZI2eCN5jzbjEETS9weq8-_d6T_POl0fRJeyWyosBO5Xw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.238Z","timestamp":1789068077238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/robotocondensed/v31/ieVo2ZhZI2eCN5jzbjEETS9weq8-_d6T_POl0fRJeyWyosBO5Xw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://jehn.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20820\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:32:02 GMT\r\nexpires: Thu, 09 Sep 2027 10:32:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 118155\r\nlast-modified: Wed, 10 Sep 2025 16:48:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20820,"size_decoded":21633,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20820, version 1.0","md5":"1c36c62fd135c15a91ab0a4695409942","sha1":"fa9aa47b97d7ff65331266954194444fd76dd81a","sha256":"543c03fff71d1b39590af102e0852c2dbce46f4dbe4faaebafbef6edc82e78f5","sha512":"7ec543d40b71834ed3978fcff0b36e766d7533b5e4f9feedad8a846920b1c81be6e37037d393066c701472cb719de810061168faf6b2b5ba6df28621c456a6b9","ssdeep":"384:gFvHBr3tu3hnGbhqf1GacPOwMRN/bcH6LMI4nOF9ZgzuWe2uA0bC+Rm6nViIxh:4l3tuxmAgfP7MDbC6LMI4nOFzsW2ulCq","tlshash":"0b92e1e8c5266d8bc49595351c629a2388ca642ef46d3ccca92ced25bca162e4e370c2","first_seen":"2025-05-30T09:26:46.375942Z","last_seen":"2026-10-15T00:05:16.22969Z","times_seen":4666,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":5,"connect":32,"send":0,"wait":28,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/js/jquery.md5.js","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.780Z","timestamp":1789068076780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /js/jquery.md5.js HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YuaqZcPuXp0JwWaj24VMS%2BOLyvm0HyKOHECkVV0IKpccuqDC%2F%2FXs%2BxfGffyfzt5o3R3uqryykelyf2ptFZF4dmAQbVC3e3GwVGzOD9ozyX%2BNO%2BvIWdX7SNWYTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a390cb77e8d25b0a-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9606,"size_decoded":3645,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c629663d7fe3432af0760b26d4b546e7","sha1":"0abc4b9564d71cf8d23b7f5b661552092c8e7d67","sha256":"41f41aa3f32ea20a820c36488c40e2acb8f022c35d91c69a1d1c75e63edebf54","sha512":"219b8e4c5efe3262021e514a8ff66afd979bc80775a4356ef7e8077ba1ce8398daf917bf6f5c29dfe945ca61b2fd883de2578c9049645bbf7217b268ce8df8fc","ssdeep":"192:13FUPDay9rNbLxM7W+5TsKjO1Cu5m6fFHBdLtKIIsTfGJz+Isf1EwLvtnsecTRBd:13FUJSTsKaoubNBFXFLGJCZf1E/1aM","tlshash":"0812c00855d7503655afe135c77b4c1ef52ca277212caa8fba5d42f05f2943483b8fa8","first_seen":"2023-03-07T12:28:02Z","last_seen":"2026-10-06T05:40:48.772462Z","times_seen":315,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/images/frontend/theme/watch/social/instagram.png?v=1.2","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.793Z","timestamp":1789068076793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /images/frontend/theme/watch/social/instagram.png?v=1.2 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a390cb7808da5b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Thu, 10 Sep 2026 19:21:16 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HcR2H7baE5aRtbnMXX0p2vKh7mvNmr0UFB2S2feN%2BkgFOpdYDNpxLbHAh2XpApj21%2BKHQMxRs43x5APUI%2FAGyAlOYCz2RYPIs7d%2BGgy%2B8hpC8xBbKPYtJR%2BOwQ%3D%3D\"}]}\r\ncontent-length: 891\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":891,"size_decoded":1739,"mime_type":"image/png","magic":"PNG image data, 74 x 74, 8-bit/color RGBA, non-interlaced","md5":"5eaada369805be143c12789069cb503c","sha1":"0493f6eb76c9240fa2fd6ab3e8cc12fdb5f966cb","sha256":"85c62d32524a77fa5ad288328774ad7bf4203d10e3abd777141f3d13abc3b263","sha512":"27da6ce48cb2e90a50fe2e8465382079ac00dcb746d247396940357606f0037ebc2f8ec9dc47df527ce9d30e3daaf059625c6521560648a1cd8159e6c1e81683","ssdeep":"","tlshash":"751196cd5f939b6ec47a19321d5563d250332a1a15480becef098170f0f6d0d54beb94","first_seen":"2026-09-10T19:21:57.091448Z","last_seen":"2026-10-06T05:40:49.094288Z","times_seen":2,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/images/frontend/theme/watch/_editor/prod/ef2a5d31eb9ad6e01b80e8429ac0a78c.jpg","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.818Z","timestamp":1789068076818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /images/frontend/theme/watch/_editor/prod/ef2a5d31eb9ad6e01b80e8429ac0a78c.jpg HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7828fb5b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Thu, 10 Sep 2026 19:21:16 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y8uhE5hNzkVbhULHUL44QjevrVb6t%2BG9SMbeB4F8t%2Fn2Thw4k9cS3KyQMUmhx1q6c8y4QOvefDOPye0N7PNlfG7S7pm7Epx0Yi57O%2BRwO5Dbg8iKNAsgK3qKFw%3D%3D\"}]}\r\ncontent-length: 17642\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17642,"size_decoded":18487,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=8, manufacturer=Canon, model=Canon EOS M50, xresolution=130, yresolution=138, resolutionunit=2, software=Adobe Lightroom 8.4 (Macintosh), datetime=2025:07:29 10:01:28], baseline, precision 8, 1000x1000, components 3","md5":"e787fa6eeae53a0a970b372b1d03292d","sha1":"02413acc11e2b77cd5c870da87a6c80f04f58589","sha256":"95cd68d95522034851ed37a0cbd84c83a7f91d6f706ba9a6b3691751169d5080","sha512":"81d61cf9b40e5ae374b4f799e33c39ad079ae048b02f9a43d1b87c5fcde758e188ddefebaa754230dca93a210da19dffa33306a329d637d9514446615e8f64d4","ssdeep":"96:amtDknGWl9H+hmQ/G73ZrZWNS6HxzcXlJ:ntDknNw1ruVJ","tlshash":"0b827441fb119941d045f9301df2aba7fb72f7d4cac1a3aa78cc4416df620e56c09997","first_seen":"2026-09-10T19:21:57.048604Z","last_seen":"2026-09-10T19:21:57.048604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/fonts/myriadpro/MYRIADPRO-REGULAR.woff","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.236Z","timestamp":1789068077236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /fonts/myriadpro/MYRIADPRO-REGULAR.woff HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: application/x-font-woff\r\npriority: u=3,i=?0\r\ncf-ray: a390cb7aca5d5b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\nlast-modified: Thu, 10 Sep 2026 19:21:17 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bf9dKGsc8NmNltoKLMkRGA2eppj4Yq39YoWjXmkUx90wJJ8gjf8XeM%2FXro%2Fl%2F7tKOmje9gAmIk3IEpzQ2CQ8auUheZOYv4SHWc6FPeRU8WKHAUtAX4oFWD7c%2Fw%3D%3D\"}]}\r\ncontent-length: 61848\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":61848,"size_decoded":62671,"mime_type":"application/x-font-woff","magic":"Web Open Font Format, CFF, length 61848, version 0.0","md5":"39338481a9b2c3753b61115062caf9b4","sha1":"de5b33c5a516a7be6551fdba73e1f2715b98db2f","sha256":"19b0448c23352d3e85e3f42e9a157a40242b0a36d907e078f7e82d1b8c8c1f8f","sha512":"23831b0b9cae164f3d9cb46048e760bd1e2fa847912c41fb46b887d7822e665d6dc388f72dc27ecb4aa9780ed6344d8a250295bebcafa66bcc3b60bebea53b74","ssdeep":"768:7xYTj30VVfxIbu4qroe/fGuc4mVjZI6wEwqUZNbFuNSUp9KqKf6tKKn7W7wAqiOG:t+zYfmq4ZiOuaI6lwPXU3Kf6tKT9","tlshash":"87530276eb5b1293c44097710808b305e7dce5deaf1518d78e30ff12e325727568e29a","first_seen":"2023-06-03T23:45:25Z","last_seen":"2026-10-14T15:39:41.630909Z","times_seen":209,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/asapcondensed/v18/pxidypY1o9NHyXh3WvSbGSggdOeMaEw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.242Z","timestamp":1789068077242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/asapcondensed/v18/pxidypY1o9NHyXh3WvSbGSggdOeMaEw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://jehn.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21164\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:35:57 GMT\r\nexpires: Thu, 09 Sep 2027 10:35:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 117920\r\nlast-modified: Wed, 27 Aug 2025 20:20:13 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21164,"size_decoded":21977,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21164, version 1.0","md5":"bc98f73eab53f7f31c2d5a64035c2b15","sha1":"8302d53c90105d87a7e5e21d2ff568c88fa53563","sha256":"0b53a0384c9984f54ec96723065c7ee69d8127dd890f7ee13f2df48249061bcd","sha512":"d61452e259866b3b89cdb685a9693889245511375d9fa3662fcab4958e2aec0b28aa4b7f7c6f85934dfdd52891d0049e15bf354d73a687a9d17634475986f0f4","ssdeep":"384:/xCWxgDz16sLqhVLSjXZokkIOvTwBcxAjXzQvrXs6puFilkoftTbNAZ/bmBIfz:/8WxgDYsLaSkbwGvxpfFlgTmSfz","tlshash":"aa92cf0f2ed8b1adc9986ab03765fa84ac0dec9b22f3be43436591433b19d440b70a57","first_seen":"2025-09-03T05:46:03.579399Z","last_seen":"2026-10-13T08:56:17.454767Z","times_seen":212,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":19,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-50821776-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.770Z","timestamp":1789068076770,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=UA-50821776-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\nexpires: Thu, 10 Sep 2026 19:21:16 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 10 Sep 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 134527\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":381308,"size_decoded":135177,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4892)","md5":"011210ac34031799e854f5a691b14133","sha1":"8f04c7fecc49ffcb84f6f3d9837462b466de1502","sha256":"4b2d663664fbb5776501842358aca6ceb69a33dacc2de1d1b71934d9f1e35f6c","sha512":"1d68ea920594d95f56bd66ead6f9bb3e6d3964af148b9c194cff5931c87312c9efafaf4e27eba6fefc3229627a27fac96abb4b8bc08ecffea06de0aa38b54120","ssdeep":"6144:JM1yDsPoEV9VKm67B3cDaOhEaM36dKZlT0aCqCP:9Qo2VKpzoj","tlshash":"76841accb3d6742283a3b574903f018bb27a7992b84cc898f286d9d42d3465a9177f7d","first_seen":"2026-09-10T19:21:57.114547Z","last_seen":"2026-09-10T19:21:57.114547Z","times_seen":1,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":4,"connect":16,"send":0,"wait":41,"receive":43,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/products/d71c8bdb37936ebbb81d0c399c2ec9fe/images/thumbnail/small_IMG-9656.JPG?lm=1765308982","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.167Z","timestamp":1789068077167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/products/d71c8bdb37936ebbb81d0c399c2ec9fe/images/thumbnail/small_IMG-9656.JPG?lm=1765308982 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7a5a365b0a-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=604800\r\netag: \"9324-69387a36-80288bbee50f597;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Tue, 09 Dec 2025 19:36:22 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eNj7kJbNCCs1gZ%2BIavAr5AoBz6gnGAaMkV0y5cN%2BRL6lm5%2BM6rM9dOJjiyNEQRa%2FhotjMj8paGm2rIZoTZ9b1Y7mv3k8Ck4jyYCoUHuyM1DsxJaWBatbtYA63g%3D%3D\"}]}\r\ncontent-length: 61150\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":61150,"size_decoded":61960,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/images/frontend/theme/watch/social/pinterest.png?v=1.2","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.795Z","timestamp":1789068076795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /images/frontend/theme/watch/social/pinterest.png?v=1.2 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a390cb7808db5b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Thu, 10 Sep 2026 19:21:16 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PTScEuhigcz5OT%2F8LQet6Lcklg6Bke1i3PzGShBs763RjomT9Coi7GHOZr65ODZnnd6ZuKZTcI0KWaSz5vI3YkTsVI1%2FbuUJZU0f1wJl4AZFE0RhU%2BlmczB8AQ%3D%3D\"}]}\r\ncontent-length: 803\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":803,"size_decoded":1645,"mime_type":"image/png","magic":"PNG image data, 74 x 74, 8-bit/color RGBA, non-interlaced","md5":"d0800993ed2406d45566631d00e17275","sha1":"2ec0bda1065c4276e71931b7cedc01088bc6f2f6","sha256":"c7dfc5f3d4ef84f9a90644b5b494b86283dd812ac2e2fd83aa2a523a92199a2b","sha512":"fcf1fde80fd9363c57e38ca9366ed4143d6814c532040338d5ca99f7eaf288907bb4a17ae83220054d4e6a0f4969e9641e9a073cc17e7e026009a6ae4f49c993","ssdeep":"","tlshash":"9801c5c08f0a01a4c80abf74a0830090a67b491c7449708f3ecab5d1d572ec5cc13301","first_seen":"2026-09-10T19:21:57.116405Z","last_seen":"2026-09-10T19:21:57.116405Z","times_seen":1,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/categories/thumbnail/thumb_25.JPG?lm=1756304115","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.798Z","timestamp":1789068076798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/categories/thumbnail/thumb_25.JPG?lm=1756304115 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7808de5b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\netag: \"8512-68af12f3-a29d790ec8c9ab9d;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Wed, 27 Aug 2025 14:15:15 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kiPKpVDo7pbzNLoTpxSjpl42qyygPKEjB5WV5mOFxJ0NxLZwcawRfw40YqerDUr%2BGVYtYurz5hR8hMDtMLYAYjb02TLqWuANsKkNXBoWQcikilP460p0%2F8RYFw%3D%3D\"}]}\r\ncontent-length: 53637\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":53637,"size_decoded":54437,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/images/frontend/theme/bianco/social/pinterest-white.png?v=1.2","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.823Z","timestamp":1789068076823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /images/frontend/theme/bianco/social/pinterest-white.png?v=1.2 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a390cb7839005b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Thu, 10 Sep 2026 19:21:16 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WMetcGODUPJ4ebSbOHD204TOCRqwljhCfR8jhLhGQ84%2FWeLabLOLkyQHi%2BlT63L7gq3zRovM8JUm%2B8jBjdGt50y4aahhJU%2BZ%2Bza4RNSOt5NKEf2hJy%2B77o82vw%3D%3D\"}]}\r\ncontent-length: 803\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":803,"size_decoded":1651,"mime_type":"image/png","magic":"PNG image data, 74 x 74, 8-bit/color RGBA, non-interlaced","md5":"d0800993ed2406d45566631d00e17275","sha1":"2ec0bda1065c4276e71931b7cedc01088bc6f2f6","sha256":"c7dfc5f3d4ef84f9a90644b5b494b86283dd812ac2e2fd83aa2a523a92199a2b","sha512":"fcf1fde80fd9363c57e38ca9366ed4143d6814c532040338d5ca99f7eaf288907bb4a17ae83220054d4e6a0f4969e9641e9a073cc17e7e026009a6ae4f49c993","ssdeep":"","tlshash":"9801c5c08f0a01a4c80abf74a0830090a67b491c7449708f3ecab5d1d572ec5cc13301","first_seen":"2026-09-10T19:21:57.116405Z","last_seen":"2026-09-10T19:21:57.116405Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/categories/thumbnail/thumb_30.JPG?lm=1753815551","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.148Z","timestamp":1789068077148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/categories/thumbnail/thumb_30.JPG?lm=1753815551 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7a3a195b0a-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=604800\r\netag: \"9cb1-688919ff-3f7a9fd525bf17db;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Tue, 29 Jul 2025 18:59:11 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DSkjqJf%2Fna6JM36A2B2OovaJV9WMrjNLu2Py1wNho7TPMYnRIOzN1jy8QMQImJ411HKjeOzmcQDUeXmxGnjaugKrASXUu9T5eo%2FFvch%2B9hkmpoOSic%2FG%2B%2BYSHA%3D%3D\"}]}\r\ncontent-length: 64772\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64772,"size_decoded":65587,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/products/744c049a5c7f636e8f03289a75842e2b/images/thumbnail/small_IMG-0004-2.JPG?lm=1756297919","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.153Z","timestamp":1789068077153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/products/744c049a5c7f636e8f03289a75842e2b/images/thumbnail/small_IMG-0004-2.JPG?lm=1756297919 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7a4a205b0a-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=604800\r\netag: \"980d-68aefabf-2b43fc05f0420af2;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Wed, 27 Aug 2025 12:31:59 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=98ihCdhyMXXe1tWiTDVjFa1HSRrizyo1s%2FM9iV774nAWlw%2FzOeAz0MMpVYTaLL3xb9B2KowXjhtQkhDsc8j44tcIsO9UT0dtjT8s1qDJzFiCh50C27T7wiSL%2Bw%3D%3D\"}]}\r\ncontent-length: 63396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":63396,"size_decoded":64205,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/products/c72660e69bd457fccfd84e71bb0ef882/images/thumbnail/small_IMG-0018-5-2.JPG?lm=1755600975","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.165Z","timestamp":1789068077165,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/products/c72660e69bd457fccfd84e71bb0ef882/images/thumbnail/small_IMG-0018-5-2.JPG?lm=1755600975 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7a5a345b0a-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=604800\r\netag: \"9626-68a4584f-b01be39a5baf7dda;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Tue, 19 Aug 2025 10:56:15 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NzaGawajLVXsD3LQORmA7ffhLJd2Jt9ZkATRTCCz2yVpXEywZkSNOGqRWP0hvPeoWr%2BKOz2q0%2B9frvqvke7XuLmE0bo5a0NzW25ofQ4ylUJHTeNrqRMPdJMc6g%3D%3D\"}]}\r\ncontent-length: 61975\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":61975,"size_decoded":62782,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/products/52ccf5599bbad5df190345fa0aae5a1f/images/thumbnail/small_2025-08-14-0266.JPG?lm=1755592567","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.808Z","timestamp":1789068076808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/products/52ccf5599bbad5df190345fa0aae5a1f/images/thumbnail/small_2025-08-14-0266.JPG?lm=1755592567 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7818ed5b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\netag: \"b4ac-68a43777-34cbbccfee933093;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Tue, 19 Aug 2025 08:36:07 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aMmgsg0wUHBuvFbJ3kJ7faF63Fxyb0aUc6zg2h%2FjXDfm9NEc84P%2BkbS95ubGFxMSYCkGvXUt%2BB3PZAMHFy6JjDTtABR0GoYfd%2BkGEeHueHB1qUAjkdh%2B7I1T%2FA%3D%3D\"}]}\r\ncontent-length: 76213\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76213,"size_decoded":77021,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/images/frontend/theme/watch/_editor/prod/78b084287bae213b86bd72d802492f9b.jpg","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.816Z","timestamp":1789068076816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /images/frontend/theme/watch/_editor/prod/78b084287bae213b86bd72d802492f9b.jpg HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7828fa5b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Thu, 10 Sep 2026 19:21:16 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kOEvpki9x7ow%2FkVyDbWF0GUHFBnQyMk%2BxDwtDX3utbrVMSsiim1W%2BeviyJ1ogtRwhh9bLkQudO7bXPg%2F77QYSMLq1kJjAvf9U76T8qWVEakqYyVKnpPrb%2FEcRg%3D%3D\"}]}\r\ncontent-length: 17642\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17642,"size_decoded":18491,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=8, manufacturer=Canon, model=Canon EOS M50, xresolution=130, yresolution=138, resolutionunit=2, software=Adobe Lightroom 8.4 (Macintosh), datetime=2025:07:29 10:01:28], baseline, precision 8, 1000x1000, components 3","md5":"e787fa6eeae53a0a970b372b1d03292d","sha1":"02413acc11e2b77cd5c870da87a6c80f04f58589","sha256":"95cd68d95522034851ed37a0cbd84c83a7f91d6f706ba9a6b3691751169d5080","sha512":"81d61cf9b40e5ae374b4f799e33c39ad079ae048b02f9a43d1b87c5fcde758e188ddefebaa754230dca93a210da19dffa33306a329d637d9514446615e8f64d4","ssdeep":"96:amtDknGWl9H+hmQ/G73ZrZWNS6HxzcXlJ:ntDknNw1ruVJ","tlshash":"0b827441fb119941d045f9301df2aba7fb72f7d4cac1a3aa78cc4416df620e56c09997","first_seen":"2026-09-10T19:21:57.048604Z","last_seen":"2026-09-10T19:21:57.048604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/fonts/myriadpro/MYRIADPRO-SEMIBOLD.woff","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.234Z","timestamp":1789068077234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /fonts/myriadpro/MYRIADPRO-SEMIBOLD.woff HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: application/x-font-woff\r\npriority: u=3,i=?0\r\ncf-ray: a390cb7aca5c5b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\nlast-modified: Thu, 10 Sep 2026 19:21:17 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nv60xbmZkVcp2uFohe2Vo1A4R2UbtqFScTNoRqDUamRRmN6Ua8ilJ3hh4Qs4tGvW0MF85lhbQ8JtvPzSr%2BajXmG0IpM%2F3EwC4i%2B6%2Ff1d5%2BabdoGk%2Br1%2B3GDD%2FQ%3D%3D\"}]}\r\ncontent-length: 62448\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":62448,"size_decoded":63279,"mime_type":"application/x-font-woff","magic":"Web Open Font Format, CFF, length 62448, version 0.0","md5":"6fd5c55d90e96c8af1041794ab70f5f2","sha1":"be1da7322f84fd756f8437d32500bee9b5877dd7","sha256":"8f6b883d93b2767c0d04efeeeb65ac92a170c1d966fefc635586d233e5f318cc","sha512":"1895a3d60a07f6710b49246c92f5a4e335c6f2283852c441a024847bcb7284dc3b08d62c249e99e4298010ed7212870588927b59a327b0a0f1139631fff06f8d","ssdeep":"1536:Nrf70FE9eQ1b3sxXOSA0zH2OAamZgtJH4gvEYu+M+C:ND4FbSb8xXw0zHBAamOXvED","tlshash":"4f531205a1d4d7bec5034550ec21cebaa79eb41ebd1bcc84f206a917c73d69b990f4d2","first_seen":"2023-06-30T14:58:25Z","last_seen":"2026-10-11T08:13:23.394488Z","times_seen":640,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotocondensed/v31/ieVo2ZhZI2eCN5jzbjEETS9weq8-_d6T_POl0fRJeyWyosBA5XxxKA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.239Z","timestamp":1789068077239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/robotocondensed/v31/ieVo2ZhZI2eCN5jzbjEETS9weq8-_d6T_POl0fRJeyWyosBA5XxxKA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://jehn.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13968\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 12:42:21 GMT\r\nexpires: Sat, 04 Sep 2027 12:42:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 542336\r\nlast-modified: Wed, 10 Sep 2025 16:47:29 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13968,"size_decoded":14781,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13968, version 1.0","md5":"c25754be0fc204c9ddbfc7130633daea","sha1":"4a5f331a67d3e2b1306f3148b55ec65f3ec945a2","sha256":"ca2b9eabacfab99dade007dddad623bb6895c445529d24fd70540c3fcc84eb39","sha512":"50763ebfd8775c70ae16fb63b27479f625855142e25ac50b1be0d02db280d632d7168378f5846df94fa9a2cfde04ec2083317c01809da722ceb4b6ba066ffaa4","ssdeep":"192:U26UdwDCuWXnfcQkvkmO9T1MGiBZuiD/lZBU85uuepUvhDvHpBVwOdgbbiNKlyL4:UzuOaXn0V0TCbuiD/ZaQhDvVwK0iNiZ","tlshash":"f352d0a8c937f77c9c5200ed0928c2b9bbf57e38473506b8101a58c0fa9a5b47e6438a","first_seen":"2025-05-31T00:32:41.284966Z","last_seen":"2026-10-14T13:13:14.984798Z","times_seen":233,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":35,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/images/frontend/theme/watch/_editor/prod/d34c550b88de0535c4df73d605b2a2c7.png","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.788Z","timestamp":1789068076788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /images/frontend/theme/watch/_editor/prod/d34c550b88de0535c4df73d605b2a2c7.png HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a390cb77f8d55b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Thu, 10 Sep 2026 19:21:16 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2FriNf1RHE8%2BpJJQNQ6OW0OK50kcWkNopR1JAiDSO6hz78N0N%2BJpx050HYUfcuAVZVemz0Mle4kdWFoyDHkzxCepBl6N1JyBdecp%2BGHxFaY9eojCdWq6%2ByAzZg%3D%3D\"}]}\r\ncontent-length: 30290\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":30290,"size_decoded":31138,"mime_type":"image/png","magic":"PNG image data, 1244 x 520, 8-bit/color RGBA, non-interlaced","md5":"392904bcd53c76c6f4a2f4ee560b9aba","sha1":"e5b47dbbc40fbb315818e0745a6e3c72c9cc504e","sha256":"b58ed9415512d641768e46097ddfe5f4fc48cb70a953997a1a85a83b7f1855f5","sha512":"80859c039861cc3414031ee898ae6088cf0707d93dbf70fddbbd0d0cd5662ce80b0916a6da08f42a5914d9d1d03dd002ac42230ac8f776c52859c2f80d0a0190","ssdeep":"768:Se+1i5m5oOafmjPRx774AUuEOQIRLYWWuU9icNaxE:iDeOvPRxv4BuESLcuUicNaxE","tlshash":"3bd2e0162df68e6cc2f4e67c5c7b6c20f233058e8bad65675379287b40959bac20318e","first_seen":"2026-09-10T19:21:57.123948Z","last_seen":"2026-09-10T19:21:57.123948Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/products/9d2d1d111bef0b284c78659e66c37cc1/images/thumbnail/small_2025-07-14-0035.jpg?lm=1755087523","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.814Z","timestamp":1789068076814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/products/9d2d1d111bef0b284c78659e66c37cc1/images/thumbnail/small_2025-07-14-0035.jpg?lm=1755087523 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7828f55b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Thu, 10 Sep 2026 19:21:16 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h4VR7QVAWisg35BRVGjAYbmNoL8102BH2znvIfBbqf5mtXjVbNFg52KbmKbwwboGxerJOvp%2FIM0zvSuLu4rZxER0qLlos6zkp9jWAD6ob2SU6Y8UFcy728TAfQ%3D%3D\"}]}\r\ncontent-length: 41589\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41589,"size_decoded":42430,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS M50, xresolution=130, yresolution=138, resolutionunit=2, software=Adobe Lightroom 8.4 (Macintosh), datetime=2025:07:23 13:15:40], baseline, precision 8, 410x410, components 3","md5":"ded8ae171e0efa303da621b6797669f5","sha1":"b475d37d8c302d29ffd23493a900ea790b64e0db","sha256":"e011bc94b5b86ea263671a33d1c1d5d63bfbf03feaaaf73bf7ceab32e358d048","sha512":"89990c91ab7da7621cfc0cc1d78cf055e63280556674ff95f4b80575a210b573da50c1427a489fe0e84b2148700b49f1de02e193d23ebcc555e37faa6679e716","ssdeep":"768:m0gWe4FU0gWe4FIYyD9DdifOEs+2Jg873HwbA:m0glWU0glWI9csm8","tlshash":"4e138d68fea01ec1c4ecae3f65d3995da6526656ddc30c4f34ec5514bfa22c00d8b6b2","first_seen":"2026-09-10T19:21:57.126261Z","last_seen":"2026-09-10T19:21:57.126261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/products/88b89e6ba55024924a0ac6139f41aed9/images/thumbnail/small_glowne8.JPG?lm=1755601519","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.156Z","timestamp":1789068077156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/products/88b89e6ba55024924a0ac6139f41aed9/images/thumbnail/small_glowne8.JPG?lm=1755601519 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7a4a245b0a-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=604800\r\netag: \"91a3-68a45a6f-9dc8c8a7fc2a554f;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Tue, 19 Aug 2025 11:05:19 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FJDcFBh7qBfrgp4mz5scQkd%2Bm7nYkcoyfqKgqYvUjYY8YcNRgK1kKDqv4x1TlFCApx4b0x4cLENa5pnzOG4j2%2BcJtiw9LJi9lig8osRT345WdIxCLRku5QPm%2FA%3D%3D\"}]}\r\ncontent-length: 59384\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":59384,"size_decoded":60193,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/uploads/banner_video/40/pl_PL/dfa7df617e29acc9ed0ba8d24da90a4b.bin","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:18.008Z","timestamp":1789068078008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /uploads/banner_video/40/pl_PL/dfa7df617e29acc9ed0ba8d24da90a4b.bin HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://jehn.mom/\r\nRange: bytes=8257536-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ads_tracker_3f3843aea002fb58df7bb0972b3c139e=%5B%7B%22ads_cookie_hash%22%3A%22876e8c72569e8f8ca1ab5f622b8bde75%22%2C%22ads_id%22%3A1%2C%22ads_path%22%3A%22Wej%C5%9Bcia%20bezpo%C5%9Brednie%22%2C%22ads_entering%22%3A1%2C%22ads_last%22%3A%22true%22%2C%22ads_create%22%3A%222026-09-10%2019%3A21%3A17%22%2C%22ads_update%22%3A%222026-09-10%2019%3A21%3A17%22%2C%22ads_sum_control%22%3A%22224f517d31ffd8166c4409b529ec8f81%22%7D%5D; cookies_google_analytics=false; cookies_google_targeting=false; cookies_google_personalization=false; cookies_google_user_data=false; soteshop=4fb07865f9e8be426826565ab8180ee2; utl_0ab720d22903e8bab00e975191a822a14b9995b58e536fbaa0bfdd18f5fbf1bb=true; utd_018efd0b9827d2d3f0137e47d776cd3d99eb1ffb3e222619aa84b0430467c2d0=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; utl_7e9225ea83e739509f3df95d4ff2139985b08a5ce8fd66378c8b42f5d8fd9b1c=true; utd_856b37c3d786ea51a10426f3ea55c0215dcca8d4ccb982593678e6b33d27d143=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\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:18 GMT\r\ncontent-type: application/octet-stream\r\ncontent-range: bytes 8257536-8288205/8288206\r\npriority: u=4,i=?0\r\ncf-ray: a390cb7febcb5b0a-CPH\r\ncf-cache-status: HIT\r\nage: 0\r\ncache-control: max-age=14400\r\netag: \"7e77ce-689b6b67-fca483866e6f2ffd;;;\"\r\nlast-modified: Tue, 12 Aug 2025 16:27:19 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DAgEMG1nyQXw1sTSqXfrTXrS81oj%2FouwEn3qciAVXNleM8EzPNtKgn%2BBZOHf%2BWfx1IeAZf6KEQkWzgwyINNxpn8HyC6I4HbI7ud1Do%2B3ekIeeW32ez3aV%2FFmAA%3D%3D\"}]}\r\ncontent-length: 43725\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":43725,"size_decoded":44532,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Asap+Condensed\u0026family=Roboto+Condensed\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.768Z","timestamp":1789068076768,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Asap+Condensed\u0026family=Roboto+Condensed\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 10 Sep 2026 19:21:16 GMT\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4022,"size_decoded":1395,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"61d23185701126ef936eb5955fa7ef6a","sha1":"bf7ba418a855a1006358bb6f0decd085b46e3f0b","sha256":"15d12cde07b56e9ec8d22464048852b5c9af7b114e812a696a0f8ba22a5591f2","sha512":"b16de01a3a6c020a9063a0cab2a5fc064bf186e334b7f81f89333a5836feb6ead4b98305468d6cf0228d26f4db647bde94287af1bfb8bbe0b14fd3c443163095","ssdeep":"","tlshash":"0881e091042ba400db935cc52bcf7e3aed4e22056448d6b9dffd1c58aceae65236874f","first_seen":"2026-09-10T19:21:57.128788Z","last_seen":"2026-09-10T19:21:57.128788Z","times_seen":1,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":5,"connect":15,"send":0,"wait":34,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/products/ee067c7db81154951cd78e9f8b7587d6/images/thumbnail/small_IMG-0012-2-2.JPG?lm=1756730101","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.802Z","timestamp":1789068076802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/products/ee067c7db81154951cd78e9f8b7587d6/images/thumbnail/small_IMG-0012-2-2.JPG?lm=1756730101 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7818e45b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\netag: \"9ae0-68b592f5-dc547428e2b987ba;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Mon, 01 Sep 2025 12:35:01 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iKugdZz5VfoXsf6ey9WL1Xax9Yq4h4efeZF3lhE5AZ1%2BkmPh25UJcytb6nbbtxghEhCHEAsFNGz15DlhP581YapAQ8y06XWSxlw2vix0e%2F19IbhUCEvHfeqgKw%3D%3D\"}]}\r\ncontent-length: 64351\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":64351,"size_decoded":65151,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/products/ee067c7db81154951cd78e9f8b7587d6/images/thumbnail/small_IMG-0012-2-2.JPG?lm=1756730101","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.155Z","timestamp":1789068077155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/products/ee067c7db81154951cd78e9f8b7587d6/images/thumbnail/small_IMG-0012-2-2.JPG?lm=1756730101 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7a4a235b0a-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=604800\r\netag: \"9ae0-68b592f5-dc547428e2b987ba;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Mon, 01 Sep 2025 12:35:01 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xqq996Qrg7Z38Kd5mTL4LRVMGCU7lZGDlGWRYYm0PJaiQ2gwJ75djIWt4Mm4um6qTMJYPmuJD%2FlQhCMOZ2YQVhZwjF8NxpIlZXUPybvYOMho87U%2BXbSh28yEAA%3D%3D\"}]}\r\ncontent-length: 64351\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":64351,"size_decoded":65158,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/bootstrap/fonts/glyphicons-halflings-regular.woff","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.560Z","timestamp":1789068076560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /bootstrap/fonts/glyphicons-halflings-regular.woff HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: application/x-font-woff\r\npriority: u=2,i=?0\r\ncf-ray: a390cb7688495b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\nlast-modified: Thu, 10 Sep 2026 19:21:16 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=35krnON1IeAxv6GNrlVYe29oi0qSkvbtGpvMq1GxUcBG0h8jHEfh4nc8IZx9jzwwnUcd7ctTa3un7xxKdj7evVUtXOU2QiBdjKz78nWrf4y12b4vrPyoNkBDJg%3D%3D\"}]}\r\ncontent-length: 23320\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23320,"size_decoded":24135,"mime_type":"application/x-font-woff","magic":"Web Open Font Format, TrueType, length 23320, version 1.0","md5":"68ed1dac06bf0409c18ae7bc62889170","sha1":"22037a3455914e5662fa51a596677bdb329e2c5c","sha256":"fc969dc1c6ff531abcf368089dcbaf5775133b0626ff56b52301a059fc0f9e1e","sha512":"88beda715a3de8ea031048feb71fd3ffff9c695fd9874b06c8b1d31c88c7a8a653c4a67efab3b6f0b1f4dedc3c18a6436a4455984c0abce10a210baca0cb689d","ssdeep":"384:nPImthkcJE4kdRJe7gl601jRx2GbhjBrr7plKUl2yCIvSAF2KFXthj1D:PImth2Je70jxphjZp0UMyPSyhD","tlshash":"1ea2d0e7af93450ff75e1279c384429e368dac09a19b0dc546edac1d91c80bced426f5","first_seen":"2023-04-05T07:13:03Z","last_seen":"2026-10-14T22:13:29.593037Z","times_seen":6854,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/js/jquery.cookie.js","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.779Z","timestamp":1789068076779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /js/jquery.cookie.js HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u7bEb%2FLSZGcfN1gxF%2FgzCfuDtheR8Sg3I2ktiVrU6%2FL8JYWlaWfrMEE9Zg400Bh1jUkbKpfaSD%2F8lAh1jNOsAgmkxktZGq4WfNFNw%2FQ%2B%2BGduu%2FWf7wBLKr895w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a390cb77e8d05b0a-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5496,"size_decoded":2438,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1394)","md5":"03b9574487d06f8f8513f95758c7cab3","sha1":"90a61ac9835905ebec2bb1499dd0b0de894f8045","sha256":"10fdbfbb18a947e7024457f52fd2dfe94ebddd612156c886731474b02aa45d23","sha512":"7851dd6cdf81a21550f85a8368fb5bfb511eff8e40c12973b288103896162879a297fbcbcc5a39476d204a4698afbcb94477412a20d089cf0b83dc2d4df349ab","ssdeep":"96:KS6+nj+zTIi0uktcIcmhGHhxBGj46NKPUff:KSLj+zp0uktKUGBxBf6NJX","tlshash":"2ab1435937e9222845d365e12837a10af538f7356488109ce6e4e2f03df5a07e873a7b","first_seen":"2023-03-07T23:35:08Z","last_seen":"2026-10-06T05:40:48.801368Z","times_seen":193,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/categories/thumbnail/thumb_30.JPG?lm=1753815551","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.798Z","timestamp":1789068076798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/categories/thumbnail/thumb_30.JPG?lm=1753815551 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7808df5b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\netag: \"9cb1-688919ff-3f7a9fd525bf17db;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Tue, 29 Jul 2025 18:59:11 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DyBwXX%2FQlYtNDe%2FmZoPUF6dbE9q%2FmXH67rZaYomJXfxhH4Y9na5t8dngUbgzC7%2BjefK%2B0pjaHzVKJ6Mu6DHGBiTZxBVC9OhpJJGpSZcYtkKsg7a1%2BZyKBLoDVw%3D%3D\"}]}\r\ncontent-length: 64772\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":64772,"size_decoded":65580,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/products/65ced3e19d8ffc9d2a52b0d33cb2f089/images/thumbnail/small_IMG-9761.JPG?lm=1771597695","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.810Z","timestamp":1789068076810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/products/65ced3e19d8ffc9d2a52b0d33cb2f089/images/thumbnail/small_IMG-9761.JPG?lm=1771597695 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7818ef5b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\netag: \"7850-69986f7f-d9d176680bace56c;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Fri, 20 Feb 2026 14:28:15 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XUbFeTWEHN1cvXsUoP0KxMaARTrfbixT3HMb89M2R0Xcw0dmjzzr%2BPf1RxiGAGrnON5hVYu6zyTDg44Qf7On14Aq2OKOll9f5qeLVWxmJyE%2FgQ6Igq38c5aStA%3D%3D\"}]}\r\ncontent-length: 48150\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":48150,"size_decoded":48950,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/products/c72660e69bd457fccfd84e71bb0ef882/images/thumbnail/small_IMG-0018-5-2.JPG?lm=1755600975","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.811Z","timestamp":1789068076811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/products/c72660e69bd457fccfd84e71bb0ef882/images/thumbnail/small_IMG-0018-5-2.JPG?lm=1755600975 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7818f15b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\netag: \"9626-68a4584f-b01be39a5baf7dda;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Tue, 19 Aug 2025 10:56:15 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VbVH18fZtD04SO%2BTMU9%2Ftf5f6H4kAjlS1yO4Q%2FAi%2BZM%2BDhYJhKLtPilHdGTRl2je8kpXq8fsDTm0ob8AXEd7fwnELXqhIthuThuHbPMU4ieK3NYo%2FPZP1kW88Q%3D%3D\"}]}\r\ncontent-length: 61975\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":61975,"size_decoded":62783,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/favicon.ico","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.957Z","timestamp":1789068077957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ads_tracker_3f3843aea002fb58df7bb0972b3c139e=%5B%7B%22ads_cookie_hash%22%3A%22876e8c72569e8f8ca1ab5f622b8bde75%22%2C%22ads_id%22%3A1%2C%22ads_path%22%3A%22Wej%C5%9Bcia%20bezpo%C5%9Brednie%22%2C%22ads_entering%22%3A1%2C%22ads_last%22%3A%22true%22%2C%22ads_create%22%3A%222026-09-10%2019%3A21%3A17%22%2C%22ads_update%22%3A%222026-09-10%2019%3A21%3A17%22%2C%22ads_sum_control%22%3A%22224f517d31ffd8166c4409b529ec8f81%22%7D%5D; cookies_google_analytics=false; cookies_google_targeting=false; cookies_google_personalization=false; cookies_google_user_data=false; soteshop=4fb07865f9e8be426826565ab8180ee2; utl_0ab720d22903e8bab00e975191a822a14b9995b58e536fbaa0bfdd18f5fbf1bb=true; utd_018efd0b9827d2d3f0137e47d776cd3d99eb1ffb3e222619aa84b0430467c2d0=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; utl_7e9225ea83e739509f3df95d4ff2139985b08a5ce8fd66378c8b42f5d8fd9b1c=true; utd_856b37c3d786ea51a10426f3ea55c0215dcca8d4ccb982593678e6b33d27d143=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\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WVQo16K4jmpb7Iuu5cHRK8xGmzRSTdeyw2vBl3te9626ViR1Ng%2Baa9dAFSyiQzukYXkEN1c47qp1A4Moi1UwZGeWCWuom59xsznVX9e7YORxx8JLHNOrbHC8pA%3D%3D\"}]}\r\ndate: Thu, 10 Sep 2026 19:21:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=6,i=?0\r\ncf-ray: a390cb7f4b835b0a-CPH\r\ncf-cache-status: MISS\r\ncache-control: max-age=14400\r\nserver: cloudflare\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":632,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/st-user-tracker-level/updateUTL","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:22.326Z","timestamp":1789068082326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /st-user-tracker-level/updateUTL HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ads_tracker_3f3843aea002fb58df7bb0972b3c139e=%5B%7B%22ads_cookie_hash%22%3A%22876e8c72569e8f8ca1ab5f622b8bde75%22%2C%22ads_id%22%3A1%2C%22ads_path%22%3A%22Wej%C5%9Bcia%20bezpo%C5%9Brednie%22%2C%22ads_entering%22%3A1%2C%22ads_last%22%3A%22true%22%2C%22ads_create%22%3A%222026-09-10%2019%3A21%3A17%22%2C%22ads_update%22%3A%222026-09-10%2019%3A21%3A17%22%2C%22ads_sum_control%22%3A%22224f517d31ffd8166c4409b529ec8f81%22%7D%5D; cookies_google_analytics=false; cookies_google_targeting=false; cookies_google_personalization=false; cookies_google_user_data=false; soteshop=4fb07865f9e8be426826565ab8180ee2; utl_0ab720d22903e8bab00e975191a822a14b9995b58e536fbaa0bfdd18f5fbf1bb=true; utd_018efd0b9827d2d3f0137e47d776cd3d99eb1ffb3e222619aa84b0430467c2d0=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; utl_7e9225ea83e739509f3df95d4ff2139985b08a5ce8fd66378c8b42f5d8fd9b1c=true; utd_856b37c3d786ea51a10426f3ea55c0215dcca8d4ccb982593678e6b33d27d143=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\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: a390cb9a9d425b0a-CPH\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nserver: cloudflare\r\nset-cookie: utd_856b37c3d786ea51a10426f3ea55c0215dcca8d4ccb982593678e6b33d27d143=02d786b533ec189bbbcb39a1070b4f7dc29f820eef3fe23c82e24463a0c2cc22b3a3b28e51591e92d5f9bb20d1e55e4603954c60bcb9d405438bc92a176c8f71a3ba3de2a110ef903080b43648d8482e6c02212a7ce45bbed83010829b4e66a162c11dc578d99a4a6e36c04460d52807634257cfa5c3c11d58f25ed61440aa4823e01467df3db38cd1f941595b75e378183ec98d5fa3a6dff2507d92293a424fe03b7f1818daf1bc69482584138bb2c5411d591fccb90f60219791c0b59b54f8aa35c9e7e6c96078d220628594c94096bf262abf53f88b8461b50e8ab8b6a81450832cdaa5a19b5605ae6b32d46ab570e4b27e8e408c12a2067e87c5017e995053d1c594e6773f2605b88dca89056f89320fb7acc3978984a04fd68320d0fd174c6fbc844907df743a4576a8716d9b356ef7fad1f61570ca31bf9a8e994ba97e5403107119d3f4d42e11b05f1232d66d98ed0c25ed4626e3b1b6bb32f3bc69671f292f6de9b8208a5110f4c31901a1e76d9740f1b7b92e11e23861f8ccd390852c2f38a9e9898a502c089301821de5f856e432e655feeaea0701ae8fa1d6ead6d3b0323e622e6c37e992003b92da1a0368803a8b8d625ed8539189860b4e8e6d3edf610f3bb4ac70d28b9c597408429a370626ab566ee01e2452ffa741b1c7fdf4657f8f59be6b9b95f04ab5fabd82cf2ef92ca2aabb3bb5216c578921bf5b8c82569e7936c052cacb218e172cc288a8; expires=Sat, 10 Oct 2026 19:21:22 GMT; Max-Age=2592000; path=/; secure\r\nvary: User-Agent\r\npragma: no-cache\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval'  https://facebook.com https://mapa.ecommerce.poczta-polska.pl https://www.paypal.com https://www.paypalobjects.com https://*.easypack24.net https://*.openstreetmap.org https://*.inpost.pl https://*.allegrostatic.com https://allegro.pl https://*.allegro.pl https://*.allegroimg.com https://*.allegrosandbox.pl https://*.sote.pl https://*.googletagmanager.com https://*.facebook.net https://*.facebook.com https://*.google-analytics.com https://*.google.com https://*.google.pl https://unpkg.com https://api.mapbox.com https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net https://stats.g.doubleclick.net https://*.soteshop.com *.gstatic.com *.googleapis.com *.youtube.com *.vimeo.com *.ytimg.com *.soundcloud.com *.vimeocdn.com *.smartsupp.com *.smartsuppcdn.com wss://*.smartsupp.com *.cdn77.org smartsupp-widget-161959.c.cdn77.org *.smartlook.com *.smartlook.cloud *.smartsuppchat.com *.addthis.com *.addthisedge.com *.facebook.com *.facebook.net *.fbcdn.net *.instagram.com *.cdninstagram.com *.googletagmanager.com *.google-analytics.com *.paypalobjects.com *.paypal.com *.autopay.eu https://*.cashbill.pl https://*.ceneo.pl https://*.secure.eservice.com.pl *.credit-agricole.pl *.paybynet.com.pl *.polcard.com.pl *.przelewy24.pl *.eraty.pl static.hotjar.com https://disqus.com https://widgets.trustedshops.com http://widgets.trustedshops.com https://integrations.etrusted.com http://integrations.etrusted.com https://api.trustedshops.com https://*.trustedshops.com data:; form-action 'self'  https://facebook.com https://mapa.ecommerce.poczta-polska.pl https://www.paypal.com https://www.paypalobjects.com https://*.easypack24.net https://*.openstreetmap.org https://*.inpost.pl https://*.allegrostatic.com https://allegro.pl https://*.allegro.pl https://*.allegroimg.com https://*.allegrosandbox.pl https://*.sote.pl https://*.googletagmanager.com https://*.facebook.net https://*.facebook.com https://*.google-analytics.com https://*.google.com https://*.google.pl https://unpkg.com https://api.mapbox.com https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net https://stats.g.doubleclick.net https://*.soteshop.com *.gstatic.com *.googleapis.com *.youtube.com *.vimeo.com *.ytimg.com *.soundcloud.com *.vimeocdn.com *.smartsupp.com *.smartsuppcdn.com wss://*.smartsupp.com *.cdn77.org smartsupp-widget-161959.c.cdn77.org *.smartlook.com *.smartlook.cloud *.smartsuppchat.com *.addthis.com *.addthisedge.com *.facebook.com *.facebook.net *.fbcdn.net *.instagram.com *.cdninstagram.com *.googletagmanager.com *.google-analytics.com *.paypalobjects.com *.paypal.com *.autopay.eu https://*.cashbill.pl https://*.ceneo.pl https://*.secure.eservice.com.pl *.credit-agricole.pl *.paybynet.com.pl *.polcard.com.pl *.przelewy24.pl *.eraty.pl static.hotjar.com https://disqus.com https://widgets.trustedshops.com http://widgets.trustedshops.com https://integrations.etrusted.com http://integrations.etrusted.com https://api.trustedshops.com https://*.trustedshops.com; frame-ancestors 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex,nofollow\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ANxCK8OPMQ5%2Fhf1z6HigX6BE8%2Bn8yr8u9i4PZHXFxIhOYhge4T8rzrVyq0W0T7XPVa%2FoXX5F6d1W4g4drpx3621EcTdO9oPmEzyiUdC3kNor6j%2FbN7gufQz7Iw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":[{"name":"utd_856b37c3d786ea51a10426f3ea55c0215dcca8d4ccb982593678e6b33d27d143","value":"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","quoted":false,"path":"/","expires":"2026-10-10T19:21:22Z","raw_expires":"Sat, 10 Oct 2026 19:21:22 GMT","max_age":2592000,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"utd_856b37c3d786ea51a10426f3ea55c0215dcca8d4ccb982593678e6b33d27d143=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; expires=Sat, 10 Oct 2026 19:21:22 GMT; Max-Age=2592000; path=/; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":5135,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/images/frontend/theme/bianco/social/youtube-white.png?v=1.2","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.820Z","timestamp":1789068076820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /images/frontend/theme/bianco/social/youtube-white.png?v=1.2 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a390cb7828fe5b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Thu, 10 Sep 2026 19:21:16 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=14%2BQwRDO7F%2BJXxIN0Ziv2aY4BCTc2FtPJPLvVD590db6yfb954o0LEp25lIeEv8vW5yc4Ajz40gQHS7WgwNpF8m6HPuoBy%2FZrwV%2FwDtFDcwspH%2FgY0QRXEyYkA%3D%3D\"}]}\r\ncontent-length: 593\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":593,"size_decoded":1439,"mime_type":"image/png","magic":"PNG image data, 74 x 74, 8-bit/color RGBA, non-interlaced","md5":"05398f31a7139317ded6a41f1bd32b17","sha1":"30143525c123d3c2c887023f21c1b0b394371660","sha256":"1dd321cc9d8da339e6e43060df4e53e241b5f382d6b13ea67c6af31f6261c068","sha512":"8bbe0dd66fcd5d0b1193603a00f042402770ed4ed3c96b920426592070ef6a6aeaeb26cdced914d5412340a856e6a418d4be8bf33218446fd40e9a964905a904","ssdeep":"","tlshash":"b6f096c07a23713c8f4ec5dc012231d15239027ea44c0b079cb807f5d30ac44d9b686e","first_seen":"2026-09-10T19:21:57.059522Z","last_seen":"2026-10-06T05:40:48.884642Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/images/frontend/theme/bianco/social/newsletter-white.png?v=1.2","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.823Z","timestamp":1789068076823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /images/frontend/theme/bianco/social/newsletter-white.png?v=1.2 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a390cb7839015b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Thu, 10 Sep 2026 19:21:16 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JmE4troqSNB99p%2BSbF%2BxH1MXQ%2B9LDQ%2BIUtDbT45prO9vsnsoLGoQWW2miP84BNQaY0ys3jmuMzxMzfq%2Bbvp7%2BzkHn%2FKQvPlsapRPXtnjFoIWO9v5kFBvzGQ8iA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 803\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":803,"size_decoded":1653,"mime_type":"image/png","magic":"PNG image data, 74 x 74, 8-bit/color RGBA, non-interlaced","md5":"0bb09ef7dce98dfbbd70e27c7dcee810","sha1":"2e473b78e8bb7060daeab3b069af84b1064c38ca","sha256":"097b2df3583ad75ce09962bc23a71894ed8a99ba815143d47d868f58c29eae6c","sha512":"1d7189482d1a6355cc158f34bf3d785bb1bdbebaf89aa2364b2c3a8aa51c228ad15576e064a982bbeb932c46070a74a8cec4265d7c52d63007581896af037b0e","ssdeep":"","tlshash":"8c0186e2a683a3ced8bbce7988630210027c1a4d4954600acb9e8a220eb043c2e07d10","first_seen":"2026-09-10T19:21:57.062846Z","last_seen":"2026-10-06T05:40:48.72752Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/adsTracker/remoteAddressData","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.339Z","timestamp":1789068077339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"POST /adsTracker/remoteAddressData HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 475\r\nOrigin: https://jehn.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ads_tracker_3f3843aea002fb58df7bb0972b3c139e=%5B%7B%22ads_cookie_hash%22%3A%22876e8c72569e8f8ca1ab5f622b8bde75%22%2C%22ads_id%22%3A1%2C%22ads_path%22%3A%22Wej%C5%9Bcia%20bezpo%C5%9Brednie%22%2C%22ads_entering%22%3A1%2C%22ads_last%22%3A%22true%22%2C%22ads_create%22%3A%222026-09-10%2019%3A21%3A17%22%2C%22ads_update%22%3A%222026-09-10%2019%3A21%3A17%22%2C%22ads_sum_control%22%3A%22224f517d31ffd8166c4409b529ec8f81%22%7D%5D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":475,"data":"url=https%3A%2F%2Fjehn.mom%2F\u0026remote_address=91.202.57.35\u0026hash=%23%23%23direct%23%23%23\u0026ads_id=1\u0026cookie=%5B%7B%22ads_cookie_hash%22%3A%22876e8c72569e8f8ca1ab5f622b8bde75%22%2C%22ads_id%22%3A1%2C%22ads_path%22%3A%22Wej%C5%9Bcia+bezpo%C5%9Brednie%22%2C%22ads_entering%22%3A1%2C%22ads_last%22%3A%22true%22%2C%22ads_create%22%3A%222026-09-10+19%3A21%3A17%22%2C%22ads_update%22%3A%222026-09-10+19%3A21%3A17%22%2C%22ads_sum_control%22%3A%22224f517d31ffd8166c4409b529ec8f81%22%7D%5D"}},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: a390cb7b6aa25b0a-CPH\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nserver: cloudflare\r\nset-cookie: soteshop=db0fa6e3faa02685210242ea83311056; path=/; secure; HttpOnly\nutl_0ab720d22903e8bab00e975191a822a14b9995b58e536fbaa0bfdd18f5fbf1bb=true; expires=Sat, 10 Oct 2026 19:21:17 GMT; Max-Age=2592000; path=/; secure\nutd_018efd0b9827d2d3f0137e47d776cd3d99eb1ffb3e222619aa84b0430467c2d0=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; expires=Sat, 10 Oct 2026 19:21:17 GMT; Max-Age=2592000; path=/; secure\r\nvary: User-Agent\r\npragma: no-cache\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval'  https://facebook.com https://mapa.ecommerce.poczta-polska.pl https://www.paypal.com https://www.paypalobjects.com https://*.easypack24.net https://*.openstreetmap.org https://*.inpost.pl https://*.allegrostatic.com https://allegro.pl https://*.allegro.pl https://*.allegroimg.com https://*.allegrosandbox.pl https://*.sote.pl https://*.googletagmanager.com https://*.facebook.net https://*.facebook.com https://*.google-analytics.com https://*.google.com https://*.google.pl https://unpkg.com https://api.mapbox.com https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net https://stats.g.doubleclick.net https://*.soteshop.com *.gstatic.com *.googleapis.com *.youtube.com *.vimeo.com *.ytimg.com *.soundcloud.com *.vimeocdn.com *.smartsupp.com *.smartsuppcdn.com wss://*.smartsupp.com *.cdn77.org smartsupp-widget-161959.c.cdn77.org *.smartlook.com *.smartlook.cloud *.smartsuppchat.com *.addthis.com *.addthisedge.com *.facebook.com *.facebook.net *.fbcdn.net *.instagram.com *.cdninstagram.com *.googletagmanager.com *.google-analytics.com *.paypalobjects.com *.paypal.com *.autopay.eu https://*.cashbill.pl https://*.ceneo.pl https://*.secure.eservice.com.pl *.credit-agricole.pl *.paybynet.com.pl *.polcard.com.pl *.przelewy24.pl *.eraty.pl static.hotjar.com https://disqus.com https://widgets.trustedshops.com http://widgets.trustedshops.com https://integrations.etrusted.com http://integrations.etrusted.com https://api.trustedshops.com https://*.trustedshops.com data:; form-action 'self'  https://facebook.com https://mapa.ecommerce.poczta-polska.pl https://www.paypal.com https://www.paypalobjects.com https://*.easypack24.net https://*.openstreetmap.org https://*.inpost.pl https://*.allegrostatic.com https://allegro.pl https://*.allegro.pl https://*.allegroimg.com https://*.allegrosandbox.pl https://*.sote.pl https://*.googletagmanager.com https://*.facebook.net https://*.facebook.com https://*.google-analytics.com https://*.google.com https://*.google.pl https://unpkg.com https://api.mapbox.com https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net https://stats.g.doubleclick.net https://*.soteshop.com *.gstatic.com *.googleapis.com *.youtube.com *.vimeo.com *.ytimg.com *.soundcloud.com *.vimeocdn.com *.smartsupp.com *.smartsuppcdn.com wss://*.smartsupp.com *.cdn77.org smartsupp-widget-161959.c.cdn77.org *.smartlook.com *.smartlook.cloud *.smartsuppchat.com *.addthis.com *.addthisedge.com *.facebook.com *.facebook.net *.fbcdn.net *.instagram.com *.cdninstagram.com *.googletagmanager.com *.google-analytics.com *.paypalobjects.com *.paypal.com *.autopay.eu https://*.cashbill.pl https://*.ceneo.pl https://*.secure.eservice.com.pl *.credit-agricole.pl *.paybynet.com.pl *.polcard.com.pl *.przelewy24.pl *.eraty.pl static.hotjar.com https://disqus.com https://widgets.trustedshops.com http://widgets.trustedshops.com https://integrations.etrusted.com http://integrations.etrusted.com https://api.trustedshops.com https://*.trustedshops.com; frame-ancestors 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex,nofollow\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I91aBS8cc3I4uYHGewcqtg%2FYQQKIRWjKmC0lvvGGeo4BTyaEeT3zQl4Qo7Hqqv%2BaylYGNU5oaWIHzD%2FbrImk9mb4nZwuYqNJ5fNekF9Oo%2Bb40UTtigAF603H0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":[{"name":"soteshop","value":"db0fa6e3faa02685210242ea83311056","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"soteshop=db0fa6e3faa02685210242ea83311056; path=/; secure; HttpOnly"},{"name":"utl_0ab720d22903e8bab00e975191a822a14b9995b58e536fbaa0bfdd18f5fbf1bb","value":"true","quoted":false,"path":"/","expires":"2026-10-10T19:21:17Z","raw_expires":"Sat, 10 Oct 2026 19:21:17 GMT","max_age":2592000,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"utl_0ab720d22903e8bab00e975191a822a14b9995b58e536fbaa0bfdd18f5fbf1bb=true; expires=Sat, 10 Oct 2026 19:21:17 GMT; Max-Age=2592000; path=/; secure"},{"name":"utd_018efd0b9827d2d3f0137e47d776cd3d99eb1ffb3e222619aa84b0430467c2d0","value":"749cac0d5aacb51f14e9467b941c2bb22a688c5994b48838b01949c666f6f16debba450873ee992cffe85e4674b6d9d1b8bdfffca15f3248b02c631cf9d2af4c807645c505941cdef50a006d16abb286456b840c11a7a86ec05a952b056f60b4d92f984845dffe2feeb00e1e64d65bf431e4b957964c3e06000b7030ce67c64836fc8130044e2a89c117fe0bbd8beaf5dcc15ffb7cab87eb1dc269c343a1b256b15142f82949a0017465543417c279dbf0762437ce8a4c77df24a04ac991f7dc743ca49db02e3406f101ee07c08572b62309719027c5230f5ba020ad667220f240974f066d1d7126d1aecf8f9098606a71d4e9267ed1b5a2d6914cc48de62ebdae8a048ea54832cd4dc1501c43a606e337cea6cc11dfdd635b3182198f7beac0cccced44b1465699116953e0fb28513d3363c31a34919e5a0f764d868e6f6db6cb3835b9d8efb49b271fbd6905a13f34","quoted":false,"path":"/","expires":"2026-10-10T19:21:17Z","raw_expires":"Sat, 10 Oct 2026 19:21:17 GMT","max_age":2592000,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"utd_018efd0b9827d2d3f0137e47d776cd3d99eb1ffb3e222619aa84b0430467c2d0=749cac0d5aacb51f14e9467b941c2bb22a688c5994b48838b01949c666f6f16debba450873ee992cffe85e4674b6d9d1b8bdfffca15f3248b02c631cf9d2af4c807645c505941cdef50a006d16abb286456b840c11a7a86ec05a952b056f60b4d92f984845dffe2feeb00e1e64d65bf431e4b957964c3e06000b7030ce67c64836fc8130044e2a89c117fe0bbd8beaf5dcc15ffb7cab87eb1dc269c343a1b256b15142f82949a0017465543417c279dbf0762437ce8a4c77df24a04ac991f7dc743ca49db02e3406f101ee07c08572b62309719027c5230f5ba020ad667220f240974f066d1d7126d1aecf8f9098606a71d4e9267ed1b5a2d6914cc48de62ebdae8a048ea54832cd4dc1501c43a606e337cea6cc11dfdd635b3182198f7beac0cccced44b1465699116953e0fb28513d3363c31a34919e5a0f764d868e6f6db6cb3835b9d8efb49b271fbd6905a13f34; expires=Sat, 10 Oct 2026 19:21:17 GMT; Max-Age=2592000; path=/; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"SoteShop","description":"SoteShop is an e-shop management software.","website":"https://www.soteshop.com/","common_platform_enumeration":"","icon":"SoteShop.svg","categories":["Ecommerce"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":6443,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-FV9C87VRFB\u0026cx=c\u0026gtm=4e6990","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:17.587Z","timestamp":1789068077587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-FV9C87VRFB\u0026cx=c\u0026gtm=4e6990 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\nexpires: Thu, 10 Sep 2026 19:21:17 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 178058\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":535136,"size_decoded":178642,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7830)","md5":"b807e46c78057d23a1f0a30006312487","sha1":"11121e565b458c659197c53185fb8a9df526b416","sha256":"a8e6eae584f38c9c6daa3b15a2d87adba8369a5541a1d528194f0d291f9cc737","sha512":"7da89b198247bcb8e64c3e2393ee05692e97f8ec1058d355430cd445c933fb8d1ae67871f213bb9229ba9c48fc40838431183dbb60a7e840e5aeede33ab1080e","ssdeep":"6144:wRM1yDY6PQEv0Vgmqc+vcZBDcDaOhEaM36dGZBlT+QhoiDaP:AUuQhVghEnZrPhY","tlshash":"4db41ace73c674229396f578803f01cb657b29a2b49cc896f18adce02d3459a9167f7c","first_seen":"2026-09-10T19:21:57.135633Z","last_seen":"2026-09-10T19:21:57.135633Z","times_seen":1,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/images/frontend/theme/watch/social/facebook.png?v=1.2","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.790Z","timestamp":1789068076790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /images/frontend/theme/watch/social/facebook.png?v=1.2 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a390cb77f8d85b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Thu, 10 Sep 2026 19:21:16 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zBOkBIBY8U6DG0t9vJ9Tv7LwG4NSJPKLqJnPxK1YCw5FNhqPsue7wNmS8RtVPI54TJtWw0erQadVIY6LxskkyeUeA7Gmn3bp7xGQNbbSftFY5agjrE6AuBXY2g%3D%3D\"}]}\r\ncontent-length: 408\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":408,"size_decoded":1244,"mime_type":"image/png","magic":"PNG image data, 74 x 74, 8-bit/color RGBA, non-interlaced","md5":"7aba9fa9578dd961f032df47d8b5a11b","sha1":"1c260f3be2a13959cf5bac8652779f3ff1b07c87","sha256":"af0bc460067ef254fd5cfed2e254ebe8697d2452d6eb583a27d3f693f7186558","sha512":"fc8fb1a43eb6a573d6a0df2b89e65fc5e63013485e25cba38df115613dc7706b70fb9e332a8d44606e70bf772028f481c4954b9be5c7b4671a1b4634cb1052c4","ssdeep":"","tlshash":"61e0f1a6aa8958f2e73e8a7921732204643b84eb008b101ccb0f0594c9b5c03c0442c1","first_seen":"2026-09-10T19:21:57.067731Z","last_seen":"2026-10-06T05:40:48.83359Z","times_seen":2,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/categories/thumbnail/thumb_33.jpg?lm=1753815550","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.797Z","timestamp":1789068076797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/categories/thumbnail/thumb_33.jpg?lm=1753815550 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7808dd5b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Thu, 10 Sep 2026 19:21:16 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RuFlzdygl5CCbPjlHTXjhnXoBDkVbkC1FmhLXVEpRBPo1Ah3Ks%2BtZ%2B%2FrT7WrXyXeMT6O%2FZ2ODkzVJwpp71VPNIts5kO2e7coxCTSr0iGvs0WDjpqORVTGULz4g%3D%3D\"}]}\r\ncontent-length: 58092\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58092,"size_decoded":58939,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS M50, xresolution=130, yresolution=138, resolutionunit=2, software=Adobe Lightroom 8.4 (Macintosh), datetime=2025:07:23 13:04:03], baseline, precision 8, 450x405, components 3","md5":"1cfe1b55fa874d8d80ffd67387a8b01a","sha1":"022049716a7b2a3c2edbb62b10bbc44527fbfa7d","sha256":"e8d947ded6415e093eeb517aba440581b7eba43233dc5798ad7e5eb9154a31ca","sha512":"84017125e3b069c640059e9a322f2340f65d841fbff324e146426bf0968a5ad4bbd0525dd08ab7bc5e3167dc9d08c9de1c8965c9af291cad5b594e3070fca7dd","ssdeep":"768:RRFXEIFDRFXEIFfYyG9DEoif6nky1MuGF70Yy1dpmsJ0j9h:RRFXEsDRFXEsfSzjbGFoxxGjD","tlshash":"aa436b28fc785ee1d09cad3f859766c1aa631257dc82080f75ec9644efa39e20c5b5b3","first_seen":"2026-09-10T19:21:57.138416Z","last_seen":"2026-09-10T19:21:57.138416Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/products/e84105a68e5ab4167ec42d75317b9a73/images/thumbnail/small_gl.JPG?lm=1780654438","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.812Z","timestamp":1789068076812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/products/e84105a68e5ab4167ec42d75317b9a73/images/thumbnail/small_gl.JPG?lm=1780654438 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:16 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7828f35b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\netag: \"8d0c-6a22a166-e02f1cf651c942c9;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Fri, 05 Jun 2026 10:13:58 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dXll7XkzomY7KsnuGVCZ3%2FAXkc8NIlvL8ZsmTpjIy4dxpWE6U1puF2LQJFrsOtjPgEqM61Ft6yfYziiSyKc4Rg68ND1oyWluE57iktBhq33YeySYmOJwdK23SA%3D%3D\"}]}\r\ncontent-length: 57735\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":57735,"size_decoded":58533,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jehn.mom/media/products/d71c8bdb37936ebbb81d0c399c2ec9fe/images/thumbnail/small_IMG-9656.JPG?lm=1765308982","fqdn":"jehn.mom","domain":"jehn.mom","tld":"mom"},"ip":{"addr":"172.67.203.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jehn.mom/","date":"2026-09-10T19:21:16.813Z","timestamp":1789068076813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jehn.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 17:28:36 GMT","end":"Wed, 09 Dec 2026 18:28:21 GMT"},"fingerprint":{"sha1":"75:6A:69:42:DD:FE:B9:52:C2:90:A5:8C:FB:CE:58:6B:B7:63:D1:F0","sha256":"E9:B7:06:1A:23:47:36:07:68:D3:5D:CC:75:EF:F3:F3:DE:0E:33:AD:1F:E2:95:90:3B:28:22:44:C7:05:F6:1D"}}},"request":{"raw":"GET /media/products/d71c8bdb37936ebbb81d0c399c2ec9fe/images/thumbnail/small_IMG-9656.JPG?lm=1765308982 HTTP/1.1\r\nHost: jehn.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jehn.mom/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 10 Sep 2026 19:21:17 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a390cb7828f65b0a-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\netag: \"9324-69387a36-80288bbee50f597;;;\"\r\nexpires: Thu, 17 Sep 2026 19:21:16 GMT\r\nlast-modified: Tue, 09 Dec 2025 19:36:22 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K1dsDwlSxtk0t1jvmmDyewY%2FgEb5wHM9bunJx5M7DBxIwfuioHveGu29%2BkBQRYAy4sIavpIGwFQLRqDbFHcljWU37%2Bpv1hyxfjqKbPj5LnJSSh8kXdYik36xOA%3D%3D\"}]}\r\ncontent-length: 61150\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":61150,"size_decoded":61951,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"jehn.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}