{"report_id":"95d33aee-2dda-422f-9122-3c1e30924a16","version":0,"status":"done","tags":[],"date":"2026-10-10T21:59:36Z","url":{"schema":"http","addr":"getsoft.site/","fqdn":"getsoft.site","domain":"getsoft.site","tld":"site"},"ip":{"addr":"195.78.66.4","port":0,"asn":41079,"as":"Cyber_Folks S.A.","country":"Poland","country_code":"PL"},"final":{"url":{"schema":"https","addr":"getsoft.site/","fqdn":"getsoft.site","domain":"getsoft.site","tld":"site"},"title":"getsoft.site","dom":{"size":14443,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2216)","md5":"62eda135e6ad51268b6633c05b77d6bd","sha1":"644315c6477c098e703d6d8c703035fa6f274a60","sha256":"aa4786cab17a4a70f2632aba0e064c416ddb2d0718b1cd70f0a5b918f5f40442","sha512":"92cf0673787d53adbc1712a85b3ca9fda1cde6a2642891d7619124f8a933b9a165c772948709839737ad1824dce70b67cd20adab56e95f9152ea4bdc8d815672","ssdeep":"192:y+xe1R76V0XalvuvzcSzpE8n6sze1a18MyGiQJt2rPTI3WNKpYWUrvdeciPJeXYc:ULdXMhp26voMbziRE9cCp7","tlshash":"a65294af5ae3a0545d43a8bdebb32654a66cc057c08dca68be9c524cdfc06c1d9d338c","dom_hash":"domhash87d9ef1e5d269135b10b3efb7f3aaf1c","first_seen":"2026-10-10T21:59:39.284487Z","last_seen":"2026-10-10T21:59:39.284487Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"getsoft.site/","fqdn":"getsoft.site","domain":"getsoft.site","tld":"site"},"ip":{"addr":"195.78.66.4","port":0,"asn":41079,"as":"Cyber_Folks S.A.","country":"Poland","country_code":"PL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-14T21:59:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"getsoft.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-10","alert":"Phishing Block","trigger":"getsoft.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"getsoft.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cyberfolks.pl","ip":{"addr":"193.218.154.51","port":443,"asn":41079,"as":"Cyber_Folks S.A.","country":"Poland","country_code":"PL"},"domain_registered":"2019-03-25","domain_rank":16266,"first_seen":"2020-03-17T09:14:15Z","last_seen":"2026-10-03T07:57:28.852875Z","alert_count":0,"request_count":6,"received_data":381365,"sent_data":3526,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"getsoft.site","ip":{"addr":"195.78.66.4","port":443,"asn":41079,"as":"Cyber_Folks S.A.","country":"Poland","country_code":"PL"},"domain_registered":"2023-10-10","domain_rank":0,"first_seen":"2023-10-10T05:32:40Z","last_seen":"2025-08-11T12:04:36.639028Z","alert_count":6,"request_count":2,"received_data":25660,"sent_data":981,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cyberfolks.pl/wp-content/uploads/2019/12/pexels-photo-3417667-844x580.jpeg","fqdn":"cyberfolks.pl","domain":"cyberfolks.pl","tld":"pl"},"ip":{"addr":"193.218.154.51","port":443,"asn":41079,"as":"Cyber_Folks S.A.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getsoft.site/","date":"2026-10-10T21:59:07.115Z","timestamp":1791669547115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyberfolks.pl","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 19 Jan 2026 00:00:00 GMT","end":"Tue, 19 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BD:4E:F8:86:F8:02:E1:E5:5E:89:C3:D6:F4:F7:6A:69:62:0A:82:02","sha256":"19:B5:E9:F4:20:EA:AB:01:3D:9E:EC:DD:0F:E9:6E:A4:E6:04:86:CA:68:D6:3D:D7:C7:AA:01:65:4D:84:8F:6F"}}},"request":{"raw":"GET /wp-content/uploads/2019/12/pexels-photo-3417667-844x580.jpeg HTTP/1.1\r\nHost: cyberfolks.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://getsoft.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 09 Nov 2026 21:59:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 13 Mar 2024 12:02:38 GMT\r\netag: \"10e18-65f195de-428dc9b9edefd028;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 69144\r\ndate: Sat, 10 Oct 2026 21:59:07 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: accelerometer=*, autoplay=(*), camera=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), fullscreen=(self), geolocation=(), gyroscope=*, magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(*), publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=(self), usb=(), xr-spatial-tracking=()\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: default-src 'self';         script-src             'self'             'unsafe-inline'             https://robofolks.cyberfolks.pl             https://api-chat.cyberfolks.pl \t    https://bzrcdn.openai.com             https://www.google.com             https://www.gstatic.com             https://www.google-analytics.com             https://www.googletagmanager.com             https://www.googleoptimize.com             https://dev.visualwebsiteoptimizer.com             https://cyberfolks.user.com             https://widget.user.com             https://bat.bing.com             https://bat.bing.net             https://cdn.mouseflow.com             https://analytics.tiktok.com             https://business.tiktok.com             https://googleads.g.doubleclick.net             https://connect.facebook.net             https://scripts.clarity.ms             https://apps.mypurecloud.ie             https://www.youtube.com             https://cdnjs.cloudflare.com             https://cdn-widget.callpage.io             https://www.googleadservices.com             https://www.googletagservices.com \t    https://app.vwo.com             https://www.clarity.ms ;         style-src             'self'             'unsafe-inline'             https://fonts.googleapis.com;         worker-src 'self' blob:;         img-src 'self' data: https:;         font-src             'self'             https://fonts.googleapis.com             https://fonts.gstatic.com             https://cdn.mouseflow.com             https://static2.sharepointonline.com \t    https://www.googletagmanager.com             data:;         connect-src             'self'             https://robofolks.cyberfolks.pl             https://api-chat.cyberfolks.pl             https://api-cdn.mypurecloud.ie             https://api.mypurecloud.ie \t    https://bzr.openai.com \t    https://bzrcdn.openai.com             wss://webmessaging.mypurecloud.ie             https://fileupload.mypurecloud.ie             https://apps.mypurecloud.ie             https://dev.visualwebsiteoptimizer.com             https://www.google.com             https://www.google.pl             https://region1.analytics.google.com             https://region2.analytics.google.com             https://www.googleadservices.com             https://googleads.g.doubleclick.net             https://stats.g.doubleclick.net             https://eu01.rec.mouseflow.com             https://cyberfolks.user.com             wss://cyberfolks.user.com             https://ads.tiktok.com             https://analytics.tiktok.com             https://analytics-ipv6.tiktokw.us             https://business.tiktok.com             https://cdnjs.cloudflare.com \t    https://*.clarity.ms \t    https://ad.doubleclick.net             https://www.facebook.com             https://www.youtube.com             https://www.clarity.ms \t    https://report.clarity.ms             https://www.googletagservices.com \t    https://pagead2.googlesyndication.com             https://bat.bing.com             https://bat.bing.net;         frame-src             'self'             https://cyberfolks.fireprobe.net             https://apps.mypurecloud.ie             https://www.google.com             https://www.facebook.com             https://www.youtube.com             https://bid.g.doubleclick.net \t    https://cyberfolks.user.com             https://www.googletagmanager.com;         frame-ancestors             'self'             https://www.google.com;         object-src 'none';         base-uri 'self';\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":69144,"size_decoded":73615,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 844x580, components 3","md5":"08a11ea15eeab2a7e423da6861e3d320","sha1":"4106f821083bfe85e9b2f730e24c52ed2b04bcfe","sha256":"a866ccfb36e1929a8bd257f1d5f3b31301e379efc5a98116697e5beea3457f1d","sha512":"ed4772b8ee52362c30e31a669a4136052d353d29e5102eccf606b3fbb6fc9605b5050785f3dceb48db1448d43b2321ead2e175dd1501120f706c2610f4d456fe","ssdeep":"1536:AMe+uceBbxve3LbkCDRFmpQ22nClD6FHL3IS7KqEp/9qr3K9hOeH:AN+mbxvILbkCmBcL47VFqrfeH","tlshash":"a86302606a24921ba7118ca5a2db45eccd8d8c635cc987f60de44b9d873978fb203c9f","first_seen":"2023-09-24T09:11:24Z","last_seen":"2026-10-10T21:59:39.289015Z","times_seen":50,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":20,"connect":41,"send":0,"wait":42,"receive":117,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getsoft.site/favicon.ico","fqdn":"getsoft.site","domain":"getsoft.site","tld":"site"},"ip":{"addr":"195.78.66.4","port":443,"asn":41079,"as":"Cyber_Folks S.A.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getsoft.site/","date":"2026-10-10T21:59:07.740Z","timestamp":1791669547740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.getsoft.site","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 02:39:32 GMT","end":"Fri, 18 Dec 2026 02:39:31 GMT"},"fingerprint":{"sha1":"16:67:5B:22:B4:10:E2:17:48:6C:9B:51:94:A2:61:2D:6D:69:68:6A","sha256":"23:10:1F:78:B8:7C:6F:48:F3:02:E2:AC:86:E7:96:69:C8:11:6C:7D:72:FD:BB:CF:B7:C5:1A:C2:7C:3A:A4:41"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: getsoft.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://getsoft.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html\r\nlast-modified: Fri, 31 May 2024 17:14:37 GMT\r\netag: \"2881-665a057d-31b1dc272e9ee7fc;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent,User-Agent\r\ncontent-length: 3431\r\ndate: Sat, 10 Oct 2026 21:59:07 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10369,"size_decoded":3785,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4856)","md5":"ae2bde1ce521bf64653d6724deb4b818","sha1":"d644ebe516fe9fa797eb8e8e25c33fcc5c780d6b","sha256":"1dc0e17a3b371e90a927b384d50dc084b57667ed625b6b24d2a0f4b86af334b2","sha512":"8e232b24852375236ed5802f0fd9220a5d5b9bbd0f9061b2978b72d14d9e929afcda5781d6aefc4e5e4258465532f6ad632ce371921aa0f9a91d0da1b4c25184","ssdeep":"192:6+xe1R76V0XalvCr2m+w84uSTG1zaeQzzo7iBzZ6uS4yawoQFDr:MLdXM6Z8tzyzo7iptHyaLYr","tlshash":"8122b5736e80a42ca49b8c3bf6636168a02cc417d9d6d3a4b87d8126dfd51c2d377b8d","first_seen":"2025-10-18T22:57:22.939864Z","last_seen":"2026-10-10T21:59:39.294887Z","times_seen":5,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"getsoft.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-10","alert":"Phishing Block","trigger":"getsoft.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"getsoft.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getsoft.site/","fqdn":"getsoft.site","domain":"getsoft.site","tld":"site"},"ip":{"addr":"195.78.66.4","port":443,"asn":41079,"as":"Cyber_Folks S.A.","country":"Poland","country_code":"PL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-10T21:59:06.422Z","timestamp":1791669546422,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.getsoft.site","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 02:39:32 GMT","end":"Fri, 18 Dec 2026 02:39:31 GMT"},"fingerprint":{"sha1":"16:67:5B:22:B4:10:E2:17:48:6C:9B:51:94:A2:61:2D:6D:69:68:6A","sha256":"23:10:1F:78:B8:7C:6F:48:F3:02:E2:AC:86:E7:96:69:C8:11:6C:7D:72:FD:BB:CF:B7:C5:1A:C2:7C:3A:A4:41"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: getsoft.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Fri, 18 Sep 2026 07:54:28 GMT\r\netag: \"38ee-6aacee34-ba59dd54b5fe5e5c;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3743\r\ndate: Sat, 10 Oct 2026 21:59:06 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14574,"size_decoded":4106,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2189)","md5":"45548139a8faa6a691b73fbf117fcb86","sha1":"a217e4594aa999631af5178e79b8ea55b3fc745e","sha256":"65026b4874a828a75ad77ea3a6df78eba4474927b4e39dfa94c7845b3e04e8b1","sha512":"d28e0f26a9646b545b9dd40d9aab9da72f03ac308468b8dfa42fe24c01068b024fb9c43c8a84757bed34d17ee22c4ef49cc74509aa80f8c51f4719f541862903","ssdeep":"192:Gixe1R76V0XalvDOzDbzSW8n6mzH1a1LMyG9QJG2rPTI3WNKpYWUrvdeciPJeXYc:SLdXMMeF6voMbziRE9cCp/","tlshash":"f76293af5ae3a0545d47a8bdebb32654a66cc057c08dca68be9c524cdfc06c1d9d338c","first_seen":"2026-10-10T21:59:39.299879Z","last_seen":"2026-10-10T21:59:39.299879Z","times_seen":1,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":63,"connect":33,"send":0,"wait":33,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-10","alert":"Phishing Block","trigger":"getsoft.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"getsoft.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"getsoft.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyberfolks.pl/wp-content/themes/cyberfolks/landingi/envelope.svg","fqdn":"cyberfolks.pl","domain":"cyberfolks.pl","tld":"pl"},"ip":{"addr":"193.218.154.51","port":443,"asn":41079,"as":"Cyber_Folks S.A.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getsoft.site/","date":"2026-10-10T21:59:07.105Z","timestamp":1791669547105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyberfolks.pl","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 19 Jan 2026 00:00:00 GMT","end":"Tue, 19 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BD:4E:F8:86:F8:02:E1:E5:5E:89:C3:D6:F4:F7:6A:69:62:0A:82:02","sha256":"19:B5:E9:F4:20:EA:AB:01:3D:9E:EC:DD:0F:E9:6E:A4:E6:04:86:CA:68:D6:3D:D7:C7:AA:01:65:4D:84:8F:6F"}}},"request":{"raw":"GET /wp-content/themes/cyberfolks/landingi/envelope.svg HTTP/1.1\r\nHost: cyberfolks.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://getsoft.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 09 Nov 2026 21:59:07 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 13 Mar 2024 12:02:32 GMT\r\netag: \"b43-65f195d8-6adfc0ecbca43e25;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1192\r\ndate: Sat, 10 Oct 2026 21:59:07 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: accelerometer=*, autoplay=(*), camera=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), fullscreen=(self), geolocation=(), gyroscope=*, magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(*), publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=(self), usb=(), xr-spatial-tracking=()\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: default-src 'self';         script-src             'self'             'unsafe-inline'             https://robofolks.cyberfolks.pl             https://api-chat.cyberfolks.pl \t    https://bzrcdn.openai.com             https://www.google.com             https://www.gstatic.com             https://www.google-analytics.com             https://www.googletagmanager.com             https://www.googleoptimize.com             https://dev.visualwebsiteoptimizer.com             https://cyberfolks.user.com             https://widget.user.com             https://bat.bing.com             https://bat.bing.net             https://cdn.mouseflow.com             https://analytics.tiktok.com             https://business.tiktok.com             https://googleads.g.doubleclick.net             https://connect.facebook.net             https://scripts.clarity.ms             https://apps.mypurecloud.ie             https://www.youtube.com             https://cdnjs.cloudflare.com             https://cdn-widget.callpage.io             https://www.googleadservices.com             https://www.googletagservices.com \t    https://app.vwo.com             https://www.clarity.ms ;         style-src             'self'             'unsafe-inline'             https://fonts.googleapis.com;         worker-src 'self' blob:;         img-src 'self' data: https:;         font-src             'self'             https://fonts.googleapis.com             https://fonts.gstatic.com             https://cdn.mouseflow.com             https://static2.sharepointonline.com \t    https://www.googletagmanager.com             data:;         connect-src             'self'             https://robofolks.cyberfolks.pl             https://api-chat.cyberfolks.pl             https://api-cdn.mypurecloud.ie             https://api.mypurecloud.ie \t    https://bzr.openai.com \t    https://bzrcdn.openai.com             wss://webmessaging.mypurecloud.ie             https://fileupload.mypurecloud.ie             https://apps.mypurecloud.ie             https://dev.visualwebsiteoptimizer.com             https://www.google.com             https://www.google.pl             https://region1.analytics.google.com             https://region2.analytics.google.com             https://www.googleadservices.com             https://googleads.g.doubleclick.net             https://stats.g.doubleclick.net             https://eu01.rec.mouseflow.com             https://cyberfolks.user.com             wss://cyberfolks.user.com             https://ads.tiktok.com             https://analytics.tiktok.com             https://analytics-ipv6.tiktokw.us             https://business.tiktok.com             https://cdnjs.cloudflare.com \t    https://*.clarity.ms \t    https://ad.doubleclick.net             https://www.facebook.com             https://www.youtube.com             https://www.clarity.ms \t    https://report.clarity.ms             https://www.googletagservices.com \t    https://pagead2.googlesyndication.com             https://bat.bing.com             https://bat.bing.net;         frame-src             'self'             https://cyberfolks.fireprobe.net             https://apps.mypurecloud.ie             https://www.google.com             https://www.facebook.com             https://www.youtube.com             https://bid.g.doubleclick.net \t    https://cyberfolks.user.com             https://www.googletagmanager.com;         frame-ancestors             'self'             https://www.google.com;         object-src 'none';         base-uri 'self';\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2883,"size_decoded":5714,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"005220a620eea4773a8d025711368ad8","sha1":"e268b4d17db85ca8bd547a1becfba44fa6a0ac38","sha256":"922f947d6d9a039b41da5ba39822e89e9c2f131b5016858babc9297e37b291fc","sha512":"c8b5fdaa23117f4c4ef38b2d9405df0512e89418e1c142082df0daa54cba10449e9803daeda4895ad13b3d0d803ad030673ac10723bd0d5132930d03966bfe55","ssdeep":"","tlshash":"6c5197a021a8f370e968972497fd4c9f995970c7be82018df6cc1425bf124f6028ba8a","first_seen":"2023-05-21T02:35:40Z","last_seen":"2026-10-10T21:59:39.304169Z","times_seen":50,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":29,"connect":40,"send":0,"wait":42,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyberfolks.pl/wp-content/themes/cyberfolks/landingi/livechat.svg","fqdn":"cyberfolks.pl","domain":"cyberfolks.pl","tld":"pl"},"ip":{"addr":"193.218.154.51","port":443,"asn":41079,"as":"Cyber_Folks S.A.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getsoft.site/","date":"2026-10-10T21:59:07.107Z","timestamp":1791669547107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyberfolks.pl","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 19 Jan 2026 00:00:00 GMT","end":"Tue, 19 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BD:4E:F8:86:F8:02:E1:E5:5E:89:C3:D6:F4:F7:6A:69:62:0A:82:02","sha256":"19:B5:E9:F4:20:EA:AB:01:3D:9E:EC:DD:0F:E9:6E:A4:E6:04:86:CA:68:D6:3D:D7:C7:AA:01:65:4D:84:8F:6F"}}},"request":{"raw":"GET /wp-content/themes/cyberfolks/landingi/livechat.svg HTTP/1.1\r\nHost: cyberfolks.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://getsoft.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 09 Nov 2026 21:59:07 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 13 Mar 2024 12:02:32 GMT\r\netag: \"f8b-65f195d8-93708d414b8843b4;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1453\r\ndate: Sat, 10 Oct 2026 21:59:07 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: accelerometer=*, autoplay=(*), camera=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), fullscreen=(self), geolocation=(), gyroscope=*, magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(*), publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=(self), usb=(), xr-spatial-tracking=()\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: default-src 'self';         script-src             'self'             'unsafe-inline'             https://robofolks.cyberfolks.pl             https://api-chat.cyberfolks.pl \t    https://bzrcdn.openai.com             https://www.google.com             https://www.gstatic.com             https://www.google-analytics.com             https://www.googletagmanager.com             https://www.googleoptimize.com             https://dev.visualwebsiteoptimizer.com             https://cyberfolks.user.com             https://widget.user.com             https://bat.bing.com             https://bat.bing.net             https://cdn.mouseflow.com             https://analytics.tiktok.com             https://business.tiktok.com             https://googleads.g.doubleclick.net             https://connect.facebook.net             https://scripts.clarity.ms             https://apps.mypurecloud.ie             https://www.youtube.com             https://cdnjs.cloudflare.com             https://cdn-widget.callpage.io             https://www.googleadservices.com             https://www.googletagservices.com \t    https://app.vwo.com             https://www.clarity.ms ;         style-src             'self'             'unsafe-inline'             https://fonts.googleapis.com;         worker-src 'self' blob:;         img-src 'self' data: https:;         font-src             'self'             https://fonts.googleapis.com             https://fonts.gstatic.com             https://cdn.mouseflow.com             https://static2.sharepointonline.com \t    https://www.googletagmanager.com             data:;         connect-src             'self'             https://robofolks.cyberfolks.pl             https://api-chat.cyberfolks.pl             https://api-cdn.mypurecloud.ie             https://api.mypurecloud.ie \t    https://bzr.openai.com \t    https://bzrcdn.openai.com             wss://webmessaging.mypurecloud.ie             https://fileupload.mypurecloud.ie             https://apps.mypurecloud.ie             https://dev.visualwebsiteoptimizer.com             https://www.google.com             https://www.google.pl             https://region1.analytics.google.com             https://region2.analytics.google.com             https://www.googleadservices.com             https://googleads.g.doubleclick.net             https://stats.g.doubleclick.net             https://eu01.rec.mouseflow.com             https://cyberfolks.user.com             wss://cyberfolks.user.com             https://ads.tiktok.com             https://analytics.tiktok.com             https://analytics-ipv6.tiktokw.us             https://business.tiktok.com             https://cdnjs.cloudflare.com \t    https://*.clarity.ms \t    https://ad.doubleclick.net             https://www.facebook.com             https://www.youtube.com             https://www.clarity.ms \t    https://report.clarity.ms             https://www.googletagservices.com \t    https://pagead2.googlesyndication.com             https://bat.bing.com             https://bat.bing.net;         frame-src             'self'             https://cyberfolks.fireprobe.net             https://apps.mypurecloud.ie             https://www.google.com             https://www.facebook.com             https://www.youtube.com             https://bid.g.doubleclick.net \t    https://cyberfolks.user.com             https://www.googletagmanager.com;         frame-ancestors             'self'             https://www.google.com;         object-src 'none';         base-uri 'self';\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3979,"size_decoded":5897,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"60f51f66a476d763ae65b53a873fce70","sha1":"9b037be675d664735bf68cbc479ce82cb29f095c","sha256":"7ea9be92078ed21e35e0b3d5a79d67a6360845836d211949057f8959e69c3533","sha512":"fac8d69c6e33f901345a065982f931f3d4eacaa5002888721d75ada9a8cdb5f13dde69e0d20597ab5ac0a70edd0a07877eb1c3bd475eba4237341c5b6798a5f3","ssdeep":"","tlshash":"1b81d6ebc520d780f7a4a378a6743169b85931eb3bd5684ef1dc2c146b120bf45839ab","first_seen":"2023-05-21T02:35:40Z","last_seen":"2026-10-10T21:59:39.307035Z","times_seen":44,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":27,"connect":41,"send":0,"wait":76,"receive":1,"ssl":351},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyberfolks.pl/wp-content/themes/cyberfolks/landingi/image-landing-2.png","fqdn":"cyberfolks.pl","domain":"cyberfolks.pl","tld":"pl"},"ip":{"addr":"193.218.154.51","port":443,"asn":41079,"as":"Cyber_Folks S.A.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getsoft.site/","date":"2026-10-10T21:59:07.109Z","timestamp":1791669547109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyberfolks.pl","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 19 Jan 2026 00:00:00 GMT","end":"Tue, 19 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BD:4E:F8:86:F8:02:E1:E5:5E:89:C3:D6:F4:F7:6A:69:62:0A:82:02","sha256":"19:B5:E9:F4:20:EA:AB:01:3D:9E:EC:DD:0F:E9:6E:A4:E6:04:86:CA:68:D6:3D:D7:C7:AA:01:65:4D:84:8F:6F"}}},"request":{"raw":"GET /wp-content/themes/cyberfolks/landingi/image-landing-2.png HTTP/1.1\r\nHost: cyberfolks.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://getsoft.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 09 Nov 2026 21:59:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Mar 2024 12:02:32 GMT\r\netag: \"277ce-65f195d8-652531ce47299788;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 161742\r\ndate: Sat, 10 Oct 2026 21:59:07 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: accelerometer=*, autoplay=(*), camera=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), fullscreen=(self), geolocation=(), gyroscope=*, magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(*), publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=(self), usb=(), xr-spatial-tracking=()\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: default-src 'self';         script-src             'self'             'unsafe-inline'             https://robofolks.cyberfolks.pl             https://api-chat.cyberfolks.pl \t    https://bzrcdn.openai.com             https://www.google.com             https://www.gstatic.com             https://www.google-analytics.com             https://www.googletagmanager.com             https://www.googleoptimize.com             https://dev.visualwebsiteoptimizer.com             https://cyberfolks.user.com             https://widget.user.com             https://bat.bing.com             https://bat.bing.net             https://cdn.mouseflow.com             https://analytics.tiktok.com             https://business.tiktok.com             https://googleads.g.doubleclick.net             https://connect.facebook.net             https://scripts.clarity.ms             https://apps.mypurecloud.ie             https://www.youtube.com             https://cdnjs.cloudflare.com             https://cdn-widget.callpage.io             https://www.googleadservices.com             https://www.googletagservices.com \t    https://app.vwo.com             https://www.clarity.ms ;         style-src             'self'             'unsafe-inline'             https://fonts.googleapis.com;         worker-src 'self' blob:;         img-src 'self' data: https:;         font-src             'self'             https://fonts.googleapis.com             https://fonts.gstatic.com             https://cdn.mouseflow.com             https://static2.sharepointonline.com \t    https://www.googletagmanager.com             data:;         connect-src             'self'             https://robofolks.cyberfolks.pl             https://api-chat.cyberfolks.pl             https://api-cdn.mypurecloud.ie             https://api.mypurecloud.ie \t    https://bzr.openai.com \t    https://bzrcdn.openai.com             wss://webmessaging.mypurecloud.ie             https://fileupload.mypurecloud.ie             https://apps.mypurecloud.ie             https://dev.visualwebsiteoptimizer.com             https://www.google.com             https://www.google.pl             https://region1.analytics.google.com             https://region2.analytics.google.com             https://www.googleadservices.com             https://googleads.g.doubleclick.net             https://stats.g.doubleclick.net             https://eu01.rec.mouseflow.com             https://cyberfolks.user.com             wss://cyberfolks.user.com             https://ads.tiktok.com             https://analytics.tiktok.com             https://analytics-ipv6.tiktokw.us             https://business.tiktok.com             https://cdnjs.cloudflare.com \t    https://*.clarity.ms \t    https://ad.doubleclick.net             https://www.facebook.com             https://www.youtube.com             https://www.clarity.ms \t    https://report.clarity.ms             https://www.googletagservices.com \t    https://pagead2.googlesyndication.com             https://bat.bing.com             https://bat.bing.net;         frame-src             'self'             https://cyberfolks.fireprobe.net             https://apps.mypurecloud.ie             https://www.google.com             https://www.facebook.com             https://www.youtube.com             https://bid.g.doubleclick.net \t    https://cyberfolks.user.com             https://www.googletagmanager.com;         frame-ancestors             'self'             https://www.google.com;         object-src 'none';         base-uri 'self';\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":161742,"size_decoded":166155,"mime_type":"image/png","magic":"PNG image data, 1054 x 876, 8-bit/color RGBA, interlaced","md5":"c333aeb548db178476697adf517657d3","sha1":"0fc09ec15bb836e0e0cd2cc3ac9772a45f752358","sha256":"efd2872bafd06d909f82f76d9a415c778c491b065be1cd34c4c625813710c883","sha512":"813c9ec87edd04841b38a3a80b5fb11e3db08ced1ddf5b82910440d46a1c2c646c6553c719fcd1d0f9a40d85d658e6bfb699787045ac3b54c72adfcf1935feab","ssdeep":"3072:IwS9gmtDGHiaA94hG6zInhS3uUrCRrunlHQ6rsNXjccbI:IZxhwi54AgIY3rCRCdrMXA+I","tlshash":"b3f3127bb750a97153e1ee0943e60d584a0db93ffcbe123b631a4b0626e63dcb58018c","first_seen":"2023-06-22T09:31:29Z","last_seen":"2026-10-10T21:59:39.309984Z","times_seen":37,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":-1,"dns":26,"connect":41,"send":0,"wait":95,"receive":119,"ssl":340},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyberfolks.pl/wp-content/uploads/2019/03/photo-of-yellow-boots-near-flowers-712883_wynik-844x580.jpg","fqdn":"cyberfolks.pl","domain":"cyberfolks.pl","tld":"pl"},"ip":{"addr":"193.218.154.51","port":443,"asn":41079,"as":"Cyber_Folks S.A.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getsoft.site/","date":"2026-10-10T21:59:07.112Z","timestamp":1791669547112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyberfolks.pl","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 19 Jan 2026 00:00:00 GMT","end":"Tue, 19 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BD:4E:F8:86:F8:02:E1:E5:5E:89:C3:D6:F4:F7:6A:69:62:0A:82:02","sha256":"19:B5:E9:F4:20:EA:AB:01:3D:9E:EC:DD:0F:E9:6E:A4:E6:04:86:CA:68:D6:3D:D7:C7:AA:01:65:4D:84:8F:6F"}}},"request":{"raw":"GET /wp-content/uploads/2019/03/photo-of-yellow-boots-near-flowers-712883_wynik-844x580.jpg HTTP/1.1\r\nHost: cyberfolks.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://getsoft.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 09 Nov 2026 21:59:07 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 13 Mar 2024 12:02:36 GMT\r\netag: \"10f96-65f195dc-98b05590d0b2f3a7;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 69526\r\ndate: Sat, 10 Oct 2026 21:59:07 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: accelerometer=*, autoplay=(*), camera=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), fullscreen=(self), geolocation=(), gyroscope=*, magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(*), publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=(self), usb=(), xr-spatial-tracking=()\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: default-src 'self';         script-src             'self'             'unsafe-inline'             https://robofolks.cyberfolks.pl             https://api-chat.cyberfolks.pl \t    https://bzrcdn.openai.com             https://www.google.com             https://www.gstatic.com             https://www.google-analytics.com             https://www.googletagmanager.com             https://www.googleoptimize.com             https://dev.visualwebsiteoptimizer.com             https://cyberfolks.user.com             https://widget.user.com             https://bat.bing.com             https://bat.bing.net             https://cdn.mouseflow.com             https://analytics.tiktok.com             https://business.tiktok.com             https://googleads.g.doubleclick.net             https://connect.facebook.net             https://scripts.clarity.ms             https://apps.mypurecloud.ie             https://www.youtube.com             https://cdnjs.cloudflare.com             https://cdn-widget.callpage.io             https://www.googleadservices.com             https://www.googletagservices.com \t    https://app.vwo.com             https://www.clarity.ms ;         style-src             'self'             'unsafe-inline'             https://fonts.googleapis.com;         worker-src 'self' blob:;         img-src 'self' data: https:;         font-src             'self'             https://fonts.googleapis.com             https://fonts.gstatic.com             https://cdn.mouseflow.com             https://static2.sharepointonline.com \t    https://www.googletagmanager.com             data:;         connect-src             'self'             https://robofolks.cyberfolks.pl             https://api-chat.cyberfolks.pl             https://api-cdn.mypurecloud.ie             https://api.mypurecloud.ie \t    https://bzr.openai.com \t    https://bzrcdn.openai.com             wss://webmessaging.mypurecloud.ie             https://fileupload.mypurecloud.ie             https://apps.mypurecloud.ie             https://dev.visualwebsiteoptimizer.com             https://www.google.com             https://www.google.pl             https://region1.analytics.google.com             https://region2.analytics.google.com             https://www.googleadservices.com             https://googleads.g.doubleclick.net             https://stats.g.doubleclick.net             https://eu01.rec.mouseflow.com             https://cyberfolks.user.com             wss://cyberfolks.user.com             https://ads.tiktok.com             https://analytics.tiktok.com             https://analytics-ipv6.tiktokw.us             https://business.tiktok.com             https://cdnjs.cloudflare.com \t    https://*.clarity.ms \t    https://ad.doubleclick.net             https://www.facebook.com             https://www.youtube.com             https://www.clarity.ms \t    https://report.clarity.ms             https://www.googletagservices.com \t    https://pagead2.googlesyndication.com             https://bat.bing.com             https://bat.bing.net;         frame-src             'self'             https://cyberfolks.fireprobe.net             https://apps.mypurecloud.ie             https://www.google.com             https://www.facebook.com             https://www.youtube.com             https://bid.g.doubleclick.net \t    https://cyberfolks.user.com             https://www.googletagmanager.com;         frame-ancestors             'self'             https://www.google.com;         object-src 'none';         base-uri 'self';\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69526,"size_decoded":73939,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 844x580, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b4c6b3628c38d7ce8ef34096e3fbd82d","sha1":"0e3ae528f10ee5870f332e8dd68619b9576e16d8","sha256":"43df2312c52455aa9a57331ffae75c0cd24cb6b01ce6fec9ffc355164f2e92ca","sha512":"c178808c0b0e97608ff3fa97336e5ae2476539a3dfc15cd3ecfc9dfe9233c4bf8c22add017f0bdfa88515a8ea1afecbe59d25254bca4b74fdd302f0808d11c60","ssdeep":"1536:LOxKU7iYZdbATeDuBbQOBTAsP58ppgEL1NsCxy1Xje2bCXeLdBvjjBtGmvM/:qKU73baeDx4ADNL1862bCubWmvM/","tlshash":"b26302103f12f6b39250802993a56d29c0b02301653e792edfdc6c9aed5fead5017a3b","first_seen":"2023-05-21T02:35:40Z","last_seen":"2026-10-10T21:59:39.312321Z","times_seen":50,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":22,"connect":41,"send":0,"wait":95,"receive":91,"ssl":345},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyberfolks.pl/wp-content/uploads/2019/05/adult-books-business-coffee-374016_wynik-844x580.jpg","fqdn":"cyberfolks.pl","domain":"cyberfolks.pl","tld":"pl"},"ip":{"addr":"193.218.154.51","port":443,"asn":41079,"as":"Cyber_Folks S.A.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getsoft.site/","date":"2026-10-10T21:59:07.113Z","timestamp":1791669547113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyberfolks.pl","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 19 Jan 2026 00:00:00 GMT","end":"Tue, 19 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BD:4E:F8:86:F8:02:E1:E5:5E:89:C3:D6:F4:F7:6A:69:62:0A:82:02","sha256":"19:B5:E9:F4:20:EA:AB:01:3D:9E:EC:DD:0F:E9:6E:A4:E6:04:86:CA:68:D6:3D:D7:C7:AA:01:65:4D:84:8F:6F"}}},"request":{"raw":"GET /wp-content/uploads/2019/05/adult-books-business-coffee-374016_wynik-844x580.jpg HTTP/1.1\r\nHost: cyberfolks.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://getsoft.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 09 Nov 2026 21:59:07 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 13 Mar 2024 12:02:36 GMT\r\netag: \"b938-65f195dc-22d0da81af1a63b7;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 47416\r\ndate: Sat, 10 Oct 2026 21:59:07 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: accelerometer=*, autoplay=(*), camera=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), fullscreen=(self), geolocation=(), gyroscope=*, magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(*), publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=(self), usb=(), xr-spatial-tracking=()\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: default-src 'self';         script-src             'self'             'unsafe-inline'             https://robofolks.cyberfolks.pl             https://api-chat.cyberfolks.pl \t    https://bzrcdn.openai.com             https://www.google.com             https://www.gstatic.com             https://www.google-analytics.com             https://www.googletagmanager.com             https://www.googleoptimize.com             https://dev.visualwebsiteoptimizer.com             https://cyberfolks.user.com             https://widget.user.com             https://bat.bing.com             https://bat.bing.net             https://cdn.mouseflow.com             https://analytics.tiktok.com             https://business.tiktok.com             https://googleads.g.doubleclick.net             https://connect.facebook.net             https://scripts.clarity.ms             https://apps.mypurecloud.ie             https://www.youtube.com             https://cdnjs.cloudflare.com             https://cdn-widget.callpage.io             https://www.googleadservices.com             https://www.googletagservices.com \t    https://app.vwo.com             https://www.clarity.ms ;         style-src             'self'             'unsafe-inline'             https://fonts.googleapis.com;         worker-src 'self' blob:;         img-src 'self' data: https:;         font-src             'self'             https://fonts.googleapis.com             https://fonts.gstatic.com             https://cdn.mouseflow.com             https://static2.sharepointonline.com \t    https://www.googletagmanager.com             data:;         connect-src             'self'             https://robofolks.cyberfolks.pl             https://api-chat.cyberfolks.pl             https://api-cdn.mypurecloud.ie             https://api.mypurecloud.ie \t    https://bzr.openai.com \t    https://bzrcdn.openai.com             wss://webmessaging.mypurecloud.ie             https://fileupload.mypurecloud.ie             https://apps.mypurecloud.ie             https://dev.visualwebsiteoptimizer.com             https://www.google.com             https://www.google.pl             https://region1.analytics.google.com             https://region2.analytics.google.com             https://www.googleadservices.com             https://googleads.g.doubleclick.net             https://stats.g.doubleclick.net             https://eu01.rec.mouseflow.com             https://cyberfolks.user.com             wss://cyberfolks.user.com             https://ads.tiktok.com             https://analytics.tiktok.com             https://analytics-ipv6.tiktokw.us             https://business.tiktok.com             https://cdnjs.cloudflare.com \t    https://*.clarity.ms \t    https://ad.doubleclick.net             https://www.facebook.com             https://www.youtube.com             https://www.clarity.ms \t    https://report.clarity.ms             https://www.googletagservices.com \t    https://pagead2.googlesyndication.com             https://bat.bing.com             https://bat.bing.net;         frame-src             'self'             https://cyberfolks.fireprobe.net             https://apps.mypurecloud.ie             https://www.google.com             https://www.facebook.com             https://www.youtube.com             https://bid.g.doubleclick.net \t    https://cyberfolks.user.com             https://www.googletagmanager.com;         frame-ancestors             'self'             https://www.google.com;         object-src 'none';         base-uri 'self';\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47416,"size_decoded":51828,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 844x580, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"200e651404823ed2484a100f46bce03e","sha1":"db5d8968561ebedacaaac7432c29fc062176ffed","sha256":"a24b06543c9e0f2c5fd0b1724f616923ec49d0c71e382ce8776ba871d0d257d2","sha512":"b385a9fa7a21116644b06385a207acf656dc917e6fbf35f73b11d3e683e6b7f405231ac7292b401c6de2cc2ac0fdaed6525e52d6cfdf5ecfa9746ac96b5698c0","ssdeep":"768:FvLaq+Vlp0YwSzHyeEoaFLnZBJEKb63JxEklJfS0SeVFWUF5hbkk0A:pafzqYinoaFTNEKmZ6k6EVUUFYA","tlshash":"5e2302c3756cf77d0782a801a42715a886bc1573649e0fb6f5703ef097a2ede423546a","first_seen":"2023-05-21T02:35:40Z","last_seen":"2026-10-10T21:59:39.316528Z","times_seen":51,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":21,"connect":41,"send":0,"wait":78,"receive":95,"ssl":350},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}