{"report_id":"b469078b-b3cb-4353-9d09-f675be9f2bbb","version":0,"status":"done","tags":[],"date":"2026-08-04T15:40:48Z","url":{"schema":"https","addr":"recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"172.67.163.251","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"title":"Congratulations! | MODX Revolution","dom":{"size":119248,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20908)","md5":"21b52658c24308a2389a4205cbc466b0","sha1":"948960681187a18c375256f41e9b3ba29be2894d","sha256":"dd319f32f9f2090b8cd42013746c250a31a4ded525b009d2f09547c6c634a828","sha512":"d19a02a11a4987943bcf0c0f7a9e8a5fa3a225a90149156f725dcb604b55ad37aba53c3f804db93ae42285b21e0082e29b47081ebee61ba7536905870571eb30","ssdeep":"1536:Gr2EYpuCZXfFvxeBLXP2eeeieeejeeedeee/uX5UpR4nXBKpSpFl26v+6/EJ0qeq:Gr2EYpuCtZgZeMUMOEJ0qIU","tlshash":"eec38d2341a925274437c2c134695b3be9e6d95bfea709003aec8bf66ffac50741b11d","dom_hash":"domhasha18b028d05ee653874ebc775c1cd87bd","first_seen":"2026-08-04T15:41:04.905968Z","last_seen":"2026-08-04T15:41:04.905968Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"172.67.163.251","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-08T15:40:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-02T22:23:34.841384Z","alert_count":0,"request_count":1,"received_data":15184,"sent_data":580,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-02T22:20:16.100749Z","alert_count":0,"request_count":6,"received_data":132222,"sent_data":3380,"comment":"","tags":null,"fingerprints":null},{"fqdn":"recovereverything.com","ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":60,"request_count":60,"received_data":22036274,"sent_data":51722,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"SyntaxHighlighter","description":"","website":"https://github.com/syntaxhighlighter","common_platform_enumeration":"","icon":"SyntaxHighlighter.png","categories":["Miscellaneous"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-02T23:01:36.865069Z","alert_count":0,"request_count":4,"received_data":344578,"sent_data":2220,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ipapi.co","ip":{"addr":"104.26.8.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-07-30T01:51:08.032267Z","alert_count":0,"request_count":2,"received_data":4998,"sent_data":935,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/shBrushPlain.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87fdca14e9886310a4e4b3ceb429c7f8","sha1":"8c41e3dc03b9a9d7d5cdeded987d7695974cd797","sha256":"4916a1324a99bcafb7b7e8b333d9b1fa37c427950bb0411d38baac12846c17ad","sha512":"24786892240f03f491225657b2d27a38811696f3bacfd4b57499022b0a5bab00f51a29aca343beae548036da50ea95356d9fe181e2f3328294e4dec1fb37e2a8","ssdeep":"","tlshash":"e6014c65de2830662b464db7919ad08f1f354be333c7c401514e58fe3a7156b028ef60","size":750,"data":"","first_seen":"2023-03-09T22:01:26Z","last_seen":"2026-08-04T15:41:04.909014Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/f1/static/js/translations.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e4b121253face2cefc6ab0e3a564e78","sha1":"c6f6137aa840eb5e41fdce0f794330a38eca7952","sha256":"e1c68aea17713ef5e2e4485928d662b22b825fba73a5301febfd57bc975d060f","sha512":"f39ad1efd57ad525c9cc0ea5a5b94a4bf1869d181dc2c782d19ab4804e676bd1776bae42b96bce80c178247c1f0eb4b9b558e79f563a034247710c90322c0028","ssdeep":"192:05GgBhsYV6X5SM7rKjj9CcTt8y0WKobaUOQtf8vddfS9tF+Y/r7st+Yyzo26rSdi:lQSnnKv9Cc2y0WKGaUOQtf811qIY/r7a","tlshash":"ae22306ca87907f30241905a50763520b26a9cef2d657c7933dc92683f8ec4f927da9f","size":10006,"data":"","first_seen":"2026-08-04T15:32:03.936413Z","last_seen":"2026-08-04T15:41:04.910778Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/f1/static/js/sendLeadX1.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3510e4ed6a202bec75046c2d1d603644","sha1":"bafd076f1da240bc3bdb044fb82c7d135a49f198","sha256":"0f69bc21cf1ab2c499ecf176392a41ae733693dfca3d83deddcaf86836e45ad4","sha512":"fcc7ba695629272cce53add9063d83b95adc59aa81006ef336a3a191e18cb3279809fe3bf7bc47f04aead93f9ea35436c746ee2325175e7eb1394a8bcbcc3cdb","ssdeep":"192:gPt1rYQHyP7xCWJz7xWM0wPCUKmQJ5GFs+AdP9P2Pmgl6z5WpkejSpif:qtqQB2D9aUKmcoP+B2eI6N2","tlshash":"6512516836b30274062751bf67df920a76ba50036c05d894ff8c478a2f94d1a67f1bac","size":9737,"data":"","first_seen":"2026-04-10T15:06:38.070778Z","last_seen":"2026-08-04T15:41:04.927665Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@24.6.0/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"39752d63af21ed99ea6e90307f2f1754","sha1":"b196c80a81c0275d2507e4ed3edea95e9790e990","sha256":"d5e04b97927cb5af960a4d9d895e99ca6fd29d0fa7d8031fe67588412ed81b8f","sha512":"67cfb55745776c211bbf406de155c06cb01a27973735e2bcd4a29e4f10f4e399483ab701073087e22c39673ca1ece4cc2d2e96dccbd35f637265726be08c41c5","ssdeep":"3072:9E030DWujFs3OwPss3MwPaPJqB9Q2xFM8M0TrprBW6c77hukmLETg/QKWVSpdUku:9E03+WqHJyxFM8M0T7bUT","tlshash":"6d44f1ebd63c9737a1e87b35968eb3cd5a8cbca3c858567826c3b54f52784e0706c205","size":264462,"data":"","first_seen":"2024-10-22T10:29:58.092437Z","last_seen":"2026-08-04T15:41:04.917624Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/shBrushCss.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a07a03d9b8a586105267106ed629339e","sha1":"dc14023bd87bc94ec6cb1f4f1b3570466bb6394f","sha256":"d3c494b68b64e24bdc66748471fe73d49f0d5402e02029fd6acad00e1a1bd5b8","sha512":"b0ed29d6f06ae9e4e09fed540d4dbaec5196d293daa35b3439a871b831731f7c206f8798b41e267de3d0900f8fb3e5634a42acbf4f626e91f99c53a07bc4e599","ssdeep":"96:dj3v+SxHzw1HH/whglqOA8G9pHz4eQvwCVK9TvkUCxBMhpdC43C8Po:VzxHoHHVATRCVyRhywtQ","tlshash":"25c1d696fb4c34092447c6ab759a61d9a81cd7b2f397a175bf1dc41e3280bbc4126a0b","size":5694,"data":"","first_seen":"2023-03-09T22:01:26Z","last_seen":"2026-08-04T15:41:04.941865Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://SimplePhoneMask/src/simple-phone-mask.css?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"d5833cc652a1fa2fdf07f6580a38d50e","sha1":"330a4d14c7023b58aa7fb8ba7efc933fa6ebbf81","sha256":"5bc4e1e2bd18de4bfa083f5a6d7f8340f727ed5eae38ca4094b6d3c21223c545","sha512":"e1f43d17813f59da24956ee8309eb2eca65cb9fbba58ef4a1c21e93364306ab1686981b6c30308cb1cb05694d0f2ff1b33842d9d05e0f7c2298ee8ec50eb7551","ssdeep":"","tlshash":"b8c08c8902d269b322fa588100031332d07ed6a809bee982ce1a88788060050d1a8911","size":154,"data":"","first_seen":"2026-08-04T15:32:03.999245Z","last_seen":"2026-08-04T15:41:04.960539Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/libphonenumber-min.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dc1adaedd1f27185e0f7de4f1741119","sha1":"74a848ff9ed1374e77ca7f172613e0659071d8b7","sha256":"2a172e1544bd9f7f7bb630131e341ba5522d7f2c0cc9ae775ad8bc15e68f2e9f","sha512":"ca16329a1aae33d1cf5990ce5039c7befd9cdbf9c40246bd76e428b7c826b8fc295f849e054ceb61592b536027f2809311768fc9df60ddd464707e49aeb7f763","ssdeep":"3072:TOe03o4Pwjx2YpMF0417ONanqhHKViuiv:TBxppMF97ONaOHKiuE","tlshash":"dff3c9f77640bb6774b13b188e1ad24eaf9c9c51dc98a08cdbe3d8cb5d61822207db15","size":172035,"data":"","first_seen":"2026-08-04T15:32:03.962427Z","last_seen":"2026-08-04T15:41:04.934656Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/clickSDK.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e35651f8079306f21ea674e305e71df","sha1":"6cbe4db67362425aa2dd4d03de2d54a5041e10f7","sha256":"24d86e46828b158a1a7184c43495d2b9c02f8eb1d69e5cc19c8163d371c962ee","sha512":"44f39e605e79dbc6ab1f551cf94ac0415d8da25acc81ebf94e2b11939f0fe4ebd15d54a43684dec07f3d14ba9548931a28b7186bd0f2464355fd33372abd3c85","ssdeep":"768:tnvx/3wq/+zO+FNgt47Ni8zdkIkLisQwfDKAVMbejLrzaB1YGvNi592gSHN2HXgv:t5KQzjwKWjqvCAL2","tlshash":"0af229d5b6d2b06243ea60f4406b0902f33d9a15784e84b4f4989cdb3cb640e96bbf7d","size":35607,"data":"","first_seen":"2026-08-04T15:32:03.921625Z","last_seen":"2026-08-04T15:41:04.950035Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/shCore.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"488ca2f56c37f84283fc9be63219304f","sha1":"bd9599773965e9c84565abc2e6acdaa92ad6e83f","sha256":"584a26f39cef2db245f41d4f6b8e3d0f7dfac5c06f0f454a49dfb94f6fb1517b","sha512":"e3d4014019c09742dc1974c9ecb91288e835970615e13c7f5e2810eaba9b73a4045e7f9d902a3cc1e759286c416cb43b3313fc745513fe1cbdede7e8a321bbe2","ssdeep":"384:tW98cZiWYi4s4B7Gxk9xzXNMyhElTMfUsMCMUzMS:MTGzAxWzXA4fUsMCdAS","tlshash":"97726db7342d157317e1c99428abd14650c912bbbfeac7b1fd8ceab9580c4b14063b5e","size":16175,"data":"","first_seen":"2023-03-07T12:12:00Z","last_seen":"2026-08-04T15:41:04.954884Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-04T17:51:06.33694Z","times_seen":414405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0bbe534e8d28f12f42152fe19f2c0f7f","sha1":"44dc3e882fc42bc9c252195ffb505095904aa9ee","sha256":"e59510bb0a29412e530a4df50043f5e192235e123335a0a3dc1bbd272d0ccc4d","sha512":"4c73d6e714763b8bc69a08ffff6e65eabd33f5fb02e5b2174f9ca4cefdbd02e6ce817b4e2b9ceb14eb6127e9f1bbedf4d42e67a72509089b00bcf7aadfaa3764","ssdeep":"","tlshash":"a47000808ec0000220008a0b0000800a0f020ac3228280000008008c22020000002a28","size":24,"data":"","first_seen":"2023-03-07T18:45:55Z","last_seen":"2026-08-04T15:41:04.961007Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e6a43a0fc599c6b49312ed135beedd9","sha1":"82539d3338eb74125d944132da4678adc5228dd3","sha256":"58db1e5cc7da685084a4e834c4970d552668c12c7172d10930fd6008a6b84d9e","sha512":"044d2c098761b731ef973331662d42c92cb4ffa31643381df664d4a5aeb9a7cd5ff18796c048a011be0a9758b99ae752aa463388427ef47e39af066009734fd2","ssdeep":"","tlshash":"601100b53e1a1134c9c5418b317ee7a83e3210217a02a044c26ccc399d28ed714efcbe","size":901,"data":"","first_seen":"2026-08-04T15:41:04.961476Z","last_seen":"2026-08-04T15:41:04.961476Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://SimplePhoneMask/src/simple-phone-mask.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"4d2f51bae7f3a90596e47ac1b2268543","sha1":"09a31716a846dd116fb22c3ce188d2bd85951eba","sha256":"ff3fee74c773dbad60483d2d7783833b38838cc932d9b7850f220b490e024341","sha512":"1db637d7cd4c7c7de6e09969e77f7a7a9bb249b3e50c17eae7e3d696a37645e3a48a5328e1dfff6b600424dc3298d6244b0236ad9f0a0811cfa8a45c72a39607","ssdeep":"192:3+TFhmMRGei0gDYJL/GzBBdkb/pkzw+HEow8wyEJdq9vSvE88NzC6loGyvB:3kh6HYJL/G1cbuA8wRm9KX6loHB","tlshash":"1532340d66f60372c4bba2793bcb5111a571923f6844c8583ced9b985f80fb093b2fa5","size":11321,"data":"","first_seen":"2026-08-04T15:32:03.997109Z","last_seen":"2026-08-04T15:41:04.962377Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/scripts_p61fa9427e8.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c067caaa3b83df7f1627989c272911b9","sha1":"61fa9427e8585559db7c109f0c3bcac265bd4569","sha256":"c1a141be4b535f817dcc5668dcf5ca517fd5152a3a877ffeec06418f8dd207c4","sha512":"f215744c47ae0e048d6526cc485179e5d29a030ad57549276623644f81ab13af54f43d04da8c3cefd1872cfb59cbc39517537a353f0f9af67825abd408024887","ssdeep":"12288:QEo/+IDArPf+ch29nZ/C1nOHW5jRkdY/m:2DDAL+X9nZ61n9RRkdY/m","tlshash":"39052989b240363242eb61b5503f520bb237595db909806cb17dc9de6e7cd4822bbfbd","size":816651,"data":"","first_seen":"2026-08-04T15:41:04.912606Z","last_seen":"2026-08-04T15:41:04.912606Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/swiper-bundle.min.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","size":154597,"data":"","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-08-04T15:54:52.130252Z","times_seen":26581,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/f1/static/js/initBaseForm.js?ver=1","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47ce6e8a9b8e4ce369fb3eac50d8f317","sha1":"4b14174e3391dfa65175e92a67688e5dd469ff89","sha256":"0bd4ae338976ea106e123e27a20af2455c42518d48dc8272a0011ea1e4847395","sha512":"4004e8d04d975f52756be85a387fe21024a9dab580c483e0a5c3fe017edb73e61692d3c11036a4854cc3f71361463c5515ced2ba3fbf80143765482d2513caef","ssdeep":"","tlshash":"d9119e194d73e8374a3658abeb7ba218e16080671210e161b65ccc44cf697e92d5aad8","size":1027,"data":"","first_seen":"2025-11-05T10:26:42.708686Z","last_seen":"2026-08-04T15:41:04.919998Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@24.6.0/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7ef887217c08da902b6d070ee8f6a4b","sha1":"0f021961d638ab027d5d5379e5333d147a860c2a","sha256":"5b01559a5690b6520402ac638603d106e751e7333165bf6a8b5fa0e333865912","sha512":"fec44594545b72f39b3a8fd2c56f29be615978c2ef005ea16a3457797d797a43e04f882e5e77cd4a32c2f7c2bf4e0d8e6d480a5fcbe7f7e4e1e7f9861f365b13","ssdeep":"768:rG03Xlqn/kiImXpwJxO9SfZ9FFSjV0de24fVXub6:rviIy9SAV0d0X9","tlshash":"3fe2e7aeb3656b37abfd82a270a50503af7f79444604043d78ac8ede1289ed171f5b34","size":32441,"data":"","first_seen":"2024-10-22T10:29:57.923796Z","last_seen":"2026-08-04T15:41:04.94135Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/simple-phone-mask.min.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0907285764aafb2ed89ffa3f8fa187b7","sha1":"9c4e5d1457a90b2e1921f08bc188c517f36dddab","sha256":"34bd2528616654b8d76b812b74473a5e699a5a8bb8bde9d6cf2ee7582c848ad2","sha512":"a74ffe84dd6aa1b411a5599aa02efd37b6d6c7652e499bfc7b9f03bd749b4cf2624c0d4f5b85a5f1c0f574756b492c40f9ba76434a09d69ff9bff749695dff23","ssdeep":"384:DObsQscbHkIPaUXSrG3FTOVmJMq8wF4Fkr4G2hWUmrjAFLU4e4jx:lQdpSUX2ncMOHr4nWUmOFx","tlshash":"d4b2a7db37611f3384f572f526e7a2e45772b21858b0c019789c737b03cfa96a191a3a","size":24754,"data":"","first_seen":"2026-08-04T15:32:03.916099Z","last_seen":"2026-08-04T15:41:04.95385Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://SimplePhoneMask/src/index.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"263516b8e6910b4e516f97765c231788","sha1":"ea4e0066225dc655a611bc5677fa7611f97af815","sha256":"9ed3a34994042ebfccfdf0c7ed877c8dffe4d54fc025345908dceb80f13a1dbb","sha512":"7007e70c833f99f4a0dbc5df9ebf97233da1462da1e6091b83836fa4426b8cd7a152923ef3c2eb237dff57840964f7a50818370841168cdd26ea6bff43ea0a3d","ssdeep":"","tlshash":"1cf0d68527512d6733fcec985207c53a22e7831d1cecb8808857942d1ae481466ed339","size":641,"data":"","first_seen":"2026-08-04T15:32:03.991274Z","last_seen":"2026-08-04T15:41:04.962946Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e17bb3747c5d76d10a06f0956214b68","sha1":"54758d9e26f072b45b1d1817176f1579f5781414","sha256":"a85b1ebf649465beddc9cb5c71887fb51841668bb817116a42106bbb47ab2fb3","sha512":"2f45dee4062b4882ca3a0da1025e68ef784d863e62a098479c23b1402835810d8cea2f3d28b07717e8efc523160e9373246a778350ea14621f4464e5cdd486ff","ssdeep":"384:nM8uG7p/cNg2zItsvgR+hHokyQtErEQ0xroYioLZ22Dq54NfhvcHJPtA:ntuG7pndkyNohoYioMxLplA","tlshash":"9392c7d876c5f5a3d3b1346814ff410aa5776edba8885054fa84a8e578b0f4b017ff28","size":20844,"data":"","first_seen":"2023-03-07T12:12:00Z","last_seen":"2026-08-04T15:41:04.963472Z","times_seen":408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/shBrushXml.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba290ac0111d2c3f8e1ce36fbaf6a239","sha1":"311b19458f80720e59522be044709aa5c78adff1","sha256":"fb1fe49a904a4fda3ed82d2f88048b2ae88c217980b6bf2163c07f048663b43e","sha512":"4c98b73a8cd7b778ceb75389155d30c6577004d2f5360e9055dc7836e2daf4d8bca591a2d0d28ccec943f633e2ed8cf6576d2fff0b9184f53059fb61642673de","ssdeep":"","tlshash":"cb4136a4de1cb1e71f5058e6450ad0ce0fadaeb7318ec420f34d95da295071e52ed8b9","size":1998,"data":"","first_seen":"2023-03-07T12:12:00Z","last_seen":"2026-08-04T15:41:04.950556Z","times_seen":238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/email-decode.min.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-04T17:51:06.33694Z","times_seen":414405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/f1/static/js/pixelEvent.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a3ce54e523cf5501e048a690fbd507e","sha1":"9d75341fbb25f3b9abc37eb1872b835654508694","sha256":"28aa4c10cf6b915aa627292120a880cc48334cf3826d6fca1047b95f7c39b664","sha512":"b318a4010257762b69ee628875c6487d8f320b6b0f993da69e16a3db4bb273c7d061f7f9c499f3043cb55aa98fd6ee8c7d278b06ba6e6a216b52ecd4fbcb8ed5","ssdeep":"","tlshash":"ee01891b1853f0fa15f020b9b7276a562226154b3251c5137e4c80146fe0d2e7fa1f89","size":783,"data":"","first_seen":"2025-11-05T10:26:42.720642Z","last_seen":"2026-08-04T15:41:04.94954Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://SimplePhoneMask/src/country-data.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"697f57dd6771fc6e442e0374ed052f0c","sha1":"773f7b33f1e9eaadbceef1d143834a13aa832194","sha256":"13bbd818024747e1fb8f19b86c4cbf1beb4bd30d9dd720971aa860b79d342b71","sha512":"3794982ffe28acd10ff0bf415c7efdf0b7423783ebb36227db9ec0d45cc387c60495f8cb0ecfa5bccd9f0fcc9fc81435e2cb7c04f08119abc9c8adaf9d578493","ssdeep":"192:PMpDu/Qq8/PbvTJJM15HcrbuCPiGRy7Hv2zPx1VFcbUQsiVuA7E1TG++C6WIMZh0:PMpDu/Qq8/PbvTI5HcrbuCPiG8Hv2zP2","tlshash":"58e1d7f31b62614a84e021b8147fbb2847e5f647ece8b87670e961269f4cdaf7071819","size":6833,"data":"","first_seen":"2026-08-04T15:32:04.001426Z","last_seen":"2026-08-04T15:41:04.964397Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/shBrushJScript.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"649d4a796a55529bb15276483e065693","sha1":"fc56e52bfab72be4aa42b24c9d1d7d8bc50b10d8","sha256":"a71d37877416ec081aa9306c99fa6ae7e41dd60905838861fb717f82103c856d","sha512":"e615706e80f0b22b415538efbba99b1dd113864a24bd3e53258da62d85a3ae59d6ae6ff2a23559e36c5dad73b2b1f458057603e1302986e7080e28235397e7fc","ssdeep":"","tlshash":"873132d99f2cb05c5f9044b31559d08b9f2a87f333cac50cba4c98bd6b9272e0129a31","size":1752,"data":"","first_seen":"2026-08-04T15:32:03.884682Z","last_seen":"2026-08-04T15:41:04.947248Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/shBrushPhp.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a52933147cb95e4860a81c6c86863f8","sha1":"222f0605fe9de44d8daef71d8fc94f4b3e72e398","sha256":"eeb0f65854972899fc99b17cf25ea68831cfb238e1e41654135c69b8a6f9fd99","sha512":"bbe22049c89e7f62c6dc4b2354af75301d58f4a2bae097e13e0584ff5e6956989e2190b5330e117f7cdb824ebb6c55a84f4e901c94be5d84404bb476485a6a4c","ssdeep":"96:dj3v+SxH6N6vpnbxcc1qA5I7V/0hu1soUkLTf0KseCuBP8Po:VzxHUUq0I7oysjkLb0KrqQ","tlshash":"abb1d7d4592d347d44d164f6aa0d908bd92f81f3339a5000bf3a8c9d2472c8e60b6a7f","size":5246,"data":"","first_seen":"2023-03-07T15:19:59Z","last_seen":"2026-08-04T15:41:04.939701Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mulish/v18/1Ptvg83HX_SGhgqk2wotcqA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.758Z","timestamp":1785858016758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/mulish/v18/1Ptvg83HX_SGhgqk2wotcqA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://recovereverything.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15948\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 12:56:28 GMT\r\nexpires: Fri, 30 Jul 2027 12:56:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 441828\r\nlast-modified: Mon, 08 Sep 2025 18:00:30 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":15948,"size_decoded":16761,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15948, version 1.0","md5":"3ecaa05024bdf84d18872efcad983616","sha1":"a943e80f24c9fa4dfce7fbeae43765ee88df1671","sha256":"270a9552cb39c2aa23054f70bf8c770bc1a9c2d6e0df2841bad89f6597bcd483","sha512":"4f03dbc8551a3a25d3e343d78b6ca647316b9c7ab75612e6dbcc411636d1a05f7c77b14db4f00dccf74dd0b4d260ad98008db15a534b52923d3c450d957b5293","ssdeep":"384:Y8AMxh57n1kQWFTENAJjCEJ7Dy1Weu0/LVi3c4:YNMnpn+7TE/EYvrLwZ","tlshash":"2f62c0a6b418113c980a4521e30cf6d4db1f9ea4f6fda0fdfa1e56471570296f088f17","first_seen":"2025-06-14T03:53:15.341089Z","last_seen":"2026-08-04T17:31:45.301654Z","times_seen":339,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":20,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/css/bootstrap.min.css","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.192Z","timestamp":1785858016192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/css/bootstrap.min.css HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: W/\"697b9c27-26000\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YZtnmsxhm5t%2FCXI4tzliyf7E04yxfccuSDavgU3wH9%2FH1tXOH6Pc7kZE6Otj4HGiU%2BtfnJRTDVGovUrDzp%2BmKVsid%2FsvpWk6wGsKnM21NySWNMpw5kJGX13UQyOX%2BVIf8ydW35FFz78%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a25ea8d93d065697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155648,"size_decoded":23681,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"6ce3a1b30ad16401b4e96e6319dc10fc","sha1":"a8396e0ca1ac7faaf9b513ddc02d3adf276a491c","sha256":"888b37ad47d4dd1f14de5df35b4bfa803cd2ddb2b5c551cb18d6899e20c0760e","sha512":"8ce5c1cc237eaf37bb834bc3262e7a82463dde88b950e5071cffb2e9d81a5f6af3ddac4f2188a0fbdbc8dbe10885b4a9eb74a65968903613a6fd1eda79588358","ssdeep":"1536:TtynF83RipVVsEBpy0cuJcf22RWt5CyVUpz600I4fu:Ttyn0yVUpz600I4fu","tlshash":"51e3a3d7f581241dd4a7c259a0d1bffd052f4686e3025eabb0277bb88b4a6c70963e4c","first_seen":"2026-08-04T15:41:04.907976Z","last_seen":"2026-08-04T15:41:04.907976Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/shBrushPlain.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.224Z","timestamp":1785858016224,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/js/shBrushPlain.js HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ItggriNsHdpEdQxzje77%2BuX3buVHF6auuWISrCpyAXfOyhVDYHRvzc%2F1tZKGikNh7gKslQZb6s%2FOa0zHpK1H08l6BUtLQHvdaNVh6rIGNulMgUQ7x9IeJC6Gsh5lJq7OgY9tqjiwI5o%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"697b9c27-2ee\"\r\ncf-ray: a25ea8d96d1d5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":750,"size_decoded":1132,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"87fdca14e9886310a4e4b3ceb429c7f8","sha1":"8c41e3dc03b9a9d7d5cdeded987d7695974cd797","sha256":"4916a1324a99bcafb7b7e8b333d9b1fa37c427950bb0411d38baac12846c17ad","sha512":"24786892240f03f491225657b2d27a38811696f3bacfd4b57499022b0a5bab00f51a29aca343beae548036da50ea95356d9fe181e2f3328294e4dec1fb37e2a8","ssdeep":"","tlshash":"e6014c65de2830662b464db7919ad08f1f354be333c7c401514e58fe3a7156b028ef60","first_seen":"2023-03-09T22:01:26Z","last_seen":"2026-08-04T15:41:04.909014Z","times_seen":34,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.232Z","timestamp":1785858016232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 06 Aug 2026 15:40:16 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eKyBfvHVBU4mM8XcPvhf8QrNfXT%2FKITzm2Ze%2FvOgmLcmtwQIEgdEsPPFrin6kK20jIQMQFhNoUUgXO4N6opCKFBvDIaoMXM2OONkGEF6qvp94SNFggwCoXMoFE8a8aJzGdhG7gHRL50%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\nserver: cloudflare\r\ncf-ray: a25ea8d97d205697-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1296,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-04T17:51:06.33694Z","times_seen":414405,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/f1/static/css/fstyle.css","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:17.004Z","timestamp":1785858017004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/f1/static/css/fstyle.css HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:17 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 28 Feb 2025 12:14:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NvJi9xEMdf4S2A4qncyxPY9z9PYhE3xtokzX7BwAqN8tXNQefwU78RNzHl67M1VdCu%2BMRtoecqUgwQ4cnPreXPyR6bfIrik8YJO6XC9TRiXdvc1%2F0Qnpq0VKs5G3%2B0g9pfotDFC5YX8%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"67c1a8bf-923\"\r\ncf-ray: a25ea8de4d945697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2339,"size_decoded":1518,"mime_type":"text/css","magic":"ASCII text","md5":"85986ef6a2448bcb0105c0e619242432","sha1":"c1728627baf1931811c148e57491e6a688190d06","sha256":"608becdbb7be57446b1f1b4717c95338679d1d01f5a99fbdac2055bf7eb9baf2","sha512":"52c2845d18b8fea3ef811cecf4aace278db3c2cfc41743c4470a87047b361b6b8d2e12c11ad29ee420e098a26e0eaadc0235666a6cf29ec1bc704f27ad1e9877","ssdeep":"","tlshash":"6341f061a9f71849b607e0684ffe4759237d9047540fdeaf7fc8328d8f46294d1a2b88","first_seen":"2025-06-22T17:09:43.153844Z","last_seen":"2026-08-04T15:41:04.910269Z","times_seen":7,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/f1/static/js/translations.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:17.245Z","timestamp":1785858017245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/f1/static/js/translations.js HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Jul 2026 16:13:41 GMT\r\netag: W/\"6a68d535-2716\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ybSYqv0Sx7AT4O39DC7DR3%2FZspfVNyKP8Q%2BTN%2F1cRTM3AuWMTcZqrBWdz9gB0bnpUQdciEMc7AgWbleyCOdFbooMoA04XMiDmJM0%2Bfg5CxDC4SBCfhanKMVRlAM84sgbPCDB3cn2JMM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a25ea8dfcda65697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10006,"size_decoded":4020,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"8e4b121253face2cefc6ab0e3a564e78","sha1":"c6f6137aa840eb5e41fdce0f794330a38eca7952","sha256":"e1c68aea17713ef5e2e4485928d662b22b825fba73a5301febfd57bc975d060f","sha512":"f39ad1efd57ad525c9cc0ea5a5b94a4bf1869d181dc2c782d19ab4804e676bd1776bae42b96bce80c178247c1f0eb4b9b558e79f563a034247710c90322c0028","ssdeep":"192:05GgBhsYV6X5SM7rKjj9CcTt8y0WKobaUOQtf8vddfS9tF+Y/r7st+Yyzo26rSdi:lQSnnKv9Cc2y0WKGaUOQtf811qIY/r7a","tlshash":"ae22306ca87907f30241905a50763520b26a9cef2d657c7933dc92683f8ec4f927da9f","first_seen":"2026-08-04T15:32:03.936413Z","last_seen":"2026-08-04T15:41:04.910778Z","times_seen":3,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/css/flaticon.css","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.190Z","timestamp":1785858016190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/css/flaticon.css HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DkHHvsq47Rsthe%2FS1WuVmtHYp8soVsK2p3n809A3AzCKF8%2BCUuKj6%2BHaqjVjiT680Le5RxtNyu7lVE4avVJoayDFL%2B8SailG0gza4MVlLe%2F08Rm1SFZFfbfzh55gVhL5EI7MpbnlAMQ%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"697b9c27-b71\"\r\ncf-ray: a25ea8d92d055697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2929,"size_decoded":1451,"mime_type":"text/css","magic":"ASCII text","md5":"689e41923f2ffc0171e97e7bb33756b7","sha1":"96ea2ae05f9cfb1307a5cfdec47cde3634c7f00c","sha256":"127969ca418e4e39ac7d82fecab54506bb00b6f532fbe19b7978e485106b7534","sha512":"48f21c9967567e96748bd9412497ae6bfb3e9322d17f22b7f8ac8c70c6136e5f696cf18a20a4f36cf41955237c788e335f5005773d230fb7994b4452acb9b205","ssdeep":"","tlshash":"a751f3aa90bf14844314dac612af6614ef19702e9cc99c5cf282bf9dfef1914c3912cc","first_seen":"2026-08-04T15:41:04.911453Z","last_seen":"2026-08-04T15:41:04.911453Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/scripts_p61fa9427e8.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.235Z","timestamp":1785858016235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/js/scripts_p61fa9427e8.js HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: W/\"697b9c27-c760b\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BpcA38l%2Fmj%2BtmzJfT05VpDyJ8xVz1lWreuXNewmzh1bdogLtI0v%2B3eu%2FYT9t%2BzF%2Bgw0ra9Kpe960vLG4qOweU%2Bqt0832MH8FLzjmRx%2FF%2FAMgz0p2xcn88bFS3L2nPHRjIDf0mVGDMUg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a25ea8d97d225697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":816651,"size_decoded":231774,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1005)","md5":"c067caaa3b83df7f1627989c272911b9","sha1":"61fa9427e8585559db7c109f0c3bcac265bd4569","sha256":"c1a141be4b535f817dcc5668dcf5ca517fd5152a3a877ffeec06418f8dd207c4","sha512":"f215744c47ae0e048d6526cc485179e5d29a030ad57549276623644f81ab13af54f43d04da8c3cefd1872cfb59cbc39517537a353f0f9af67825abd408024887","ssdeep":"12288:QEo/+IDArPf+ch29nZ/C1nOHW5jRkdY/m:2DDAL+X9nZ61n9RRkdY/m","tlshash":"39052989b240363242eb61b5503f520bb237595db909806cb17dc9de6e7cd4822bbfbd","first_seen":"2026-08-04T15:41:04.912606Z","last_seen":"2026-08-04T15:41:04.912606Z","times_seen":1,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/images/1111.jpg","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.254Z","timestamp":1785858016254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/images/1111.jpg HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: \"697b9c27-ea08\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fSao2EiAzH%2FOo2RTDGiPggCWM7k%2FyxabuzD4NsbzmuCODK4gkE25nYWPOBG5sqk%2BFBa4cGt1%2Fu0z2i9yWOzNdq3TDNRSH5gQUcjKXNKsbqS7cNy9u5w7%2F8T%2FS%2BTE8fD8mOni%2FYrDScg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a25ea8d99d2a5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 59912\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59912,"size_decoded":60653,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 350x462, components 3","md5":"dc09349095a7e1d60f537703e0f992b9","sha1":"e0b53cf53ed0f2d03b4d09ab26475102fd74bdfd","sha256":"35dfb3d00eb27d2ebb34a2cdaa10c0c1f927a288cc999e61caba4f1cd1115ba5","sha512":"d63bcb9732fa941b0436e3809a0fae94a46ce1e0bf7333c16705fd8df995f81291c12de908ab2128dcc9a3ef7aebc9b81569b4fa56c5a23a3ac7d14069cb8de9","ssdeep":"1536:AlcQmw6B7aVmJWOky0ZFZ2fWV5zjkvO7d:AlcMe76m+l2OTGO7d","tlshash":"bf43027244621f5e7f2111f09cea8a14a6e264315d949234938a5682ff0d3ff3fe2b22","first_seen":"2026-08-04T15:41:04.913685Z","last_seen":"2026-08-04T15:41:04.913685Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/images/1.jpg","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.259Z","timestamp":1785858016259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/images/1.jpg HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: \"697b9c27-46145\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZDB168ztD0G1%2FWgIgvN9bVL%2BEv7X5KlygVcaUjAc1YigkSj3CQyon7%2Bv6e9OP4Ch53E9PWV2U1xRzRF9LHDzmaKpd5m0xpB3uDLDen1bVlcni4y17cTT32bxiiFxn2YUqzAmR%2BT%2BHfE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a25ea8d99d2f5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 287045\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":287045,"size_decoded":287782,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 705x600, components 3","md5":"ae700691b301542d7114bde6d51c82f7","sha1":"d1e5aabebd6d3386d982f0f2f53eef4216ce9160","sha256":"a29d66cbf15f5c06ba0ac9b6938f316d297ad5f747706c3c24bee8e9c8aadaf7","sha512":"805af455b4499e94887b11d89a198a502172bb63ad0ff7e8f6dcaac1c8e60d192bb2aaee1a4bd69f758f7ef48967970ac3247f1eef2b7ebeec1b9adb50d2a66a","ssdeep":"6144:rrU/zGYOXMYcxhZKJKZGuNG4A/SDQuOY9yr3284amzvmEYZwvjZuK+JlDIlP7OXh:PU/zccYcxjTNGNSDPirGnZlrZuKalD8m","tlshash":"61542231dd91cd8ffa680c4c69b25c21b5b84a106c5f3b9a2640cd0af61645fc6fae6f","first_seen":"2026-08-04T15:41:04.91474Z","last_seen":"2026-08-04T15:41:04.91474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmseriftext/v13/rnCu-xZa_krGokauCeNq1wWyWfSFXQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.756Z","timestamp":1785858016756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/dmseriftext/v13/rnCu-xZa_krGokauCeNq1wWyWfSFXQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://recovereverything.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24512\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 02 Aug 2026 13:17:56 GMT\r\nexpires: Mon, 02 Aug 2027 13:17:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 181340\r\nlast-modified: Wed, 27 Aug 2025 19:22:10 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24512,"size_decoded":25325,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24512, version 1.0","md5":"f590ba68610667d52bd08b1918de7224","sha1":"49d69a762bb536245332006f249ba3f40cceab68","sha256":"48e7fea6f9e3a88cd98ccffbebca2d5bf32cf6e668e52096d984239a343f76aa","sha512":"2d0c06f2a0278c23119c5b3f4effb3b40e72692eb5b6be1b36b03429019dde84a1c9558d13e1ebc2c021dae3c094c3bdd35b40563eaffb5c056616149ac19d9a","ssdeep":"384:UcR9yQ6q6fxprZ+ypeHsj8G7FNQaTVkdIB0TqAgmiAef1WXbBx0bOWgulWfqk4K4:54q65prZ+yJAG5NjVkdAcqAgmY9WXT0X","tlshash":"d3b2e1f5046d0865bd8365fe97e6732f3928a00c838cdbf9632bf056bda01827199d1b","first_seen":"2025-09-03T20:31:37.779454Z","last_seen":"2026-08-04T15:41:04.915816Z","times_seen":662,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":31,"dns":1,"connect":0,"send":0,"wait":26,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/fonts/flaticon_law.ttf","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.856Z","timestamp":1785858016856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/fonts/flaticon_law.ttf HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/lander/cyberprawo/css/flaticon.css\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: \"697b9c27-3f4c\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gHMS5Eumd6YjnmjPLY1xPILFioKmejTxIWv6lSWO4uKGX5%2FszCGbZn8T40cTEk8%2BHcILwuoy7pmfZDWwREgc0bVVtm24QbWXLzOT30LUJ5hPKDXFJdtJ5C3ayZ2ytYiqDy8wKKulHzs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a25ea8dd5d7b5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16204\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16204,"size_decoded":16950,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 16 names, Macintosh, type 1 string, flaticon_lawRegularflaticon_lawflaticon_lawVersion 1.0flaticon_lawGenerated by svg2ttf from Font","md5":"13bfb025d81413814a0aeeb5fd39d2a1","sha1":"6bb1f2e7406ebf7da291bb81a553fc4e90602598","sha256":"a61acd98427551b4631eddbe785836b5007ff1f5e1119e4df4ffba0a036768c9","sha512":"02cfaf9dc76202552101cfc49800fd0f80de226fb349f70daa6976e6a52f4765c8e164a0c6624ca9a3febb09bfd960d4060586503523a4830f3eaffbd67a1e3e","ssdeep":"384:qZ0ipEwx591K79dewH0tLt9s5B8xYclhrDRWKzkr2NbJHd:Y0eG7vewHIQB82MZvzEmv","tlshash":"2a726cfbe34e4d7bd36b12bb4da952121791b50427437ae7aa5d41154e232c81ff0246","first_seen":"2025-06-23T11:59:54.771776Z","last_seen":"2026-08-04T15:41:04.916399Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@24.6.0/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:17.557Z","timestamp":1785858017557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@24.6.0/build/js/utils.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://recovereverything.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/intl-tel-input@24.6.0/build/js/intlTelInput.min.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 62352\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 24.6.0\r\nx-jsd-version-type: version\r\netag: W/\"4090e-sZbICoHAJ10lB+TtPt6pXpeQ6ZA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 2948907\r\ndate: Tue, 04 Aug 2026 15:40:17 GMT\r\nx-served-by: cache-fra-etou8220125-FRA, cache-bma-essb1270047-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":264462,"size_decoded":63128,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"39752d63af21ed99ea6e90307f2f1754","sha1":"b196c80a81c0275d2507e4ed3edea95e9790e990","sha256":"d5e04b97927cb5af960a4d9d895e99ca6fd29d0fa7d8031fe67588412ed81b8f","sha512":"67cfb55745776c211bbf406de155c06cb01a27973735e2bcd4a29e4f10f4e399483ab701073087e22c39673ca1ece4cc2d2e96dccbd35f637265726be08c41c5","ssdeep":"3072:9E030DWujFs3OwPss3MwPaPJqB9Q2xFM8M0TrprBW6c77hukmLETg/QKWVSpdUku:9E03+WqHJyxFM8M0T7bUT","tlshash":"6d44f1ebd63c9737a1e87b35968eb3cd5a8cbca3c858567826c3b54f52784e0706c205","first_seen":"2024-10-22T10:29:58.092437Z","last_seen":"2026-08-04T15:41:04.917624Z","times_seen":53,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-04T15:40:15.820Z","timestamp":1785858015820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Tue, 04 Aug 2026 15:40:15 GMT\r\nset-cookie: e3b0c4_45=mr9lpt2jnechl; expires=Wed, 05 Aug 2026 15:31:28 GMT; path=/; domain=recovereverything.com; secure; httponly; samesite=none\n_token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; expires=Wed, 05 Aug 2026 15:31:28 GMT; path=/; domain=recovereverything.com; secure; httponly; samesite=none\n_subid=18uumd0.2d.8dfh; expires=Wed, 05 Aug 2026 15:31:28 GMT; path=/; domain=recovereverything.com; secure; httponly; samesite=none\r\naccess-control-allow-origin: *\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rdoai0iW8cid3UINBmPxLrUbSllrV38puvN6%2BqlnFLy8WHUOtsnp26r2mqNFBFtHHbA4ga5DPvWAQZ47ZOROXci9hSgj4FPR%2FJRppfqrQEayoY3CbtEVLlDhd8l9NWBzupTfwVGf0dU%3D\"}]}\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a25ea8d74cf45697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"SyntaxHighlighter","description":"","website":"https://github.com/syntaxhighlighter","common_platform_enumeration":"","icon":"SyntaxHighlighter.png","categories":["Miscellaneous"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":33921,"size_decoded":8395,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1039)","md5":"40c5ae281a2980a4a508c33bf634b888","sha1":"d4c3ce8f2a131eeb0da0c08961faf7c4e63c4f62","sha256":"110e3cd44a6a3dde7e164138f75e767318d3a0a1d4a1c5f6039751947d198da4","sha512":"0b6d8eed25cc7516c96fad41a4780414500beae730c82e347f5776325b69b15255cc0636ce27e3177cbcac2ceac25ba946d394c0cdd8c1c7fa8dd11a307ccfeb","ssdeep":"384:6sX2EYpu9vuU1w4BtK5f504d4vMZxfCIB7T/c4FqZJ0JNox/3:6o2EYpuBPwmKg4d3ffB7T/VwZJ0Jex/3","tlshash":"eee2a96018f5507701829096a9256f0b7ea1e92bdf2f5a0072fc4fd92fe3d96cd2724e","first_seen":"2026-08-04T15:41:04.918533Z","last_seen":"2026-08-04T15:41:04.918533Z","times_seen":1,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":43,"connect":23,"send":0,"wait":119,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/css/owl.transitions.css","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.203Z","timestamp":1785858016203,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/css/owl.transitions.css HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: W/\"697b9c27-117c\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6mLfvgVmrPG9sF%2BH42ZjSq5hf6sJyXKhgwYranq%2FwWUT4Ig0Cip1M9CpCINdG43yB%2Fx9sJT1pmWzPfn8MwovYzgTNnmR6U8SjvCWDm4ZtK18AIvxqJsIUpf6y25kxXHRLtUDIHRMhUY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a25ea8d94d0d5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4476,"size_decoded":1430,"mime_type":"text/css","magic":"ASCII text","md5":"b1bdaeac4065bf67a7d7a06213192964","sha1":"737bc8e18a55d93ee2d76c8d3cc0fd284f1ee5c0","sha256":"711bc5b0b8c40e39b2560e65797d175e72a89b49ebbc266a7c7b581c4bec4b21","sha512":"e22a0daa37b0232da14a762ceec9855a9bf3001e31703e8d9d1db3eb2754644060d140d55b72282804cfa1560ccb329ec5ef32154eac3ddd95ca9a07d998c24d","ssdeep":"48:5I+TlZ7kKXQmMfdScuFeUK7rqW9dvgOGH6fxr4jgl9onND2Umm:W+5Z7kKXQmGoeUK7+H","tlshash":"7691387ba1e5130c699b0680779ce6655a9c58923436cceeb1c67dcbcf506dc23cda0b","first_seen":"2023-04-05T07:50:52Z","last_seen":"2026-08-04T15:41:04.919382Z","times_seen":6581,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/f1/static/js/initBaseForm.js?ver=1","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.239Z","timestamp":1785858016239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/f1/static/js/initBaseForm.js?ver=1 HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 22 Oct 2024 13:11:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HC7fPZ7bC%2FKBkvEc3bXlmQjhwm3rs2xzOS4%2BCzWgFYGDc9aSj3G194w525Kp1b2r0G08L%2FY1xmUyi2w%2F%2Few6b1VtD3QMduiujshnuH6axognNeiHOw%2FxQ%2Bzm11CZrILYX3D%2FoCT60aY%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6717a49d-403\"\r\ncf-ray: a25ea8d97d255697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1027,"size_decoded":1202,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"47ce6e8a9b8e4ce369fb3eac50d8f317","sha1":"4b14174e3391dfa65175e92a67688e5dd469ff89","sha256":"0bd4ae338976ea106e123e27a20af2455c42518d48dc8272a0011ea1e4847395","sha512":"4004e8d04d975f52756be85a387fe21024a9dab580c483e0a5c3fe017edb73e61692d3c11036a4854cc3f71361463c5515ced2ba3fbf80143765482d2513caef","ssdeep":"","tlshash":"d9119e194d73e8374a3658abeb7ba218e16080671210e161b65ccc44cf697e92d5aad8","first_seen":"2025-11-05T10:26:42.708686Z","last_seen":"2026-08-04T15:41:04.919998Z","times_seen":5,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/images/2222.jpg","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.252Z","timestamp":1785858016252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/images/2222.jpg HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: \"697b9c27-e4f1\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bCpcvO2zKNtkRcfPx21NtO0jwYimVW6RYo9ym8VvwYX2Y9W5%2FfzOEiiXR9z6M%2BvAfh7mVrY4IEHdvMkur0mHBD6h%2BH%2FyV7RcmVbNUhiEeT1Hs6Fj72bgs3JWvZr3%2FCYZETxZKNJ39yQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a25ea8d98d295697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 58609\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58609,"size_decoded":59344,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 563x718, components 3","md5":"5ebcfc8375aeea20770844bd07c79851","sha1":"230bf9f6c44c3d8a3dbc7b12266e0a8182308cf6","sha256":"a357256fb49be927f5a7cbb95fbd82dfbfb2b7784769695e039d85089689b10b","sha512":"422804b40c6d668538ef5b6cc41d7696402da2dc6e196bc46a189186e0f231de78f4f127b40f930340f65ffc77003ee167524fd85755a0420ab6b494b0fb1c19","ssdeep":"1536:xDS7LLWPz4DvAhJgsWfQFSokCn6pY1skV:dO/DAHgjfQFQcMaskV","tlshash":"b143021312f3eea6fbe4c4b138fcc36978079ed4e78ab99e525848a344029c56e914cd","first_seen":"2026-08-04T15:41:04.920566Z","last_seen":"2026-08-04T15:41:04.920566Z","times_seen":1,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/images/3-5.jpg","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.255Z","timestamp":1785858016255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/images/3-5.jpg HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: \"697b9c27-d67\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JO4j6NHJ60d4FqKQ2Mp3X16JROFoSFwIwsJVCqK7isDkYKCwXwabqnp%2F2w%2FOkqf6nccvEiXRe4VjLjLUSvdH6LaRt69svgoluoazjjhondfL1io6HKZ70WXFhzs7GLsFac8AEkW6ecg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a25ea8d99d2b5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3431\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3431,"size_decoded":4158,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 70x70, components 3","md5":"ecfbe28dc77638cc31bd79d97b5e2c69","sha1":"2389118753ba9f4322c32fd0066a3a9e0efbb9ea","sha256":"6bb617107a41dc41df74997fd4066ecbc1abbec84c96c85008b6e12368b4b77d","sha512":"1798af513355b1be82a874bbd303f1c1af6393b7399a909de715b678da57dff43b15ad90f3dcf81989bf1808e336bc240fe34050c25b5a5632198b3e8011c335","ssdeep":"","tlshash":"be616d74e3931ac8ccfa0d360f765338681bbca6c55698c901057a1395be393ae6f84d","first_seen":"2026-08-04T15:41:04.921946Z","last_seen":"2026-08-04T15:41:04.921946Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/images/5-1.jpg","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.264Z","timestamp":1785858016264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/images/5-1.jpg HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: \"697b9c27-93a1\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5mjOeySAH9jbP1EZnWYcStNqFBk7%2F0qWh3%2B0iKHg%2FLEEOSpOIUuvwF47z7IFTm%2BYhdv3QadQPYLKNb4ID2jaRzr0kvW6y2YMSbqLZqIwtmhMShdgeAsbSlc4tTFj3Zj7tB2PbDzRPhI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a25ea8d9ad345697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 37793\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37793,"size_decoded":38526,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 330x450, components 3","md5":"cf8644bbe01e4a8ec182d039e04ac38a","sha1":"e21fb22c0ca96d67b55509987458e28b3a11b12f","sha256":"8d647c35d62d807f23d5464467f44c6ad6102b28bdbd817315d20a81ab391e2b","sha512":"c971939a8a9f2b9923e80f6bb9434687c56cd6b0b165a4a4e88f1c58951316fa2ea0baf8b78618a04125acd6c71aef72ca659d9d8f56068392b58be82ea54a29","ssdeep":"768:4dk4r3k1gJfAd70OS9S2yLXxQjqMJFb4uKLdz7r+:W8d7bSvyk1P4ukXa","tlshash":"9b03e1b7f7450852ca031d7d771fe763f60a9f588801576ee04ac808ae9b7ee5d4a0ca","first_seen":"2026-08-04T15:41:04.92293Z","last_seen":"2026-08-04T15:41:04.92293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/images/pub2.png","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.880Z","timestamp":1785858016880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/images/pub2.png HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: \"697b9c27-3d719f\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xOMzF0y%2BxmwNWSMcRgccyD366t%2FINADrposv9r1sSuQPJp32x5TgWkN8iAUE1XqGg1yCgIu%2BgJTd%2F2jIo7FUOpeqUfvyk63ftBNvG%2FNAMkoEY6B%2F86Tk%2FfCTrsytRHZoBQTLQ3wf758%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a25ea8dd7d815697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4026783\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4026783,"size_decoded":4027525,"mime_type":"image/png","magic":"PNG image data, 2048 x 2048, 8-bit/color RGB, non-interlaced","md5":"6f987a8a0e75be27d7c6da5a87339f45","sha1":"382cac51ede276d9fdda868ce720aa2bbb3d4672","sha256":"669776524a0fb95ac141d6a3a00735d59156441673e7001b49c6d11a1151d637","sha512":"72cc6f9899989c2dbe093ed8e6f7bb736f603d2f10d4f5f1b78b687b5b2972de700516bd42bbbd34b825b3aa83f015b1a9da310aef3b56cf20b599f55505962c","ssdeep":"24576:yg/q3t76S9T3L1XN3Lh2mNww4PjOKFuGNGGfuX:yg/K97LBNdj+w4rvgGNBfuX","tlshash":"7c2533aad462507a9103a22df5f86c5cdce9737ad63ce35a1f8b6757028e4f1c10a3b4","first_seen":"2026-08-04T15:41:04.923888Z","last_seen":"2026-08-04T15:41:04.923888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":309,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/css/slick-theme.css","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.200Z","timestamp":1785858016200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/css/slick-theme.css HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dc4LZod0It0TnvHJuE0PZ%2BNdF2DEu7eP8q6a%2BZvs3Sx6Kg7%2BssEftxlMOYl3NTsznQpXPDmRt56OjGawYt%2FO7idMIvDDnRAaaNFOS57v%2B8QY3RpMV%2Bvx2MGOdtVEuurc76TGZMw3MAU%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"697b9c27-c56\"\r\ncf-ray: a25ea8d93d0b5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3158,"size_decoded":1659,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"62089da0e0edac6d3248fd846e03f6f9","sha1":"fee42a75082cfcecf42923ac98cde27619c82bf1","sha256":"592c168c6e0823e2ecc9ca6f2589bb5e9c5bf79ec182d4526ccfeef6e07c9601","sha512":"2fb08ffc2f38090a3ff8f68e926ac2e6e651a527703170c3c38c15da9495fba26ea158399e8fc3e0cee0c0aa405bd52f4e4e7dbf594b966b1a5b6f7a1c52ef44","ssdeep":"","tlshash":"8b51e09856b3b742101694943be7472477cb70131629d8acfb95638d8fcd0d8ead934e","first_seen":"2024-10-04T10:19:41.707138Z","last_seen":"2026-08-04T15:41:04.924795Z","times_seen":103,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/css/swiper.min.css","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.201Z","timestamp":1785858016201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/css/swiper.min.css HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: W/\"697b9c27-4a31\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P8TegWuKyoF5yMo2l2dL9RVQjN%2F%2FNoX%2Fq0JhHewgh6V9Y5%2FAqvB6gfixztpFTUCLxu5hIWXZENtWRTxxTXxNAp9aUQn1d614SujdCiatMxGwez9dGfjuqDK0Avo0J2DebkXwEi1k8j8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a25ea8d93d0c5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18993,"size_decoded":3724,"mime_type":"text/css","magic":"ASCII text, with very long lines (18728)","md5":"d1cd05ec0c7e29d4eccbce95861211cb","sha1":"8eb2daa611b706db9a53de2f8277be13382425d4","sha256":"e26c7f96d3bc4871649d602ee3365c9f14b2499a61fb466dc579e17726ae4e32","sha512":"b8e975c0132faa1236d815fece6bc98ddd0a0955c158ebd14cda93284a855a5509a03842ac7f4465793243168775f0e760f7da12b0198b40f7fa2ee65c95c955","ssdeep":"192:8FaNv/lSSyJVCj8zfi5oZuDN3/BEwdJ5c:8Fa1/lSvCYfi5oZuDBJ5c","tlshash":"7d82622c17003057e6330f1a87d99778c725c9939e4358ef6640ee48c7bb96a32af766","first_seen":"2023-04-06T01:48:05Z","last_seen":"2026-08-04T15:41:04.925311Z","times_seen":1323,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/images/5-4.jpg","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.268Z","timestamp":1785858016268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/images/5-4.jpg HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: \"697b9c27-b9d6\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sdGsITp%2F49VvU6MfkYRo8nsQgcEFgkxzu%2FB5GoIeuIfPppwHs72p0C6X1%2Bl07V4JA4hLgRuCjdiIpwtFvxpE7UbBGxj4xlcoEZs9QCsDICbfsKpYijW7ehuPDkD%2FL4RGmt03nhcIbYA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a25ea8d9ad375697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 47574\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47574,"size_decoded":48307,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 330x450, components 3","md5":"c1fe82943fef634e6e8f2921c1893056","sha1":"8071cb26c2e0077ede827a9b385d7a496eaf07ca","sha256":"00edc4ea5a53e7adcdc3fcef9cf34ac26649d336d998e310659c588bd68e7a32","sha512":"443fedd8ba34f498a79edfe8025d07b4b6e47b1ddb94e5bf66030bb3a1bd93248fbc1c40d500e6f19919d76ae8641ab9c5b3febaee62d3cb71b2c77f28b6e9fd","ssdeep":"768:ICDZjHyOw0SSmlK/EEhDQQ8p243Yvr+CA0F9V3BzWPOHRvIAtF:IiyOw5EhDB8pl3Yj+CA0nxZRvIAL","tlshash":"ea230164d95a9334e41aa330c8beb31407475a7fe98db745a8baf51e3c80c5e518e33b","first_seen":"2026-08-04T15:41:04.925897Z","last_seen":"2026-08-04T15:41:04.925897Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.754Z","timestamp":1785858016754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://recovereverything.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29968\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 07:39:13 GMT\r\nexpires: Fri, 30 Jul 2027 07:39:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 460863\r\nlast-modified: Mon, 08 Sep 2025 18:00:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":29968,"size_decoded":30781,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29968, version 1.0","md5":"50220d0057de0b9e5dc8b4fb36ee97a9","sha1":"4d0c1135f6767c3945e596c25abf69919ba4b646","sha256":"8d1d33d6beea5a722b8f336d79c61c07405949457e37b5e65454c72dc10aba1a","sha512":"e305c7df33c9c99a62adc9637eac538520d846fdafffa738095667c8eb5326519564899211099ae4f39b63fb6d62f9366553861f101d797063447a61be8d1df4","ssdeep":"384:u8H1OIFdhnzrgxPfQPhTI67jde+X+7LEF15v/+cVur4KlRNME5BSwkR42VrSebai:3VOargxCRdpOW73Q/NMEqw8XrS8Bz","tlshash":"f3d2f2784521eddf2ecff7167a43bd92208be67b88f9268d92c5601b21360342c1dde5","first_seen":"2025-09-09T02:39:13.146786Z","last_seen":"2026-08-04T16:29:03.048985Z","times_seen":9362,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":16,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/f1/static/js/sendLeadX1.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:17.391Z","timestamp":1785858017391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/f1/static/js/sendLeadX1.js HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Sep 2025 09:26:08 GMT\r\netag: W/\"68cd21b0-2609\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jO0FxHpy%2BWsF%2Bd%2FCucgCtd79F9NXJpyAgyOnThNflmLlL4wjYjNXIJ4ntCQiLKv%2BqijcgcD8DdRG4za9wNN%2FlUYsEmg5T3NraOU1s6sIeBsSSoqTirFOnemmsj1sy%2F6Gz8isYH%2FjLOo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a25ea8e0bdb15697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9737,"size_decoded":3418,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"3510e4ed6a202bec75046c2d1d603644","sha1":"bafd076f1da240bc3bdb044fb82c7d135a49f198","sha256":"0f69bc21cf1ab2c499ecf176392a41ae733693dfca3d83deddcaf86836e45ad4","sha512":"fcc7ba695629272cce53add9063d83b95adc59aa81006ef336a3a191e18cb3279809fe3bf7bc47f04aead93f9ea35436c746ee2325175e7eb1394a8bcbcc3cdb","ssdeep":"192:gPt1rYQHyP7xCWJz7xWM0wPCUKmQJ5GFs+AdP9P2Pmgl6z5WpkejSpif:qtqQB2D9aUKmcoP+B2eI6N2","tlshash":"6512516836b30274062751bf67df920a76ba50036c05d894ff8c478a2f94d1a67f1bac","first_seen":"2026-04-10T15:06:38.070778Z","last_seen":"2026-08-04T15:41:04.927665Z","times_seen":4,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/favicon.ico","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:17.858Z","timestamp":1785858017858,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Tue, 04 Aug 2026 15:40:17 GMT\r\npriority: u=6,i=?0\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KjspcvF6f4Fzh8eCTC3%2F8WurcNEItG4hlOeaiDhndOlK%2FmEb0Wf7i8ljxzuQbr%2B87YJ87htoYay1gmBO3ZjQCwCUvC2OeW4FDKQ2%2BdjpaMU47v4eCIRr4W8SQA9RCfgHMh6%2BhV8%2Befc%3D\"}]}\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a25ea8e39dd25697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":736,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"9d1ead73e678fa2f51a70a933b0bf017","sha1":"d205cbd6783332a212c5ae92d73c77178c2d2f28","sha256":"0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5","sha512":"935b3d516e996f6d25948ba8a54c1b7f70f7f0e3f517e36481fdf0196c2c5cfc2841f86e891f3df9517746b7fb605db47cdded1b8ff78d9482ddaa621db43a34","ssdeep":"","tlshash":"a250000c0003c3cc0000003030c0000000000300300000300000c000000000000c000c","first_seen":"2023-03-08T03:03:03Z","last_seen":"2026-08-04T16:43:26.364026Z","times_seen":88522,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/css/owl.theme.css","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.196Z","timestamp":1785858016196,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/css/owl.theme.css HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9pbhahoI5dUFWtc7Q3xJs7CYMaOw4hPHhl4J7rgqWWMzcEYkCoEYAmpFleXVveB9pWbJBZXFZemy8dJnEPrWTk8Ui%2Fgfa7VS%2B%2BgujunvwHs0F%2BFZF4oeb3KRDnk8j0ztZGQNJ1LK7EA%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"697b9c27-41f\"\r\ncf-ray: a25ea8d93d095697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1055,"size_decoded":1120,"mime_type":"text/css","magic":"ASCII text, with very long lines (1055), with no line terminators","md5":"8c6d37547ed84cbef6238d1d93c10489","sha1":"d2ca10ebff9784a7fb75545ba6352a7be2a65ee2","sha256":"20ef53019af4cbfa0a182d8f2791d2fbec540625555ed842f768961166011b8f","sha512":"7f05f43a51b51da19f572b51c4b5e0e61ee747727385583284405262146ddc4ecc01d7f4af200f11ce55e7d5871b95a383e68200eae8263a9a57e830e70f8995","ssdeep":"","tlshash":"a3116dd4b20c322d7033c28417c885cb9a5cb177d22916ade4cdb520c78ae45397b79d","first_seen":"2023-04-05T15:48:42Z","last_seen":"2026-08-04T15:41:04.929243Z","times_seen":3104,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/css/core.css","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.226Z","timestamp":1785858016226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/css/core.css HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: W/\"697b9c27-1879\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dEr05XxF28r%2FxXw8wwp9W8qCJspoEjr3YK2WV2Dciifpwk9HGKIwHvFkvCQMWism9BKRFLsuLADMAktyFwyGH%2B%2FhJeD4UeWDJQFT2GDO2c3f3%2BeSHCfcbtgJ3pmVLEaTPExGQRxFY7Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a25ea8d96d1e5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6265,"size_decoded":2056,"mime_type":"text/css","magic":"ASCII text","md5":"4770178085872a261fbc53c5f300e731","sha1":"9dea7e5206165632abf9a467e845cd89a4d042d2","sha256":"bc716df2a755a49ded2d0ae999e09e8dac8d27c669e0a0ddc6f61689268241b4","sha512":"417ca290df59abb6d66c4f044da4d00e7e8270394bb8737ed28077a41e9c3c5ec8b8e4998b4f78eeeeab20fe6d79f7a8973e204284570fb6ac783a174da582fc","ssdeep":"96:dj3vfej753aB/PLsKz5rofbZSxA3CLy8p6jYDoYyZ:V0mLJ1u8p6c0Z","tlshash":"33d12412fbe71908312181472487fbbe7fbd06e06789ed354a5d37ad6a872f350a2d08","first_seen":"2026-07-11T21:40:51.381628Z","last_seen":"2026-08-04T15:41:04.929736Z","times_seen":4,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/email-decode.min.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.233Z","timestamp":1785858016233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/js/email-decode.min.js HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ugc5WLGemXn86PviH6JehM6cgMfakHsGsQQJdx3hAc4r1VL1nIYkO4V1zzviwEikfZ4EyzBWkAlyhanw9xrRUdKdN4GOCFXR8oGHDil0HawP3IBFnKxQ2uODqZJtLwAGNpA9eHKjNS4%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"697b9c27-4d7\"\r\ncf-ray: a25ea8d97d215697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1381,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-04T17:51:06.33694Z","times_seen":414405,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/images/4-3.jpg","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.261Z","timestamp":1785858016261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/images/4-3.jpg HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: \"697b9c27-643d\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b0lSpUxAY4PVvLvInBdVjvA5tRSqtqu0oyyYLvRanFlAQDk9XLaVqmWUlazzwwY4LsXBRGd1ElTr9L%2BaF%2FlLqtZ%2BE%2F0uj%2B0uk0fUV%2BKZHwVyqAcOHEc67BnhMG0m1RzYqG8ly1vMDro%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a25ea8d99d315697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25661\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25661,"size_decoded":26398,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 810x385, components 3","md5":"405720cbe44f3c5764d61db75834d3e0","sha1":"e62d62a779e0cdc398b35ee8dc01d10444a362c0","sha256":"6c2bf89c550ef53590b7db61add5fc0f6dd2f770eba7299027c4aaad279dc9be","sha512":"1a245d8d850da871c6b4473f7b30d6ba435189ce37bb345390d4cd3058f25051eb40e35c4a81331dd46bd0eee858bfb8e2c47544ddf4a0522c312039f4823415","ssdeep":"384:B3R3ypvkG9M03FxQbgvFbSsWAB8lBmABOY6xuG51lVzvsZ/jzhWebP7hESoQWZv3:p5nGlFGbwFli/jg51lVbs7JESonnAY","tlshash":"aeb2e0ab0bb4dfe9f2ca1bb61d9c4b00d240b30cb42adf543873ad4e35656788a20617","first_seen":"2026-08-04T15:41:04.930364Z","last_seen":"2026-08-04T15:41:04.930364Z","times_seen":1,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.853Z","timestamp":1785858016853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://recovereverything.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29968\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 07:39:13 GMT\r\nexpires: Fri, 30 Jul 2027 07:39:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 460863\r\nlast-modified: Mon, 08 Sep 2025 18:00:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":29968,"size_decoded":30781,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29968, version 1.0","md5":"50220d0057de0b9e5dc8b4fb36ee97a9","sha1":"4d0c1135f6767c3945e596c25abf69919ba4b646","sha256":"8d1d33d6beea5a722b8f336d79c61c07405949457e37b5e65454c72dc10aba1a","sha512":"e305c7df33c9c99a62adc9637eac538520d846fdafffa738095667c8eb5326519564899211099ae4f39b63fb6d62f9366553861f101d797063447a61be8d1df4","ssdeep":"384:u8H1OIFdhnzrgxPfQPhTI67jde+X+7LEF15v/+cVur4KlRNME5BSwkR42VrSebai:3VOargxCRdpOW73Q/NMEqw8XrS8Bz","tlshash":"f3d2f2784521eddf2ecff7167a43bd92208be67b88f9268d92c5601b21360342c1dde5","first_seen":"2025-09-09T02:39:13.146786Z","last_seen":"2026-08-04T16:29:03.048985Z","times_seen":9362,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"104.26.8.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:17.504Z","timestamp":1785858017504,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 05:11:37 GMT","end":"Sun, 13 Sep 2026 06:11:34 GMT"},"fingerprint":{"sha1":"CE:63:0D:F2:C0:D2:04:93:CA:AE:0D:AA:ED:9F:31:01:7A:BC:69:40","sha256":"0D:2E:E4:8D:BD:B6:76:95:B5:BD:B8:C5:CE:61:98:B9:6E:81:B5:4B:16:5C:C0:0C:C9:FB:54:0B:B4:A6:7C:65"}}},"request":{"raw":"GET /json HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://recovereverything.com/\r\nOrigin: https://recovereverything.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 04 Aug 2026 15:40:17 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: GET, POST, OPTIONS, OPTIONS, HEAD\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://recovereverything.com\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BqbzBDROjaQ3Cr%2BIrn1UlRQBhJ4MzjWHxitDhwVCilk21Kd7ONZEEY6AQYYiGkT3OwKo1IBFUYBzuh8wCOudkl6neVzf%2BRAp0gVkmwOnmtz9sszdCt5uutHL\"}]}\r\ncontent-encoding: br\r\ncf-ray: a25ea8e17d3a7127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":742,"size_decoded":2108,"mime_type":"application/json","magic":"JSON text data","md5":"c072daa1c2cda30d0f3f81ca812ae319","sha1":"d5445a8099ed4730982271c1ed6f80fa78de8c14","sha256":"33c5189253a521d59112bc6a96710c6dee86b2d05e85e945f5bd56ac736c425c","sha512":"84df51623e52eb7458514c9b46c5fac80f3293a9123643f4f411ee7fbaec100ce117dd72327d9a9c16254ab67b90c36d536b902c003b5a10c304974f44478743","ssdeep":"","tlshash":"f6012f68e4780e7b9cb813587078690b103422176e523a8e7bc0a74d0f8d8bf30b035e","first_seen":"2026-08-03T13:31:59.23668Z","last_seen":"2026-08-04T16:19:23.860283Z","times_seen":35,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":226,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/css/themify-icons.css","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.186Z","timestamp":1785858016186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/css/themify-icons.css HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: W/\"697b9c27-4024\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Us22%2FziKf2qw012GZf%2F9FR3oEJO8ZlVPZE%2BfRfpm9pbUIVsDPSeqCfUMC%2B8R4jJmgJiwbp097%2FJ6l4o%2FZLBExEcvcO%2F6f0VCvGACWTY7ptg7C0LcHI2b%2BkCo00gqQWv4cAmz9Pio4Pc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a25ea8d92d035697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16420,"size_decoded":3727,"mime_type":"text/css","magic":"ASCII text","md5":"53ddd77764d68b214ae2399da6d1e947","sha1":"b34472d70f84824ae4ade606956163dc721488ed","sha256":"7ac14134b96af9c17cf611e5e16ec5622e6789cf8c5fb01ab128210ffa9e531a","sha512":"07b2382f5849ea84c11dfdc6ccfee9625e326aee170bc3a373ee8ecade41bc80998d3bf33dc9b50dfb13dcfe3ad2a6a13afe1d2d797681bc3fa0f0b9a4c58ed0","ssdeep":"192:vjl5yC7huMqJ5UmejPz35E3r4F5cvOAtH:fysEDy+3HvJ","tlshash":"4f72eda49d0f3caa6795e0c16b447a195b0da738de822c6fd113bd3cbbd3a11d6c42d8","first_seen":"2025-06-29T23:16:41.167737Z","last_seen":"2026-08-04T15:41:04.931827Z","times_seen":4,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/css/style_1.css","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.208Z","timestamp":1785858016208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/css/style_1.css HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: W/\"697b9c27-43513\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rV93jnCRHvWy3Y5PnwH9RKLzHrs%2FPb%2BDfSDDkvYV5G1HzvhK6THMBxg2qRhUNTXFz2FoBA2znEMBSnGRD2A9b64djOEK%2FT4h%2BDCnQdP5UULYUi7C5ZRCle9TyV0OOkdM3vu0G8JgNYo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a25ea8d94d125697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":275731,"size_decoded":32637,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"d4caa73efee89bb36eec49ccf051752a","sha1":"36702b920baee775ae046e6c6db39da1d0ecd107","sha256":"47718be6740af0cb7ebd47666d51ad828d97bc842d3f34d0c95cd63a85eadd0a","sha512":"9a54fca4976ca5c1400db00561433a0ebb3b22d3d6dd1e463ccd0d92fd558fc70aa87b42a6a85b443fb6c45239390cabe9b24d1f964597ff736d522f9880c51e","ssdeep":"6144:A/ZiV6Mi4jH7Ny93uTVKbyV5z7ViDisMrVx399C0QMQp+LBnAMn:A/ZiV6Mi4jH7Ny93uTVKbyV5z7ViDise","tlshash":"4d44549b79a11504a80bd436754b76d0f358a812a71fceecb5f9601c9f8c2b106b7bce","first_seen":"2026-08-04T15:41:04.933063Z","last_seen":"2026-08-04T15:41:04.933063Z","times_seen":1,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/css/style.css","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.209Z","timestamp":1785858016209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/css/style.css HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: W/\"697b9c27-1336\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jb11Dh4AuFt0tMhvpvoqSmInWfw0fF8rJOu84iHydElQrbU6Yo%2FjzBCIGopR%2B8aZCbx%2B8mKsYEehYDuDBQi5lJyjPAM406RNhVC4fkj6uv1h0LpL2I%2F2t4nXtj%2BtsMhuMcuPohLu9wE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a25ea8d94d135697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4918,"size_decoded":1950,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"06a469349f37ed54f84bc4c0c8b18222","sha1":"3b0740ec0d28994608bca30bdfd4ef5ed97f4f67","sha256":"87ead39c6a889e5f913b3b6b70be75f7b173a6d3d9a78846fe9304b449fc5ccb","sha512":"56fab1bd26492d940dc602ba8de77c360035cd3a1bf4505fc5260a6b87070713d2f61d53cf65064d76a36cc28eb169f20d6741462a3fb91ba450098f7f58401f","ssdeep":"48:kZcs5pvbr5pWxY5pUZ5p88OeHTNXw0cATgAjJhx2xZ2L4TU2+v+hT2GBVuI01dQn:0Fhb10xe2je8OeHWyvhxGd+Wh2cvM5u","tlshash":"7fa1df83daf70849745fa4152fbb5b69727d4043e20ecd393a9c7298df891e9c163b48","first_seen":"2026-08-04T15:41:04.933888Z","last_seen":"2026-08-04T15:41:04.933888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/libphonenumber-min.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.214Z","timestamp":1785858016214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/js/libphonenumber-min.js HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: W/\"697b9c27-2a003\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j8fjStr64rVWt7x4VgonnUS6xygaWodKmMoBfMS96BoQ8i%2F0oD9X2%2Bp2K64aryRgJl0MPtiH1hG5Dzvfv752tIhVw22kwqb%2BEYjvVFV2Psa%2BQ31AFSjKoWQelvzSDYf0G%2FVWrE0RrXo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a25ea8d95d165697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172035,"size_decoded":43019,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6dc1adaedd1f27185e0f7de4f1741119","sha1":"74a848ff9ed1374e77ca7f172613e0659071d8b7","sha256":"2a172e1544bd9f7f7bb630131e341ba5522d7f2c0cc9ae775ad8bc15e68f2e9f","sha512":"ca16329a1aae33d1cf5990ce5039c7befd9cdbf9c40246bd76e428b7c826b8fc295f849e054ceb61592b536027f2809311768fc9df60ddd464707e49aeb7f763","ssdeep":"3072:TOe03o4Pwjx2YpMF0417ONanqhHKViuiv:TBxppMF97ONaOHKiuE","tlshash":"dff3c9f77640bb6774b13b188e1ad24eaf9c9c51dc98a08cdbe3d8cb5d61822207db15","first_seen":"2026-08-04T15:32:03.962427Z","last_seen":"2026-08-04T15:41:04.934656Z","times_seen":3,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/swiper-bundle.min.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.236Z","timestamp":1785858016236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/js/swiper-bundle.min.js HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: W/\"697b9c27-25be5\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KCAjT8SEs7xVx2i31gTiwTV0R%2Fw1v4fGsJQoUh4at7PS%2FKSuJwd%2B6Zolp4NSyI9VWg8t6F2ow3daw1iAmEgaaBDEIZRUStqL7COlrr2wdX26LKO8P7sOgxUkos7ifcCoRomik9L3tRQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a25ea8d97d235697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154597,"size_decoded":43836,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65281)","md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-08-04T15:54:52.130252Z","times_seen":26581,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/images/111.png","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.250Z","timestamp":1785858016250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/images/111.png HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: \"697b9c27-337e2\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m6oiaan%2FHUwBZ9xNnLDHaWd1ZAhv7lavFXtF%2BkC2lx%2BbdA9PI9ElbS61RbpZiVFQuUiGV6FbcCRYgU5pkbKrkNO0GHrmC4p9HAbi3y0aqE2Wz7YboVK3m0%2BB5%2FnxOOFdZMOHF4dpz1Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a25ea8d98d285697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 210914\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":210914,"size_decoded":211650,"mime_type":"image/png","magic":"PNG image data, 643 x 872, 8-bit colormap, non-interlaced","md5":"c56211d1753f9952ba22db9eb47c64f3","sha1":"e278181ad48fbd401f79231b822ca622a468964e","sha256":"5ac459ae0b046d4b2ea4b4ad556a57a9a020a9fb0859d14e790c496d716b67ef","sha512":"593ae77c90b0b271e7a877151c821fce660583af117b589fbccc2c893497ac51cc7a4b19448859177c670f4c149f24d5cd235524471266a4087d9fdcea662b37","ssdeep":"6144:dybzPQMvhWZceS/88WUcVeGH+lhRvFi3qzxpEUt5b:dybbWZakP8lDFDzXB","tlshash":"aa2422ae58e67c5382d6e87a0fee11b3776452d40fb78a2089204887653cfbd7361379","first_seen":"2026-08-04T15:41:04.935614Z","last_seen":"2026-08-04T15:41:04.935614Z","times_seen":1,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/images/5-2.jpg","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.266Z","timestamp":1785858016266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/images/5-2.jpg HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: \"697b9c27-a2bd\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m6v1hQe0Hjd%2B3xBJ77c5g4Y%2FH6do8%2FGdYHDy6RPZZ0vYiDFYJjaQNeuCNXa5x%2BV1b5KHICJ7B9ZeBuXQKXHNvU6%2FsTV%2BzfJejN9WwSkMu1jwnOHBVec2%2BXDycau0wY%2FEBO7x6DCFNx0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a25ea8d9ad355697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 41661\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41661,"size_decoded":42402,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 330x450, components 3","md5":"b61ab49622875b7f292853d62c8cb1f0","sha1":"c85f625f6f190bbfc0abe5d5e326497f357375c5","sha256":"3ab53892a88908baadd605c9a8453f228b39b12a446cfb095ae720b6ce6f42a0","sha512":"4ffde6a324ecff879f035a547211b04226d8405ad396ed19b12eb6364d8d5bee3bc27ac6e8b633338dce539fe502c0eeee3d13b4bcd4db430d2084f7888a8914","ssdeep":"768:Mdd//a2j4ye9643YO7iMZln5nhYYxmJ9gjm+oiKbP7eaFLkGdSt+01nWGDuUqh:MfaFyt43YO7thJWujf2T7P2+EWN","tlshash":"bb13f14fee0a10adc15a94f98433bd6903ccf9c5ea02b6b8176c3e4765725be608bf04","first_seen":"2026-08-04T15:41:04.936491Z","last_seen":"2026-08-04T15:41:04.936491Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/css/animate.css","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.193Z","timestamp":1785858016193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/css/animate.css HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: W/\"697b9c27-12bef\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZeUSqHR4KuqPuDk1TqtrKFoum%2FxJzDl0OPoy83joRsUwfteQri6hlZfFpedcxrnEoMaI6aMtl5%2B724i25LXvSxCd4uZHc3Zph1HUSY38%2F0bPoqMGbY6ze0Q1RxtHi80yqAiTrfGs%2BGY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a25ea8d93d075697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76783,"size_decoded":5510,"mime_type":"text/css","magic":"ASCII text","md5":"1a77c17460bf0023f6f18bd4c32f23ed","sha1":"4eeff4d225c7317b852d284ded274535946e6ef0","sha256":"9a1a099a4cb205b5a29d47b4ba845ab5a38d8f76d493c1d0152afa64e0c7d45a","sha512":"3d50fee79609d3b7d6f7bd5fec701ab6deb26dfd41e9acac313484918745264531abdb995de93f95bdbacc6b37d6938082bc39d78fdae123e8301667e06b5776","ssdeep":"768:yHuauafqftulucfwfk+1fHf7SpS/fjfWQrx:Efqfofwfk+1fHfJfjfWQrx","tlshash":"5d732f6d2991118453234a5d83df9e68273ce573182a9cef73c2588bdf8afac67c5207","first_seen":"2023-05-17T15:24:15Z","last_seen":"2026-08-04T15:41:04.937289Z","times_seen":1302,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/images/4.jpg","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.257Z","timestamp":1785858016257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/images/4.jpg HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: \"697b9c27-ec5\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RGrDSz0c5qRaUrmbBImsTym%2Bx2zYkE%2BzN7blglmyybJmn%2FgFOZy9GMhzzTyyhmIXn9n9OdQ9sknhTvEOfWKomdwozBhB8XByK6xxGrevUOUnD9TZTz5YfQN6YTARDcol7CPKmLSPNBg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a25ea8d99d2e5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3781\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3781,"size_decoded":4510,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 70x70, components 3","md5":"8ce4f0db5b912f8e19c4d86fc3f9211c","sha1":"f49190acd2050e8f8877c9ebf73dd2ea1394a8cd","sha256":"df6b20c4dddd524c3a4cbf36c7743f68bc5351f7b257e1deeffb4601579b383c","sha512":"a62e97929e43a6cf00e93ba80b0f5c15d41373e2d24b5ff930848f7ada599d54357f9ca52d9f83956043d14a5e9774fdacf56a12008e29ab667e7f4a52d398b5","ssdeep":"","tlshash":"f3716e94ff833b5fdad10ebe52c452099aa6d2bfe61052d974803830137e761b60515b","first_seen":"2026-08-04T15:41:04.937765Z","last_seen":"2026-08-04T15:41:04.937765Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mulish/v18/1Ptvg83HX_SGhgqk2wotcqA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.855Z","timestamp":1785858016855,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/mulish/v18/1Ptvg83HX_SGhgqk2wotcqA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://recovereverything.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15948\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 12:56:28 GMT\r\nexpires: Fri, 30 Jul 2027 12:56:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 441828\r\nlast-modified: Mon, 08 Sep 2025 18:00:30 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":15948,"size_decoded":16761,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15948, version 1.0","md5":"3ecaa05024bdf84d18872efcad983616","sha1":"a943e80f24c9fa4dfce7fbeae43765ee88df1671","sha256":"270a9552cb39c2aa23054f70bf8c770bc1a9c2d6e0df2841bad89f6597bcd483","sha512":"4f03dbc8551a3a25d3e343d78b6ca647316b9c7ab75612e6dbcc411636d1a05f7c77b14db4f00dccf74dd0b4d260ad98008db15a534b52923d3c450d957b5293","ssdeep":"384:Y8AMxh57n1kQWFTENAJjCEJ7Dy1Weu0/LVi3c4:YNMnpn+7TE/EYvrLwZ","tlshash":"2f62c0a6b418113c980a4521e30cf6d4db1f9ea4f6fda0fdfa1e56471570296f088f17","first_seen":"2025-06-14T03:53:15.341089Z","last_seen":"2026-08-04T17:31:45.301654Z","times_seen":339,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmseriftext/v13/rnCu-xZa_krGokauCeNq1wWyWfqFXUIJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.918Z","timestamp":1785858016918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/dmseriftext/v13/rnCu-xZa_krGokauCeNq1wWyWfqFXUIJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://recovereverything.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 28 Jul 2026 19:11:48 GMT\r\nexpires: Wed, 28 Jul 2027 19:11:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 592108\r\nlast-modified: Wed, 27 Aug 2025 19:22:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":11000,"size_decoded":11813,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11000, version 1.0","md5":"18d5554c0f64bbf60028d7d80265a228","sha1":"655e314d999f89a46bbac18eb4d162d044bc2c7c","sha256":"b037b349135d76c69b6f2ab1604a54e67f2bee1c3b32f8370e83906b0c8473e3","sha512":"449147991a00ba7ff78cb8b6582b65ae73de6de60534bac2f5162208a5de8428a206f29978b9b1700af2b66365411d3385fbf54ae729991ce6c5c980f1c269c8","ssdeep":"192:ZviC4ihahjf6MY8Vk1WvgULgT1ZxuySxQLfCWljqXlwNP0inxcX1B2iRW0pN:ZvikSeMrBYULkl3vJlclh","tlshash":"3232b0350ee0a35fa52d00e15d2d8d3406c594560786f75ff83feab9ad02c0667c9f26","first_seen":"2025-09-28T19:40:10.987731Z","last_seen":"2026-08-04T15:41:04.938655Z","times_seen":14,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"104.26.8.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:17.022Z","timestamp":1785858017022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 05:11:37 GMT","end":"Sun, 13 Sep 2026 06:11:34 GMT"},"fingerprint":{"sha1":"CE:63:0D:F2:C0:D2:04:93:CA:AE:0D:AA:ED:9F:31:01:7A:BC:69:40","sha256":"0D:2E:E4:8D:BD:B6:76:95:B5:BD:B8:C5:CE:61:98:B9:6E:81:B5:4B:16:5C:C0:0C:C9:FB:54:0B:B4:A6:7C:65"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://recovereverything.com/\r\nOrigin: https://recovereverything.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 04 Aug 2026 15:40:23 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: POST, GET, OPTIONS, OPTIONS, HEAD\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://recovereverything.com\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4NFLaEupkuQyx5Wi8Rt92OMkT0V5l1cl2klTqLjiU93wbvjjHtPi5u%2BlaKnTNCDTJo%2FnWQ6ucToSJAt9XOfHLu8SskAfMkHB8ACIv9e2VpxA8itOiaoDyW0V\"}]}\r\ncontent-encoding: br\r\ncf-ray: a25ea9068ff87127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":742,"size_decoded":2106,"mime_type":"application/json","magic":"JSON text data","md5":"c072daa1c2cda30d0f3f81ca812ae319","sha1":"d5445a8099ed4730982271c1ed6f80fa78de8c14","sha256":"33c5189253a521d59112bc6a96710c6dee86b2d05e85e945f5bd56ac736c425c","sha512":"84df51623e52eb7458514c9b46c5fac80f3293a9123643f4f411ee7fbaec100ce117dd72327d9a9c16254ab67b90c36d536b902c003b5a10c304974f44478743","ssdeep":"","tlshash":"f6012f68e4780e7b9cb813587078690b103422176e523a8e7bc0a74d0f8d8bf30b035e","first_seen":"2026-08-03T13:31:59.23668Z","last_seen":"2026-08-04T16:19:23.860283Z","times_seen":35,"resource_available":false,"data":null}},"time_used":6649,"timings":{"blocked":21,"dns":0,"connect":2,"send":0,"wait":229,"receive":0,"ssl":6397},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/shBrushPhp.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.221Z","timestamp":1785858016221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/js/shBrushPhp.js HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: W/\"697b9c27-147e\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SJdzbel5YgMmKxxTkTwEhCdySBhIWy%2BL9LRCEQDWErk6l2JC12Yt47C8pf%2FDYLb2LNm6dUjIN5mNRWyBSYMWGfzyHKkPUdgCEHdIX7OjhhgGDak3UhRGUkSws90mTsptruvfT0RAKLA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a25ea8d96d1b5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5246,"size_decoded":2844,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0a52933147cb95e4860a81c6c86863f8","sha1":"222f0605fe9de44d8daef71d8fc94f4b3e72e398","sha256":"eeb0f65854972899fc99b17cf25ea68831cfb238e1e41654135c69b8a6f9fd99","sha512":"bbe22049c89e7f62c6dc4b2354af75301d58f4a2bae097e13e0584ff5e6956989e2190b5330e117f7cdb824ebb6c55a84f4e901c94be5d84404bb476485a6a4c","ssdeep":"96:dj3v+SxH6N6vpnbxcc1qA5I7V/0hu1soUkLTf0KseCuBP8Po:VzxHUUq0I7oysjkLb0KrqQ","tlshash":"abb1d7d4592d347d44d164f6aa0d908bd92f81f3339a5000bf3a8c9d2472c8e60b6a7f","first_seen":"2023-03-07T15:19:59Z","last_seen":"2026-08-04T15:41:04.939701Z","times_seen":47,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/images/pub1.png","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.879Z","timestamp":1785858016879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/images/pub1.png HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: \"697b9c27-5950f7\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6VH7SHxkZDhXYxle3k04McEpaR%2FW0QdO93qs4nJfE3O9lbuwKIvnOrtzPmrpzHEZLjmv8ePOeDXzsoDaZ4IGJggW%2BCwBcT5PuUqM4fUQ10td3aKK9r19TK4uGU0qDPCbSLRpVfmpcm4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a25ea8dd7d805697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5853431\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5853431,"size_decoded":5854163,"mime_type":"image/png","magic":"PNG image data, 2048 x 2048, 8-bit/color RGB, non-interlaced","md5":"9b3c6b8004bc5a9249a9aaa740295532","sha1":"f5556c3245d7b751232dcfd1abc51b170e88c97f","sha256":"68c327c8bcfd118c8e48e80c78c8d4ccfbac1db4d076cf41f853ef99812e9848","sha512":"490735126f4a448b0491a4e4e022b4bb0da71b209a076056829a179b1fdf9cc9a028f042a1f621c832a89ed7738ee60ab3f15acbcb6c3d8fdb53801ddd6f01f8","ssdeep":"24576:UgtpcYFAAWD4445duM0cpSQHhewGqwgK+TAZ9D1vmi+jdlZ6:Ug29AWD945duMrpzHNwh+TAf13","tlshash":"e12533b98a3ed8a19ddbe3085034e6089fbdf014de9da54b98848dfb215c4d1676b30f","first_seen":"2026-08-04T15:41:04.9402Z","last_seen":"2026-08-04T15:41:04.9402Z","times_seen":1,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":382,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@24.6.0/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:17.358Z","timestamp":1785858017358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@24.6.0/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 12228\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 24.6.0\r\nx-jsd-version-type: version\r\netag: W/\"7eb9-DwIZYdY4qwJ9XVN55TM9FHqGDCo\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 04 Aug 2026 15:40:17 GMT\r\nage: 2949368\r\nx-served-by: cache-fra-eddf8230125-FRA, cache-bma-essb1270047-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32441,"size_decoded":13003,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32073)","md5":"a7ef887217c08da902b6d070ee8f6a4b","sha1":"0f021961d638ab027d5d5379e5333d147a860c2a","sha256":"5b01559a5690b6520402ac638603d106e751e7333165bf6a8b5fa0e333865912","sha512":"fec44594545b72f39b3a8fd2c56f29be615978c2ef005ea16a3457797d797a43e04f882e5e77cd4a32c2f7c2bf4e0d8e6d480a5fcbe7f7e4e1e7f9861f365b13","ssdeep":"768:rG03Xlqn/kiImXpwJxO9SfZ9FFSjV0de24fVXub6:rviIy9SAV0d0X9","tlshash":"3fe2e7aeb3656b37abfd82a270a50503af7f79444604043d78ac8ede1289ed171f5b34","first_seen":"2024-10-22T10:29:57.923796Z","last_seen":"2026-08-04T15:41:04.94135Z","times_seen":171,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/shBrushCss.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.223Z","timestamp":1785858016223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/js/shBrushCss.js HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: W/\"697b9c27-163e\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HY6JGu2AIwHjg64YM8ScATdDjxWSbiR91jcued8347PxheaKDGyaFSSN6X3ZsIui8A31IkpdKOrn01zZeJJ9vJ6PVnMaXBUojwifeJk6aNYVCf3f5jpQL%2BbomBX1JmeZRMzL40Ofdho%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a25ea8d96d1c5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5694,"size_decoded":3136,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a07a03d9b8a586105267106ed629339e","sha1":"dc14023bd87bc94ec6cb1f4f1b3570466bb6394f","sha256":"d3c494b68b64e24bdc66748471fe73d49f0d5402e02029fd6acad00e1a1bd5b8","sha512":"b0ed29d6f06ae9e4e09fed540d4dbaec5196d293daa35b3439a871b831731f7c206f8798b41e267de3d0900f8fb3e5634a42acbf4f626e91f99c53a07bc4e599","ssdeep":"96:dj3v+SxHzw1HH/whglqOA8G9pHz4eQvwCVK9TvkUCxBMhpdC43C8Po:VzxHoHHVATRCVyRhywtQ","tlshash":"25c1d696fb4c34092447c6ab759a61d9a81cd7b2f397a175bf1dc41e3280bbc4126a0b","first_seen":"2023-03-09T22:01:26Z","last_seen":"2026-08-04T15:41:04.941865Z","times_seen":32,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/about-script.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.238Z","timestamp":1785858016238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/js/about-script.js HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=3,i=?0\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Tue, 04 Aug 2026 15:40:16 GMT\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CVeh7XQDsgYK2nHZSjLwxWCRl7Czs9R8gKxqXlHQ0F6Kg4glTwnH8CVIPkAQIJqWItlxr2PBlKsDuFks3AxaSeKNH%2F1VBUHTFySO9NRUQq1vTWw9UKeVqoJi0wzWl5EAFE13XDkdqTw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25ea8d97d245697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":661,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T17:58:19.397699Z","times_seen":17711605,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/images/4-4.jpg","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.262Z","timestamp":1785858016262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/images/4-4.jpg HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: \"697b9c27-131f0\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W7h%2FHZpQCOmhv%2FQi%2FoW263Vc1k5do%2FwatOEkN7HdbBbvrNDkCMphZpsIYN36dUNdrh91kgRyYcEzspcJo202KglbQKYU0O09B6acKPg52XXJBNpvjTm8KvMJO63hb7cGfg9FW5kaN8E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a25ea8d9ad325697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 78320\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78320,"size_decoded":79054,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x778, components 3","md5":"82c3084c39e91679112adbe633c08a41","sha1":"a649a0e5209566341015f70b5b12994657a8b48c","sha256":"e0332b4de16d1429cf692a4599fdee043f468baf1b048b8d27e2079027ff17dd","sha512":"45608d8ce5dd0d8dab17858fcfce84df44bb6dc0ff060381aaee865303bf8dd03d09b9738ecf3dfd0dc3b7e6df5d8e1a03a7ccf20af5ff102653309d01a50084","ssdeep":"1536:wnXAAJVXTDMr0ZeMGDBYvGp9mTxTzYDxFCVXngYp3o72ouza:2XzPHW0oMG9Y+p9mVTzYDxFIgYp472la","tlshash":"5b7302035b58f47fa7bfd26e321038b0b71ca74bf69d4e1668c24c2a9317664118c5ad","first_seen":"2026-08-04T15:41:04.94299Z","last_seen":"2026-08-04T15:41:04.94299Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/images/pub3.png","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.882Z","timestamp":1785858016882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/images/pub3.png HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: \"697b9c27-45c1f5\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4mOa06UQaI9mK0eiPLUUJKoTbwgd7uGTVVi9Vcqz%2BVRy7PC313FLFcVssaBzK872nbQMAqWb%2BQW1H3wpx3vGzJBaFuminF34udk78UnbPon65UFag%2Be3AkxV215kwf2iCeb2iB8mSpM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a25ea8dd8d835697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4571637\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4571637,"size_decoded":4572371,"mime_type":"image/png","magic":"PNG image data, 2048 x 2048, 8-bit/color RGB, non-interlaced","md5":"c26de76469ddda332eb5816c4b1142df","sha1":"23c659bfd22c24da5a66888297ba8ac54490bb06","sha256":"e7117f217ffca87027a61519240f90f27470910119506d600ca6ef0d26751bdc","sha512":"6b0796684365bf53e7feb02d4539ce7bf48d9e2735b24106557dae5bb6e12c466f116ffb7f4235826a27a4674e9d897a1f51c9e562bae14b34a9088f78662317","ssdeep":"24576:ecjH+NQVHBFmZwDMyEgr5kf6cuZ8HlSmMfLdPt0:e6eIHjdJreycu6HqfhF0","tlshash":"4025331a9f8f07fafd1d44b322626a742054375a93547ab33e27f0e86e4b6c0f062795","first_seen":"2026-08-04T15:41:04.944239Z","last_seen":"2026-08-04T15:41:04.944239Z","times_seen":1,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":475,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/about-script.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.933Z","timestamp":1785858016933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/js/about-script.js HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=3,i=?0\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Tue, 04 Aug 2026 15:40:16 GMT\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qfYEaChzib5StWGsImFO%2BASvUoNwOfRlLGDBibUuHpmHURKJ1C1zIuZ3AUkHTadiqu1G8snVw3Cua5CQaAjZFgiajuLdfkxHUFIfGt6cvSrQpGIOBuZ6XJArHIRK6zguKndtYFVQzco%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25ea8dddd8d5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":661,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T17:58:19.397699Z","times_seen":17711605,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@24.6.0/build/css/intlTelInput.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:17.003Z","timestamp":1785858017003,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@24.6.0/build/css/intlTelInput.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 24.6.0\r\nx-jsd-version-type: version\r\netag: W/\"403c-QBsg/WGPIFw7qhwA2rXqpFy0oOU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 2499242\r\ndate: Tue, 04 Aug 2026 15:40:17 GMT\r\nx-served-by: cache-fra-etou8220050-FRA, cache-bma-essb1270049-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 2666\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16444,"size_decoded":3446,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"31cc7c1401a02ca75f8e903777df602a","sha1":"401b20fd618f205c3baa1c00dab5eaa45cb4a0e5","sha256":"04a435c7d3f367d9816544975c24deb53596f62f801d8a1f208d4e55cc7c4277","sha512":"13f510ea338392976fc33b28c2b7392e44ee0640bda2a0f1f7a7148fdbfd4f9aa47bf24b15bdd103f3c0be1cc003dc38adb3041dff2247d4873db62cc2a746d9","ssdeep":"192:WzvSqT2sd5uVsAPRY6e5yE9y3tzEUbyhG/JYyiKdjr+/TEHRik1B3EBu:4v2sdk1RdE9y3C+Rd3+/TyH","tlshash":"f3728c2742b41d3ea75dc1ba38a2c4f5733f588a70aecc96eec8100e5c87791a5ebc40","first_seen":"2024-10-22T10:29:57.919158Z","last_seen":"2026-08-04T15:41:04.945181Z","times_seen":6216,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":10,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/css/slick.css","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.198Z","timestamp":1785858016198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/css/slick.css HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AqQhZJb0Dke%2FlLF7N7LK6piUWOV%2Btqm3iQ36zXbn5mAzlui9%2BPcw5ZXmhR3fl4fdcEVSLP9PU67LBFO9a6OXArJMxtBqpvSNqTGSA31rwyQlixCPOHECnhcl0HcniXmPoFVUmxRzq6w%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"697b9c27-6c1\"\r\ncf-ray: a25ea8d93d0a5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1729,"size_decoded":1312,"mime_type":"text/css","magic":"ASCII text","md5":"13b1b6672b8cfb0d9ae7f899f1c42875","sha1":"6e9d13342a11a8cfd9e42ee243eaeae01cda4e25","sha256":"d917660c3d6f7aad32ebc4b0012c6d0bb84a13e201a012e334bcca4b9f4686c9","sha512":"58859d7505bb6c77ecd60c080982285ee89f2dbf2008f904ed9fe0abb407937a4abb18cdb3413af119f973b220e1c5a0b995b9088bd1ae84e3d86ad2c6cbd465","ssdeep":"","tlshash":"a831f64845b389464416818d5fd7ca6d2bfff0131c29a199bacd53068fceae8e9c16b2","first_seen":"2023-04-05T05:38:02Z","last_seen":"2026-08-04T17:10:39.60205Z","times_seen":14657,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/images/4-1.jpg","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.260Z","timestamp":1785858016260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/images/4-1.jpg HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: \"697b9c27-e2e3\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rYshIGqEIKghjNEFi18CYnX9dL4b3uqLjJS96X95UzlYb88jdqxy0fkUUmpGMMqz9lY4hsaI%2B1lReIjMk5980Qn8dmWUJIlRnEmS7NDXuhXeTl%2Fesurm6SrLdTt2HtdHOFy%2B83vlWkg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a25ea8d99d305697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 58083\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58083,"size_decoded":58814,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x778, components 3","md5":"33548d8af788499a7eaee7096c7e7667","sha1":"f2e953623283cb26a8b5086d5f2578236d2e49bd","sha256":"a99951453c5fbf3783e90d71c2fd270aeddffec6573b786313c9df4b2dc9d64c","sha512":"08934e30c9e9abe76b8059499fdf3d3fae88d82e13952890d28c8812f057dd2531cff6c0068f931b6bae41a348bf42b9e122cdbca6f2d45a8092acee90eceb4a","ssdeep":"1536:hhAhe0D3AI3Kz9jreUcMrdxY00P9DkrtCPYpYu:hhAhNDP3Yv1ZxS9wUgB","tlshash":"1a43f162332d1295e6c103332aee4b796e2d7412da083fa97e41f54f6ef76c18527983","first_seen":"2026-08-04T15:41:04.946141Z","last_seen":"2026-08-04T15:41:04.946141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@24.6.0/build/img/flags.webp","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:17.502Z","timestamp":1785858017502,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@24.6.0/build/img/flags.webp HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/intl-tel-input@24.6.0/build/css/intlTelInput.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 28174\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/webp\r\nx-jsd-version: 24.6.0\r\nx-jsd-version-type: version\r\netag: W/\"6e0e-+c9J+qvl4+pvpQpQCqvUf+8x4WA\"\r\naccept-ranges: bytes\r\nage: 1055078\r\ndate: Tue, 04 Aug 2026 15:40:17 GMT\r\nx-served-by: cache-fra-eddf8230163-FRA, cache-bma-essb1270047-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28174,"size_decoded":28900,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4099564bc7b03997031ad1348e646601","sha1":"f9cf49faabe5e3ea6fa50a500aabd47fef31e160","sha256":"667642959de122c4b844afcae211c1c54c9166d262fb833beb63abc02ebd0dd4","sha512":"e1633c3f57dc45e189d3d0ac97afe6ff1f44063cdb0948632e9c7fdfcb848f92ef854b22c11a9c58c6f304b0123f34f3b0d132399ec27c95943dc3564fb7640e","ssdeep":"768:Xtn4kqql2jDWRFRS21T2r9lDAkRYKU01RENG:Xtn4kq2wDGFRN16wwYKU01RE8","tlshash":"6ec2e2f1690d6390ad635390c0f66355cdd927393a7f8ca4f96292848234177db3eb64","first_seen":"2024-10-17T04:51:34.39147Z","last_seen":"2026-08-04T15:41:04.946805Z","times_seen":5367,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/shBrushJScript.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.217Z","timestamp":1785858016217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/js/shBrushJScript.js HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SEFLsuIwhsMR0djyeHOcK%2BTqM2dmqMPR4mKrbqihlU6gKs0oWTZCR2TMSeWmk%2FGXh%2BugbYDe3bvSMDhdIdJAa58XHr%2FjYJwVS9EAMPLT1os2mSksiZwfftzIcQV0pRmKUJkRi9bEeM8%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"697b9c27-6d8\"\r\ncf-ray: a25ea8d95d195697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1752,"size_decoded":1576,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"649d4a796a55529bb15276483e065693","sha1":"fc56e52bfab72be4aa42b24c9d1d7d8bc50b10d8","sha256":"a71d37877416ec081aa9306c99fa6ae7e41dd60905838861fb717f82103c856d","sha512":"e615706e80f0b22b415538efbba99b1dd113864a24bd3e53258da62d85a3ae59d6ae6ff2a23559e36c5dad73b2b1f458057603e1302986e7080e28235397e7fc","ssdeep":"","tlshash":"873132d99f2cb05c5f9044b31559d08b9f2a87f333cac50cba4c98bd6b9272e0129a31","first_seen":"2026-08-04T15:32:03.884682Z","last_seen":"2026-08-04T15:41:04.947248Z","times_seen":3,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/images/5-3.jpg","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.267Z","timestamp":1785858016267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/images/5-3.jpg HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: \"697b9c27-7f7c\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f3OgKyKVwLvIV07D2dMY7G7osyg7Tm%2BzkneWIwZETkDy8RIJRMhWNqnk9xfG81ft6YBRQvXCLojyqV9nuRig7LbGBOmMb%2FM6%2B%2F0QVzWuf2nNv6CqvZjPMEz7czasyhjhMyhSFAl0lT4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a25ea8d9ad365697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32636\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32636,"size_decoded":33369,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 330x450, components 3","md5":"8827a7537b44e4bfd2aa5577939c1fbe","sha1":"4e5373ea0f63aefcaa8b2d4fcea52d6cfdf3e079","sha256":"091c64dff8583b3f4f186d72726b47314c86999dff38918d46219c7129b129b9","sha512":"dc49185e7109b2aaf22b01263227280805d4ad8509392039f465acfcfae578769332bb936cb5bae7989f2df2f54b2ac523cfcafecc0233c6f98a0371f9b3de3f","ssdeep":"768:7w9RLef/LSe1kM4o69YURBd9pe6yIKfwwp74WRaK8M9puz+BTT:7Zf/Dt4LbPufwiRT8Mr1x","tlshash":"3de20119d85a6f3380e181f7b04ad794eec4a987dee9ec25d0685b837d422dccc8c752","first_seen":"2026-08-04T15:41:04.947753Z","last_seen":"2026-08-04T15:41:04.947753Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/images/pub4.png","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.881Z","timestamp":1785858016881,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/images/pub4.png HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: \"697b9c27-44cd96\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KjgJIolILdKOo8kHpGGJRD2rMUKC6a%2BoFQA8BfXFxSRz%2BlqiMazfLrRyzGjSLreBcn6vJvPxCwfIIprRHgI0z%2FbzbZw1fQRSO3fg1Ib042TEIMvqRQ9YUOjBqBarqAMX2IUq2vsm9PE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a25ea8dd7d825697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4509078\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4509078,"size_decoded":4509812,"mime_type":"image/png","magic":"PNG image data, 2048 x 2048, 8-bit/color RGB, non-interlaced","md5":"ef97d886860d2de711d00a52a1352455","sha1":"7e8a1fed055981c03d7a2232f09ffa3febb95c23","sha256":"b09cb3c48db35ef8919e62518adb2649fc75354de1a7b5822c784babf3b6ae4c","sha512":"eeac478a8b819eeff54015b9d84b9ed43dfb9772ec76c647b45ee633207fed772ac6168bc99d9eb0e989ada73f88e436fd50238ce1c2aa57242c692ddeee3086","ssdeep":"24576:Tszc6vH+jS7TDed9A1FFRPGWvKvkgsUSr9FpYK256dD:Q9WjSPDedaFfPnKvzsU0jF25QD","tlshash":"a42533fbf35ee93084273314f5787583814e2e72abd6d580792dd0a5481adcaea08fc6","first_seen":"2026-08-04T15:41:04.948645Z","last_seen":"2026-08-04T15:41:04.948645Z","times_seen":1,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":331,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/f1/static/js/pixelEvent.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:17.007Z","timestamp":1785858017007,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/f1/static/js/pixelEvent.js HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:17 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 20 Feb 2025 09:34:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2Bhjp49YoISKERWFB5uID5D1vtKJHovr7PqYKpJuIedAMWVohQ1PCA8Ui%2BpTMVjmfng%2FmQolcVktPYVFzHdPj%2BxJvQq7NdAStARak68rInnRv5erJbeB2HhDn7vwizOYNUwWLf%2FMrog%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"67b6f726-30f\"\r\ncf-ray: a25ea8de4d955697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":783,"size_decoded":1202,"mime_type":"application/javascript","magic":"ASCII text","md5":"7a3ce54e523cf5501e048a690fbd507e","sha1":"9d75341fbb25f3b9abc37eb1872b835654508694","sha256":"28aa4c10cf6b915aa627292120a880cc48334cf3826d6fca1047b95f7c39b664","sha512":"b318a4010257762b69ee628875c6487d8f320b6b0f993da69e16a3db4bb273c7d061f7f9c499f3043cb55aa98fd6ee8c7d278b06ba6e6a216b52ecd4fbcb8ed5","ssdeep":"","tlshash":"ee01891b1853f0fa15f020b9b7276a562226154b3251c5137e4c80146fe0d2e7fa1f89","first_seen":"2025-11-05T10:26:42.720642Z","last_seen":"2026-08-04T15:41:04.94954Z","times_seen":5,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/clickSDK.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.215Z","timestamp":1785858016215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/js/clickSDK.js HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: W/\"697b9c27-8b17\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y0b%2Be7QWQLZg8CCppBgP%2F39%2FD8NKyuHC%2B5Rwzf%2BrBpsX2EhtwMkTmDkARQzGCN4S92sAjoPim2NKJM57wVFFN%2FsZfERNNs6Vo8eLU4SW%2BkgRadOOn0BG3s9pH7Or8AA93e7Lh3v4TiA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a25ea8d95d175697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35607,"size_decoded":15004,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13585)","md5":"5e35651f8079306f21ea674e305e71df","sha1":"6cbe4db67362425aa2dd4d03de2d54a5041e10f7","sha256":"24d86e46828b158a1a7184c43495d2b9c02f8eb1d69e5cc19c8163d371c962ee","sha512":"44f39e605e79dbc6ab1f551cf94ac0415d8da25acc81ebf94e2b11939f0fe4ebd15d54a43684dec07f3d14ba9548931a28b7186bd0f2464355fd33372abd3c85","ssdeep":"768:tnvx/3wq/+zO+FNgt47Ni8zdkIkLisQwfDKAVMbejLrzaB1YGvNi592gSHN2HXgv:t5KQzjwKWjqvCAL2","tlshash":"0af229d5b6d2b06243ea60f4406b0902f33d9a15784e84b4f4989cdb3cb640e96bbf7d","first_seen":"2026-08-04T15:32:03.921625Z","last_seen":"2026-08-04T15:41:04.950035Z","times_seen":3,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/shBrushXml.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.219Z","timestamp":1785858016219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/js/shBrushXml.js HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ayQR1%2FqJX7PtBdGYHZRA6zZccWU5Xf6TuyZ%2BsNFKbYziPern%2Bmzume40DVxmHrS9ONFnALmLMR%2B2WYnZ101E2C3qLxAgmC2xYJxFaJcxM%2BZCvKTtfnYGe5Cvv5JiF9Iv%2BMVr1Q2gtDU%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"697b9c27-7ce\"\r\ncf-ray: a25ea8d95d1a5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1998,"size_decoded":1683,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ba290ac0111d2c3f8e1ce36fbaf6a239","sha1":"311b19458f80720e59522be044709aa5c78adff1","sha256":"fb1fe49a904a4fda3ed82d2f88048b2ae88c217980b6bf2163c07f048663b43e","sha512":"4c98b73a8cd7b778ceb75389155d30c6577004d2f5360e9055dc7836e2daf4d8bca591a2d0d28ccec943f633e2ed8cf6576d2fff0b9184f53059fb61642673de","ssdeep":"","tlshash":"cb4136a4de1cb1e71f5058e6450ad0ce0fadaeb7318ec420f34d95da295071e52ed8b9","first_seen":"2023-03-07T12:12:00Z","last_seen":"2026-08-04T15:41:04.950556Z","times_seen":238,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/images/4-2.jpg","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.263Z","timestamp":1785858016263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/images/4-2.jpg HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: \"697b9c27-10c8a\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ySp0FMyc1K39dO7yz7DnC6ue7faJII8XyiN6uPMkoALDqk2nJssSC289rlczA8jvfWmlpxK%2BYCfAXcvcEyCL6v%2BZZce%2BPDu2rKG%2FZweU3CgGnFjH3vyvoRA3LLISG66pZZETKFYbORo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a25ea8d9ad335697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 68746\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68746,"size_decoded":69480,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 690x330, components 3","md5":"e4262fe20bea002305b2d560daf1ab3d","sha1":"4a1b9bf9c630a5a7b6a272ce1639015b9c80da68","sha256":"f548c1e355f2efe931ededa874c7cf4fd52fe857ad8e875754e7befdab1c0292","sha512":"43fadb562b433081caad82d69412d338af40d1af6bf3085028b9cf2241b997a7771b7f6bcafa5880fc5728f035e7036cac9ae10fe568b7e7c4b182774a9d0d05","ssdeep":"1536:7TN7noS7PzRtOL12yRezF86Xj8eI+LBbPKJUuzK6:N7noSHRtS12ue3LI+5PF8","tlshash":"7363f15ff58e6afb11d5713b8632dc92b2ec7c57a1025ad163905ae0d9eb1238324f42","first_seen":"2026-08-04T15:41:04.951331Z","last_seen":"2026-08-04T15:41:04.951331Z","times_seen":1,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/css/odometer-theme-default.css","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.207Z","timestamp":1785858016207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/css/odometer-theme-default.css HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qmr72C5wFcBQiFTcfa6%2BpbIgMEHD%2FsMO1a8Sko7S81S0%2BplLVw47X6XyVeWQqDRsXoZKCnbdrMhhNW%2F6K3ZfhTDc57Wlitb86fsQ2xXmXphb3WxiuJhOej0VVnqWw3f6cYuCfPRgZQs%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"697b9c27-deb\"\r\ncf-ray: a25ea8d94d0f5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3563,"size_decoded":1320,"mime_type":"text/css","magic":"ASCII text","md5":"c530d921e6de4c6446f25fddd774c34e","sha1":"b484d6425fe7f57a931a8666e89a792a26bf7914","sha256":"0edd72dc43646e459ddf3378ecdcbe4527fb5a3e5a1732facec5669c4e46e952","sha512":"03fe5e9f344e3945b4ffba9b7bb75acbe9b1be068f784f96085394c33791a0a174592f972f8d72b15ea456eaa6b72284429b6b178d7b74daa34bf261051c6be9","ssdeep":"","tlshash":"da71e5281f610724733a300ab6c92765fffcb8525223e59db34aa44bcd53db8d289b57","first_seen":"2023-05-23T07:07:40Z","last_seen":"2026-08-04T15:41:04.953431Z","times_seen":1462,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/simple-phone-mask.min.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.211Z","timestamp":1785858016211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/js/simple-phone-mask.min.js HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: W/\"697b9c27-60b2\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J6DnoDVToga4ZYzZv3ykirAgNR3qyB0Lcj%2BtSBguqNlby60Pfx8Jg2WxT%2F7v9x0AyETV23cmP7uLqYrDK1p76K2q0nJRiDGJaTovtaWJ1dFpUNsnkjNmp%2BZLE7V1Aa9UGAuqqxtyqp0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a25ea8d94d145697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24754,"size_decoded":6335,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11678)","md5":"0907285764aafb2ed89ffa3f8fa187b7","sha1":"9c4e5d1457a90b2e1921f08bc188c517f36dddab","sha256":"34bd2528616654b8d76b812b74473a5e699a5a8bb8bde9d6cf2ee7582c848ad2","sha512":"a74ffe84dd6aa1b411a5599aa02efd37b6d6c7652e499bfc7b9f03bd749b4cf2624c0d4f5b85a5f1c0f574756b492c40f9ba76434a09d69ff9bff749695dff23","ssdeep":"384:DObsQscbHkIPaUXSrG3FTOVmJMq8wF4Fkr4G2hWUmrjAFLU4e4jx:lQdpSUX2ncMOHr4nWUmOFx","tlshash":"d4b2a7db37611f3384f572f526e7a2e45772b21858b0c019789c737b03cfa96a191a3a","first_seen":"2026-08-04T15:32:03.916099Z","last_seen":"2026-08-04T15:41:04.95385Z","times_seen":3,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/css/simple-phone-mask.min.css","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.212Z","timestamp":1785858016212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/css/simple-phone-mask.min.css HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zp8EqWil8D4xxUSsjZUm9gYJPPzaRLWaUguulEWKNyFeSkAAjqSSKm7n9xurhLS2MEiKQA6QIY6%2BPOmj9o1oLPZMe27lCEP8E2O8kQA1NoV%2BJrT1oh10dfyBRBUG37qkXICCyuBDd04%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"697b9c27-4e9\"\r\ncf-ray: a25ea8d95d155697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1257,"size_decoded":1253,"mime_type":"text/css","magic":"ASCII text","md5":"33557665c5d1053e52be3f68b624760a","sha1":"ac449371d95155431ddec4da5af8ed3c3aef11fd","sha256":"0b4c08b3729348698892373e01acedc31700ae4f8528b8d2fbf1089511d27c70","sha512":"a66710fd032c821169ba0c574bdf35cc8955cdd16ecc6afafb00db6939bd694d54e0ff361ec6c76ac57a522f0e4d16cea2daa59e17a61d684562102603cfda27","ssdeep":"","tlshash":"f221026204743f45e11aa6a03ccd87e25bde42814e8f4d56249671bda38e1d4247fdfe","first_seen":"2026-07-11T21:40:51.402712Z","last_seen":"2026-08-04T15:41:04.954392Z","times_seen":4,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/js/shCore.js","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.216Z","timestamp":1785858016216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/js/shCore.js HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: W/\"697b9c27-3f2f\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FI%2BZxqDMs9FKxJjSj5NZHZMVEStTxfhGwusgFCqBPWdONLYZbzO5Mw225Y4l6F3ssYXQ3nR0E5pteC6OiaSstm%2Fij1F%2FCQGavQ7xmkaa0GSETeoo8DjxKn36CnT4x7DiTMahSimaY0M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a25ea8d95d185697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16175,"size_decoded":9455,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15796)","md5":"488ca2f56c37f84283fc9be63219304f","sha1":"bd9599773965e9c84565abc2e6acdaa92ad6e83f","sha256":"584a26f39cef2db245f41d4f6b8e3d0f7dfac5c06f0f454a49dfb94f6fb1517b","sha512":"e3d4014019c09742dc1974c9ecb91288e835970615e13c7f5e2810eaba9b73a4045e7f9d902a3cc1e759286c416cb43b3313fc745513fe1cbdede7e8a321bbe2","ssdeep":"384:tW98cZiWYi4s4B7Gxk9xzXNMyhElTMfUsMCMUzMS:MTGzAxWzXA4fUsMCdAS","tlshash":"97726db7342d157317e1c99428abd14650c912bbbfeac7b1fd8ceab9580c4b14063b5e","first_seen":"2023-03-07T12:12:00Z","last_seen":"2026-08-04T15:41:04.954884Z","times_seen":334,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/css/Default.css","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.227Z","timestamp":1785858016227,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/css/Default.css HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Co1ZBJGxnWj8EIOC7rsqnVFqe%2F372SoKNxQmcLNsQlePIlIFE0ReENA3LnNlplyNDdjDnv2sbD0J%2BkzbXv5n2x5E0lD5Uqel9OTN9%2Fx%2BXWf98RCDXRTUwPLr57UZNs9AUHV2cG1kYP4%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"697b9c27-b3d\"\r\ncf-ray: a25ea8d96d1f5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2877,"size_decoded":1438,"mime_type":"text/css","magic":"ASCII text","md5":"d4d54a01169ef8077807f15f72a65aa2","sha1":"987c987735bb6b8994aaf203e473b33567576e21","sha256":"9718c68f663cfdcef66e2b91917e46e3b83e31c9691a2ff658f9bd55c73bc649","sha512":"4c86fd5e342ef4712337b27dd08401603ba3956d4d11da5aac2e79442e49643f877d557782dcc8114c5931e6ef3afe6a7b9603dff6e882f759cef5c1e615efd6","ssdeep":"","tlshash":"7751b541f7f75915313200472096e93e3ffc4ae1238adf29675d32eeb6866f2a0a6c44","first_seen":"2023-05-24T12:22:11Z","last_seen":"2026-08-04T15:41:04.955602Z","times_seen":143,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/images/logo.png","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.249Z","timestamp":1785858016249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/images/logo.png HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: \"697b9c27-1c7d8\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ajlzhd0XLQaz3hX3bWxMaC62dLm6XtSjqOrzrUSHBZlou7YpwhR6JbH%2B%2FIiBOO9rGDnLPNZL5J7hx6KMeqT3D9Qd%2Bnur0XY6vdYqDfVicQAPVtrJ9hSqeN7GANuNA98wg%2Ba%2BT4ZnxzY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a25ea8d98d275697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 116696\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116696,"size_decoded":117432,"mime_type":"image/png","magic":"PNG image data, 853 x 256, 8-bit/color RGBA, non-interlaced","md5":"ef95f952d2c316ae3585bda1ee08b095","sha1":"c96875cf9931557fc048d98ca8a29fdd6a06aaec","sha256":"ccbcbd128600e15736b264a4fb1369535d9fdbfbc86b34c60e278b18dffedcd6","sha512":"d3bbd9c6fc9734d5476c732ac78217ccfcfeea391304b6f69f97e6aa0b2956c097fa4b6a0af4ce0fe9038387965d89a0f22c76a71806c935c0e88f949beee7ba","ssdeep":"3072:uiUHkxhqvFqDJEN2YfeqzELHTDf9inHMjjEZ5y4FqP:uiqeqdCEoYftzST7KHAEZ5J2","tlshash":"32b301a27cd8f71a68770a79c9ca58e89a4d7dd4fb5740085d0b0822361379d6e3bbcc","first_seen":"2026-08-04T15:41:04.956051Z","last_seen":"2026-08-04T15:41:04.956051Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/css/owl.carousel.css","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.195Z","timestamp":1785858016195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/css/owl.carousel.css HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: W/\"697b9c27-1206\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yZqG21XRenD8iqRCXTBgrk5RgDzUwbbF8uoDF7pnHYdvuaGNAZAdOzkL0lCuF7e0T8E9LvHOHjulVaANiEoGhOsSGtPL%2BK7MK1AsI9mg8vRkGbJCIsUHsdnjpjBrwspEvXe7DaV4iTE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a25ea8d93d085697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4614,"size_decoded":1835,"mime_type":"text/css","magic":"ASCII text","md5":"b51416af9e8adbe3d16f5f2526aba221","sha1":"097c8d67412f44534449ed4cadc6dd22b025801d","sha256":"dd7b97c7ad9d7b3eb79bdc728bcbc6a7ab8e3d5db0421fb0dd16d34f3dc88277","sha512":"015b350d568d2959886ed5982b74592d2608d65f2756ca5b3cd27c95ac1b68cfecbb8f6f4bca4f3dbbb09c3bd998b158973b60c691efce2f1c16a224aca80f2b","ssdeep":"96:15+VPKCDemllo7PZ2RUPKuT+8F/pgvYsuC1u:15+VPKChleHT+ypgH1u","tlshash":"9491dbe91276114d741f87e81a9d6b1a3f3dc451e91acc18b6eb2a058fcef48502fb4b","first_seen":"2023-04-05T05:08:28Z","last_seen":"2026-08-04T15:41:04.956908Z","times_seen":6578,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/css/jquery.fancybox.css","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.205Z","timestamp":1785858016205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/css/jquery.fancybox.css HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: W/\"697b9c27-13be\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n0KmZHRQjOORpRHB1KLek02WXFxarW8B%2Bj06r9mIShoJORJ2ztZh7w98eeT2QbAyTuvKej1WD32BGf52mweD3sAZZRw%2BQzxBu%2BHAKP98tp9Xhtk7N0n6hTmzt2TkngH4fg4CsCBnNaA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a25ea8d94d0e5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5054,"size_decoded":2188,"mime_type":"text/css","magic":"ASCII text","md5":"240ec4fee7191e02f48d7f4785230bad","sha1":"890e5f52dae5ca52473af7171e2a14f36cf98054","sha256":"2e213ff6117adb317a03a925d750734789ad65a2a9f66f6f1cc99d85ff7f5c37","sha512":"11a4dfc16bc44b187a37fb7211871d3197835ffcf14c3cfd79d80a25f38740a5ac6a9dd6485081edab1ab8f655e24cdc59ff1e4fb2a4e8c6467a0fe4bf88e47d","ssdeep":"96:GKXWoFzzzQFReRdr/N0Oo0OoW+i4cSX2W4LeHgNy:GKUFk7ryNTtLO","tlshash":"e8a11f6b66503901a43ede54db5f9a46c63f2442a60a4efb725cf92883d97e440f39cc","first_seen":"2025-10-21T11:34:15.481343Z","last_seen":"2026-08-04T15:41:04.957431Z","times_seen":2,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovereverything.com/lander/cyberprawo/images/2.jpg","fqdn":"recovereverything.com","domain":"recovereverything.com","tld":"com"},"ip":{"addr":"104.21.91.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.256Z","timestamp":1785858016256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovereverything.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 22:29:10 GMT","end":"Fri, 16 Oct 2026 23:28:55 GMT"},"fingerprint":{"sha1":"24:D8:58:54:1A:12:7A:4D:91:E1:2E:BB:98:A5:9F:16:4B:96:DF:5B","sha256":"20:0B:D2:E4:0F:6D:02:2E:7D:57:77:8A:C6:A8:90:55:7E:F2:A4:35:A2:06:D0:38:6C:B1:AF:7B:F8:8A:1D:80"}}},"request":{"raw":"GET /lander/cyberprawo/images/2.jpg HTTP/1.1\r\nHost: recovereverything.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m\r\nCookie: e3b0c4_45=mr9lpt2jnechl; _token=mr9lpt2jnechl.1785943888.5.25cda2ec5c629c32da02427f5e747836; _subid=18uumd0.2d.8dfh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 29 Jan 2026 17:43:03 GMT\r\netag: \"697b9c27-b74\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nP4SWDSuLF6x2fPjDdIBsXpsqjcC%2FxuObj1q94x7%2FFlku%2F5zqIBQgSs9CuRc%2FoKvuTo5e%2F8%2BUUtNHro493RYV4MTZKuh4Ns7X4tkg%2FqM7bR7puMtYcXORIy%2BlM2ejWnjXYEbhK9LX0A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a25ea8d99d2c5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2932\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2932,"size_decoded":3671,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 70x70, components 3","md5":"6240181c4a83ed5958f97a8731ffaa0f","sha1":"a7cf9dff6259493b9d44c1beea9b4c0b300bcf48","sha256":"a16dfefcf440cc5403d606302b6b8720436de540ebba5124e1f69203df0f017c","sha512":"516d0a72c1abe8c498f66d779ff032aa1b392e998934295d53d1ea4a275439a40fa17bfd8241da225956a1f54a05405f5a4266680a83e03cd9b1448286d89329","ssdeep":"","tlshash":"f9512ba4f32b020ff31a88beff3d9054cb09da7c1734049cb14efa6a96921520651a61","first_seen":"2026-08-04T15:41:04.958881Z","last_seen":"2026-08-04T15:41:04.958881Z","times_seen":1,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"recovereverything.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Serif+Text:ital@0;1\u0026family=Mulish:wght@300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovereverything.com/MKBWfvZg?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026p=1397298678982091\u0026utm_m={utm_m","date":"2026-08-04T15:40:16.562Z","timestamp":1785858016562,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=DM+Serif+Text:ital@0;1\u0026family=Mulish:wght@300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovereverything.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 04 Aug 2026 15:40:16 GMT\r\ndate: Tue, 04 Aug 2026 15:40:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14500,"size_decoded":1505,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"196a44d23b68eafc0731db23c42a80f7","sha1":"ae04f342e6cf4e859d09028bebfbce28bb097c53","sha256":"0b87128e0d82e578063e91bc160b86dc665f58a72f9b1d639b5cda40d090e847","sha512":"433a27099621bdad78a5a9911d4e3e913457776d71ce7cef05a0ae2718b06fd71faf110505e2623c1be005d8396217e91e024518ad2443e191836bba0d7b5363","ssdeep":"384:PvivcsmwrNu7IQcQar6u7/H7QzrTu7WeiQArgu7V9hQ5rZu7cEIQGrmu7D7HQvrw:YZukQc1uujH78XuKeifUup9h2NuwEIph","tlshash":"ea52a992005ba100eb471cc17bcf7e36ae8fa1557052d5ba6ffd48d9dcaac221368b0d","first_seen":"2026-08-04T15:41:04.959646Z","last_seen":"2026-08-04T15:41:04.959646Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":35,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}