{"report_id":"c44f58ca-471d-4376-bbc7-48a96602256b","version":0,"status":"done","tags":[],"date":"2026-08-28T13:22:10Z","url":{"schema":"http","addr":"prvinote.com/","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"prvinote.com/","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"title":"Privnote - Send notes that will self-destruct after being read","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-28T15:42:50.152392Z","times_seen":1044354,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"prvinote.com/","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T13:22:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"prvinote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"clickiocmp.com","ip":{"addr":"46.8.152.14","port":443,"asn":213119,"as":"ALZ Software Ltd","country":"United Kingdom","country_code":"GB"},"domain_registered":"2023-04-25","domain_rank":50599,"first_seen":"2023-05-04T14:35:56Z","last_seen":"2026-08-27T17:16:50.248527Z","alert_count":0,"request_count":3,"received_data":315717,"sent_data":1512,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"up.clickiocdn.com","ip":{"addr":"95.211.66.34","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2015-07-13","domain_rank":242016,"first_seen":"2023-11-11T15:23:55Z","last_seen":"2026-08-27T17:16:50.253377Z","alert_count":0,"request_count":3,"received_data":821,"sent_data":1955,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.clickiocdn.com","ip":{"addr":"65.108.145.87","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2015-07-13","domain_rank":336698,"first_seen":"2015-07-21T10:03:04Z","last_seen":"2026-08-28T09:48:35.119945Z","alert_count":0,"request_count":1,"received_data":68110,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.clickiocdn.com","ip":{"addr":"46.8.152.14","port":443,"asn":213119,"as":"ALZ Software Ltd","country":"United Kingdom","country_code":"GB"},"domain_registered":"2015-07-13","domain_rank":1440136,"first_seen":"2018-06-20T16:00:38Z","last_seen":"2026-08-28T09:48:35.185217Z","alert_count":0,"request_count":1,"received_data":853398,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"prvinote.com","ip":{"addr":"104.21.6.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-28","domain_rank":0,"first_seen":"2026-08-28T13:18:01.977956Z","last_seen":"2026-08-28T13:18:01.977956Z","alert_count":13,"request_count":13,"received_data":94659,"sent_data":6986,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"prvinote.com/static-58c8928/js-min/lib/TextEncoderLite.js","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2210b21f09767aa04875d1c905fa0a35","sha1":"def79ce060aa758c5464b42d9658d8e660b846a1","sha256":"e3c7994493b22e917a000077d61321c351cbb1c2ae020523227a083c6fb749cc","sha512":"47e134d4c2826aede14ca4c9cf2d8a2470ef6d7d2e86f458a3303878a3038d7bbbdf9ed24ed342c1818bf1f11569ce25b21d80b801f4fb86333683d2ed257856","ssdeep":"","tlshash":"fa41fe53acd026ed06bc00302547251af4dce16e92b82235afce4f80d074ea8de5ff96","size":2001,"data":"","first_seen":"2023-07-26T11:58:06Z","last_seen":"2026-08-28T14:07:30.117838Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prvinote.com/static-58c8928/js-min/lib/b64.js","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d34b0986ba7b84b4d90965d7edb8d94","sha1":"7c9ed8072ff7d86b99b8b382981ae9dbb6760c51","sha256":"36dce7ea0fd92d4746d0acbd131b7c9ab1fe2e6c04e7c1f719653073213caef7","sha512":"b4946839abceef17f923b2b6764434543774bde5b4ceedb3d8b885cdd1b6177d7680ea37904887b376bd6eddacd3a4be0dbcaffc6c8aeafc152038f8b5e36b70","ssdeep":"","tlshash":"4041358c109640d10bae2a71144ba18ee47e191718edb405cd1bfff589346f947eac3c","size":2357,"data":"","first_seen":"2023-07-26T11:58:05Z","last_seen":"2026-08-28T14:07:30.118491Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prvinote.com/static-58c8928/js-min/lib/promise.js","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"05e4b55a50fad40b75edd0cce91e4340","sha1":"ccc4dd629df0cf9dfcadf754e76ea88ed9c8e85b","sha256":"6986df3f8ba7ce00fb51b30b9fff84447f0fd6b874c354b95178bfbeb89d3a64","sha512":"27c7931d227d16a661d7cc2c063d0cfabf51b62adbd17cf0300aeae66c8d9477e08ff4226d74cd5df3714f824ef95ca3b68da0eb38fa3d151c1a8a612cd293b7","ssdeep":"","tlshash":"fd517462fb81e0dbcbc6a134fa2f5e0b6534b8051c56dc54b578e6d809fb01ef11ae19","size":2784,"data":"","first_seen":"2023-07-26T11:58:06Z","last_seen":"2026-08-28T14:07:30.125536Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prvinote.com/static-58c8928/js-min/common.js","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b89f7651422fe015cea838def9a22f28","sha1":"a3f72f8eb4ddd700a05bc982a858e53e8e854d9c","sha256":"6f39bb5d66e42789ff6d3ab8a785652d537557b1d19ffd4215eb791853af9059","sha512":"6bd4b4522bd77e12df316f3dc7a5d35b5a15a738867b27623be9f8664f4cbc4b0a86e898dbc24294eab7075bf9bc889e52bd38d105aca877037722a50cd58fe7","ssdeep":"","tlshash":"b44132c8b207a6856a5642d42c0f7806b17be6a0180ce50d9f73f75f97b6e139137f26","size":2060,"data":"","first_seen":"2023-07-26T11:58:06Z","last_seen":"2026-08-28T14:07:30.127Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prvinote.com/","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d2714cb5be3234199bc7eb1354b2983","sha1":"ba8ddc94f4ae90b930a446fba73a08e4b7089b4a","sha256":"3aa1288abdea8292ef7d7ea138267b5b6e3c7f7445bed0a20f14d51f4bee7c0a","sha512":"a9dfe4023fcb9868b5aef5d7e472229c953d229232cccf5ac343f9c1476efe0208082b5b916f07303789f7ebf475ac3606142999ef3e3302c9d6b725bc47b7a7","ssdeep":"","tlshash":"7ee05b8da1e241fc5878eb1683151fd134f0416520ca4e95b4ded4a23f6c1065c762fd","size":336,"data":"","first_seen":"2026-08-28T13:18:06.62103Z","last_seen":"2026-08-28T14:07:30.141242Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prvinote.com/","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"70bcdbfded58eacb4665f1594209d684","sha1":"11a8d3319fc6a27d8adb24629405bc4c68f9f18a","sha256":"439c72cea4f39f5659fe5008411c2092af8a2443bbf750e994d5f9417201dea3","sha512":"69801ed021705b3d0ad07fc579fb1d0410237e44ae0a23845c598f85db9330e6e25a0fd1d4ae53203fff302de3eac11749b9ab8e90828c9423f3c011dcfe4734","ssdeep":"","tlshash":"23c0124f08a6640000f37c264f1f85009c93ed030080dcb17fbdd352cf10028514dac4","size":153,"data":"","first_seen":"2026-08-28T13:18:06.622555Z","last_seen":"2026-08-28T14:07:30.143983Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickiocmp.com/t/consent_230182.js","fqdn":"clickiocmp.com","domain":"clickiocmp.com","tld":"com"},"ip":{"addr":"46.8.152.14","port":443,"asn":213119,"as":"ALZ Software Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"71188ecf3fe2d39aabfdcc9ccada5503","sha1":"76c8eee4acc9779fbcfc3e520ad7700062851485","sha256":"23d82cf650f90e85edf4d787dece848f17fc71d812f59e2a4d2d5d882efcd609","sha512":"48719f1aa7c0749bdfaee3f8e1f4b5f7c6fd4053f72b2604b39018217d38470013bf2f10895b1be62577c147683c5b325d4358d4bd661597d12f8c44bf7c8975","ssdeep":"3072:dJqvN/xntkgOm05hZ1MtLhUpFy/BzeoW+tFVBGDFvlr0q:dQNUmEZ1Mt4y/BSoBFVBG5vlwq","tlshash":"da540ac972c1b0b4a3e36174b03f220ef23aa955ac48c0a4e665e5e0adb475d46f7f5c","size":294860,"data":"","first_seen":"2026-08-28T13:18:06.571344Z","last_seen":"2026-08-28T14:07:30.119168Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prvinote.com/static-58c8928/js-min/lib/gibberish-aes.js","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a32a3e1c6325795e41dfb613c04b2f30","sha1":"1373300727de07484ede609da3d5777fabaa8a3f","sha256":"bb54040a037d6d730f498160c7f016f6c37a344025b7d198e5f3a3cfd34f942b","sha512":"8c495700b2cfef487ebb3ac0f5fd4a7a15e6c00c90a87d99253e10a5050e50cca87394cb7f3c54e753a5337ca3dfe0793ae90cb8487daf891f86ea87c603b119","ssdeep":"384:UWTQFzmi6dJLnmqtoxkfu/Bu1MrUD83xOJMkQ9OPMvF9P9UM/dzX9:3QVmReWfu/Bu14kQ9Td9J","tlshash":"e552e796ba7310a8b7ca54f14c3f15be66a0b9a51cf32321e0c7d6c016289e5e23ff15","size":14379,"data":"","first_seen":"2023-07-26T11:58:05Z","last_seen":"2026-08-28T14:07:30.116149Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prvinote.com/static-58c8928/js-min/legacy.js?ver=0.0012","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6af3ead5505c4300f151e16007c02f56","sha1":"1557381ecc15918464ba3f60c0582155d42085f0","sha256":"5588d51f035c2ee085baafc60053723a6dc41fe6b75ba00086c5444bb2f8c411","sha512":"ba3865a35b537d696b889a8030782886c6c16491199c1f528ebe5642ab6d6f2397347b11050b1d171ef3a23d55a6f55879e24b218142c8ff98df79098d5dfeea","ssdeep":"384:AVVBtIMVdaMVYEuFT1UzG+iK7xlfnzhiL2AAYa:+IMVPVoGzGQ7xlfJAA/","tlshash":"bda2428cf9461f4b15eae4b631b72a07f633834145054640c1bbea8d2f39e0bf15b5ba","size":21715,"data":"","first_seen":"2026-03-29T08:42:37.938398Z","last_seen":"2026-08-28T14:07:30.138543Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prvinote.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-28T15:43:35.488887Z","times_seen":427030,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickiocmp.com/t/static/cmp/diagnostic-core.js","fqdn":"clickiocmp.com","domain":"clickiocmp.com","tld":"com"},"ip":{"addr":"46.8.152.14","port":443,"asn":213119,"as":"ALZ Software Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"85b2726a9ffbd78f2bf9f15ebfd14e47","sha1":"5342adbea2b3708b6001aa1acb48462cda8cfd79","sha256":"92473fafd4dcd7460ea7f1afc36659296d61c8993eeec98de96821097c68c6ce","sha512":"863557c1457425b653d39d3fa04ca9d3895b03425530cb27bcbb05e0b328c4da57dd411b425e96b6ec77f7c5ca3d45a533e9980fa1d240cfda85e65f4dfdd1f7","ssdeep":"192:iPFpx1uydmbJCakXuLKw8Ty6p6+Ugv3n22CKeBi1fVf4mvpdWnd7dPShNJ5B4rZk:iPPy8mVCatp6p6+V322C2/f4mvjWdhPU","tlshash":"bf12a7a7be5cb43b25d700b625b75714f53706107102d091f6bc887969a27c7a2efbc8","size":9866,"data":"","first_seen":"2026-05-07T03:07:29.345354Z","last_seen":"2026-08-28T14:07:30.140041Z","times_seen":253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"prvinote.com/static-58c8928/js-min/lib/TextEncoderLite.js","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://prvinote.com/","date":"2026-08-28T13:21:33.969Z","timestamp":1787923293969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prvinote.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 05:22:58 GMT","end":"Fri, 23 Oct 2026 06:22:42 GMT"},"fingerprint":{"sha1":"CB:67:B9:28:2A:54:FF:69:06:1C:19:83:21:6D:9A:AD:69:E7:BD:7D","sha256":"3A:9D:95:0E:BB:DC:EF:7C:D2:33:90:CF:7C:0C:49:E0:40:41:97:15:D1:B4:E4:6A:3B:D0:8D:D6:D5:1E:93:AF"}}},"request":{"raw":"GET /static-58c8928/js-min/lib/TextEncoderLite.js HTTP/1.1\r\nHost: prvinote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://prvinote.com/\r\nCookie: PHPSESSID=00f7ec73cda98e8598026855f11dcf56\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 13:21:34 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 28 Jan 2026 19:43:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 246\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eoLlt%2BUWenEIMKYtNLQXPamju%2BLJIxYBpvdJgwh3%2Fgt%2FXr2cOS5Tg%2FT2n5wcJGSmdf8%2BdXLckO2lDIdMfyuJLWZr4ZZI7KenfhNj0WQoED0gR%2FTsDNdo9dhMQNe6hbY%3D\"}]}\r\ncf-ray: a3239eab49df1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 722\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2001,"size_decoded":1484,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"2210b21f09767aa04875d1c905fa0a35","sha1":"def79ce060aa758c5464b42d9658d8e660b846a1","sha256":"e3c7994493b22e917a000077d61321c351cbb1c2ae020523227a083c6fb749cc","sha512":"47e134d4c2826aede14ca4c9cf2d8a2470ef6d7d2e86f458a3303878a3038d7bbbdf9ed24ed342c1818bf1f11569ce25b21d80b801f4fb86333683d2ed257856","ssdeep":"","tlshash":"fa41fe53acd026ed06bc00302547251af4dce16e92b82235afce4f80d074ea8de5ff96","first_seen":"2023-07-26T11:58:06Z","last_seen":"2026-08-28T14:07:30.117838Z","times_seen":33,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"prvinote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prvinote.com/static-58c8928/js-min/lib/b64.js","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://prvinote.com/","date":"2026-08-28T13:21:33.970Z","timestamp":1787923293970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prvinote.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 05:22:58 GMT","end":"Fri, 23 Oct 2026 06:22:42 GMT"},"fingerprint":{"sha1":"CB:67:B9:28:2A:54:FF:69:06:1C:19:83:21:6D:9A:AD:69:E7:BD:7D","sha256":"3A:9D:95:0E:BB:DC:EF:7C:D2:33:90:CF:7C:0C:49:E0:40:41:97:15:D1:B4:E4:6A:3B:D0:8D:D6:D5:1E:93:AF"}}},"request":{"raw":"GET /static-58c8928/js-min/lib/b64.js HTTP/1.1\r\nHost: prvinote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://prvinote.com/\r\nCookie: PHPSESSID=00f7ec73cda98e8598026855f11dcf56\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 13:21:34 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 28 Jan 2026 19:43:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 246\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cT%2BDyXzNptZIAEABzkFSMUXCStJUpwdZa3Og2L28xbqSmoHGLU8ohQ2XKfAT%2BKgVYKdTGlmYTgsVGB8sLia3WbtWlhr8Tjz4YmuMJG2Pxi40r%2FwGjcZtY6OsObJflXU%3D\"}]}\r\ncf-ray: a3239eab59e11525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 900\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2357,"size_decoded":1654,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"5d34b0986ba7b84b4d90965d7edb8d94","sha1":"7c9ed8072ff7d86b99b8b382981ae9dbb6760c51","sha256":"36dce7ea0fd92d4746d0acbd131b7c9ab1fe2e6c04e7c1f719653073213caef7","sha512":"b4946839abceef17f923b2b6764434543774bde5b4ceedb3d8b885cdd1b6177d7680ea37904887b376bd6eddacd3a4be0dbcaffc6c8aeafc152038f8b5e36b70","ssdeep":"","tlshash":"4041358c109640d10bae2a71144ba18ee47e191718edb405cd1bfff589346f947eac3c","first_seen":"2023-07-26T11:58:05Z","last_seen":"2026-08-28T14:07:30.118491Z","times_seen":33,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"prvinote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prvinote.com/static-58c8928/style/legacy/privnote-logo.svg","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://prvinote.com/","date":"2026-08-28T13:21:33.990Z","timestamp":1787923293990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prvinote.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 05:22:58 GMT","end":"Fri, 23 Oct 2026 06:22:42 GMT"},"fingerprint":{"sha1":"CB:67:B9:28:2A:54:FF:69:06:1C:19:83:21:6D:9A:AD:69:E7:BD:7D","sha256":"3A:9D:95:0E:BB:DC:EF:7C:D2:33:90:CF:7C:0C:49:E0:40:41:97:15:D1:B4:E4:6A:3B:D0:8D:D6:D5:1E:93:AF"}}},"request":{"raw":"GET /static-58c8928/style/legacy/privnote-logo.svg HTTP/1.1\r\nHost: prvinote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://prvinote.com/\r\nCookie: PHPSESSID=00f7ec73cda98e8598026855f11dcf56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 13:21:34 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 04 Sep 2026 13:17:27 GMT\r\nlast-modified: Wed, 28 Jan 2026 19:43:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 246\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FhaxKvTVseYIiemnuy9YubMHqW9Bo7wH%2F1bcEbUtjzA9Ee17Ml5sk8QPEN%2F%2Bz4c7dFw%2FBErNTEQuNueNXQ9wX5gInZPFHK%2BHJ3jH1cHPxf3u1J7LKyD5h0i1QrRVQsE%3D\"}]}\r\ncf-ray: a3239eab79ee1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1508\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3349,"size_decoded":2311,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"942a519ce69e5f8b57d9095986f36ce4","sha1":"af792fdc328e556eea0f5a1f884c2b7719890b22","sha256":"8a9f809d9738b820f4c16b8c2cc818f378300a88d8cafded75c3dbfb384877f3","sha512":"f42ba28aa29da270694afccc121547f9141c645364d9789a434647f53c8d446ccf9042eeb645867e7e17ebb6b060a4ce66ad59fa97bd04bb7b05d27478f7e06d","ssdeep":"","tlshash":"266172a6132d55fc94c00e3cd9a871c323a160ddf67041d0e3477a75ad1aab6b828db4","first_seen":"2026-08-28T13:18:06.5726Z","last_seen":"2026-08-28T13:22:13.756206Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"prvinote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickiocmp.com/t/static/cmp/diagnostic-core.js","fqdn":"clickiocmp.com","domain":"clickiocmp.com","tld":"com"},"ip":{"addr":"46.8.152.14","port":443,"asn":213119,"as":"ALZ Software Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://prvinote.com/","date":"2026-08-28T13:21:34.178Z","timestamp":1787923294178,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clickiocmp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 12:25:17 GMT","end":"Tue, 29 Sep 2026 12:25:16 GMT"},"fingerprint":{"sha1":"78:B0:83:D4:8E:ED:BB:52:93:2E:92:9C:C9:50:07:09:5B:7C:57:BB","sha256":"9B:48:F8:07:13:94:90:5B:69:1A:0B:10:C6:39:C3:29:94:BD:3E:73:94:84:5E:91:0C:1D:1B:08:DF:65:E2:F3"}}},"request":{"raw":"GET /t/static/cmp/diagnostic-core.js HTTP/1.1\r\nHost: clickiocmp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://prvinote.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0\r\ndate: Fri, 28 Aug 2026 13:21:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 06 May 2026 10:07:30 GMT\r\netag: W/\"69fb12e2-268a\"\r\nexpires: Fri, 28 Aug 2026 13:51:34 GMT\r\ncache-control: max-age=1800\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\niseu: eu\r\niscntr: eu\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9866,"size_decoded":3556,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9832)","md5":"85b2726a9ffbd78f2bf9f15ebfd14e47","sha1":"5342adbea2b3708b6001aa1acb48462cda8cfd79","sha256":"92473fafd4dcd7460ea7f1afc36659296d61c8993eeec98de96821097c68c6ce","sha512":"863557c1457425b653d39d3fa04ca9d3895b03425530cb27bcbb05e0b328c4da57dd411b425e96b6ec77f7c5ca3d45a533e9980fa1d240cfda85e65f4dfdd1f7","ssdeep":"192:iPFpx1uydmbJCakXuLKw8Ty6p6+Ugv3n22CKeBi1fVf4mvpdWnd7dPShNJ5B4rZk:iPPy8mVCatp6p6+V322C2/f4mvjWdhPU","tlshash":"bf12a7a7be5cb43b25d700b625b75714f53706107102d091f6bc887969a27c7a2efbc8","first_seen":"2026-05-07T03:07:29.345354Z","last_seen":"2026-08-28T14:07:30.140041Z","times_seen":253,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prvinote.com/static-58c8928/js-min/lib/gibberish-aes.js","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://prvinote.com/","date":"2026-08-28T13:21:33.968Z","timestamp":1787923293968,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prvinote.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 05:22:58 GMT","end":"Fri, 23 Oct 2026 06:22:42 GMT"},"fingerprint":{"sha1":"CB:67:B9:28:2A:54:FF:69:06:1C:19:83:21:6D:9A:AD:69:E7:BD:7D","sha256":"3A:9D:95:0E:BB:DC:EF:7C:D2:33:90:CF:7C:0C:49:E0:40:41:97:15:D1:B4:E4:6A:3B:D0:8D:D6:D5:1E:93:AF"}}},"request":{"raw":"GET /static-58c8928/js-min/lib/gibberish-aes.js HTTP/1.1\r\nHost: prvinote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://prvinote.com/\r\nCookie: PHPSESSID=00f7ec73cda98e8598026855f11dcf56\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 13:21:33 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 28 Jan 2026 19:43:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 246\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V7dvDqatprCvDcKXLYLayY9hao5WQ%2FQZEc9ICX9c4pViHe%2B%2FxJwkp0gwyEgLrf1KKYisTwZ5Hee2B0h9oKJCaOGbpXQ3%2BEgooe3nLFK7FmTJ5HKgvvuPcagg0Zlu5dM%3D\"}]}\r\ncf-ray: a3239eab49de1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4782\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14379,"size_decoded":5539,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2830)","md5":"a32a3e1c6325795e41dfb613c04b2f30","sha1":"1373300727de07484ede609da3d5777fabaa8a3f","sha256":"bb54040a037d6d730f498160c7f016f6c37a344025b7d198e5f3a3cfd34f942b","sha512":"8c495700b2cfef487ebb3ac0f5fd4a7a15e6c00c90a87d99253e10a5050e50cca87394cb7f3c54e753a5337ca3dfe0793ae90cb8487daf891f86ea87c603b119","ssdeep":"384:UWTQFzmi6dJLnmqtoxkfu/Bu1MrUD83xOJMkQ9OPMvF9P9UM/dzX9:3QVmReWfu/Bu14kQ9Td9J","tlshash":"e552e796ba7310a8b7ca54f14c3f15be66a0b9a51cf32321e0c7d6c016289e5e23ff15","first_seen":"2023-07-26T11:58:05Z","last_seen":"2026-08-28T14:07:30.116149Z","times_seen":33,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"prvinote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickiocmp.com/t/consent_230182.js","fqdn":"clickiocmp.com","domain":"clickiocmp.com","tld":"com"},"ip":{"addr":"46.8.152.14","port":443,"asn":213119,"as":"ALZ Software Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://prvinote.com/","date":"2026-08-28T13:21:33.980Z","timestamp":1787923293980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clickiocmp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 12:25:17 GMT","end":"Tue, 29 Sep 2026 12:25:16 GMT"},"fingerprint":{"sha1":"78:B0:83:D4:8E:ED:BB:52:93:2E:92:9C:C9:50:07:09:5B:7C:57:BB","sha256":"9B:48:F8:07:13:94:90:5B:69:1A:0B:10:C6:39:C3:29:94:BD:3E:73:94:84:5E:91:0C:1D:1B:08:DF:65:E2:F3"}}},"request":{"raw":"GET /t/consent_230182.js HTTP/1.1\r\nHost: clickiocmp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://prvinote.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0\r\ndate: Fri, 28 Aug 2026 13:21:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nexpires: Fri, 28 Aug 2026 13:22:34 GMT\r\ncache-control: max-age=60\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\niseu: eu\r\niscntr: eu\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":294860,"size_decoded":92453,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4972)","md5":"71188ecf3fe2d39aabfdcc9ccada5503","sha1":"76c8eee4acc9779fbcfc3e520ad7700062851485","sha256":"23d82cf650f90e85edf4d787dece848f17fc71d812f59e2a4d2d5d882efcd609","sha512":"48719f1aa7c0749bdfaee3f8e1f4b5f7c6fd4053f72b2604b39018217d38470013bf2f10895b1be62577c147683c5b325d4358d4bd661597d12f8c44bf7c8975","ssdeep":"3072:dJqvN/xntkgOm05hZ1MtLhUpFy/BzeoW+tFVBGDFvlr0q:dQNUmEZ1Mt4y/BSoBFVBG5vlwq","tlshash":"da540ac972c1b0b4a3e36174b03f220ef23aa955ac48c0a4e665e5e0adb475d46f7f5c","first_seen":"2026-08-28T13:18:06.571344Z","last_seen":"2026-08-28T14:07:30.119168Z","times_seen":4,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":3,"connect":20,"send":0,"wait":21,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prvinote.com/static-58c8928/icon/touch-icon-192x192.png","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://prvinote.com/","date":"2026-08-28T13:21:34.133Z","timestamp":1787923294133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prvinote.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 05:22:58 GMT","end":"Fri, 23 Oct 2026 06:22:42 GMT"},"fingerprint":{"sha1":"CB:67:B9:28:2A:54:FF:69:06:1C:19:83:21:6D:9A:AD:69:E7:BD:7D","sha256":"3A:9D:95:0E:BB:DC:EF:7C:D2:33:90:CF:7C:0C:49:E0:40:41:97:15:D1:B4:E4:6A:3B:D0:8D:D6:D5:1E:93:AF"}}},"request":{"raw":"GET /static-58c8928/icon/touch-icon-192x192.png HTTP/1.1\r\nHost: prvinote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://prvinote.com/\r\nCookie: PHPSESSID=00f7ec73cda98e8598026855f11dcf56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 13:21:34 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 04 Sep 2026 13:17:28 GMT\r\nlast-modified: Wed, 28 Jan 2026 19:43:19 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 245\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nwGbGITrfJK5pAPsEx86VfK9o2QIp8miwk6MiEVhxE9m8yfwOejWEHn2OId6PGHfY%2FLon43BiXEc096aejM3P2mslPI%2FjB4uV7SZlXZUU5m7R%2BsLsWqEN6veNR1zWL0%3D\"}]}\r\ncf-ray: a3239eac5a1c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1693\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1693,"size_decoded":2446,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"356ff9ac1eb162a7d7ddbb9f2601c421","sha1":"40f8f2ab0d500a6dc4a820791bec5f793f095c8c","sha256":"8a524660254708603f5132814f46995715de4188eae952ad6209b08cd6a45172","sha512":"6ebeadccdbecd38e68b8849798bccd999d38f9221f2d88e0fc8a95089f36ba22a0565a221bd0e0ad53524b56b6d77808d26b2a6032b99421380e16e8cff89d9a","ssdeep":"","tlshash":"54311a7ac9b1f5b3d03a87b2d730050583190fc58a79ae7608202cea0fa845a1840aef","first_seen":"2023-11-28T12:56:07Z","last_seen":"2026-08-28T14:07:30.129114Z","times_seen":24,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"prvinote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"up.clickiocdn.com/consent/log/?r=329419939\u0026site_id=230182\u0026version=1692267057\u0026csid=4889\u0026stv=3\u0026tcf2=1\u0026uid=17879232941703852\u0026ugeo=NO\u0026state=101\u0026vcnt=193","fqdn":"up.clickiocdn.com","domain":"clickiocdn.com","tld":"com"},"ip":{"addr":"95.211.66.34","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://prvinote.com/","date":"2026-08-28T13:21:34.213Z","timestamp":1787923294213,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.clickiocdn.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 13:20:19 GMT","end":"Sun, 08 Nov 2026 13:20:18 GMT"},"fingerprint":{"sha1":"74:F5:F4:86:71:45:68:C1:9C:6A:4D:D0:7D:76:4E:8C:D2:A2:CE:18","sha256":"EE:D1:5C:34:F2:D3:06:86:D0:19:7D:6D:0F:DB:E9:E0:49:3D:CD:C9:37:56:99:DB:4D:47:76:30:49:BC:FA:54"}}},"request":{"raw":"GET /consent/log/?r=329419939\u0026site_id=230182\u0026version=1692267057\u0026csid=4889\u0026stv=3\u0026tcf2=1\u0026uid=17879232941703852\u0026ugeo=NO\u0026state=101\u0026vcnt=193 HTTP/1.1\r\nHost: up.clickiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://prvinote.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.20.1\r\ndate: Fri, 28 Aug 2026 13:21:34 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nx-pixel-host: amn-ams-5-7\r\niseu: eu\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42,"size_decoded":275,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-28T15:42:39.919233Z","times_seen":1047405,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":22,"send":0,"wait":23,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.clickiocdn.com/t/cmp/v3/google-vendor-list.json","fqdn":"s.clickiocdn.com","domain":"clickiocdn.com","tld":"com"},"ip":{"addr":"65.108.145.87","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://prvinote.com/","date":"2026-08-28T13:21:34.492Z","timestamp":1787923294492,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.clickiocdn.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 06:11:24 GMT","end":"Fri, 16 Oct 2026 06:11:23 GMT"},"fingerprint":{"sha1":"E0:3C:B3:36:8B:DB:1F:B9:E4:E4:C3:57:FF:2A:9E:4D:5F:14:81:9E","sha256":"A4:0A:C8:43:5E:FE:F9:60:07:3E:64:61:E6:36:44:3B:34:D2:42:C2:FC:7F:F6:1A:A2:AF:4C:11:9C:15:E3:4D"}}},"request":{"raw":"GET /t/cmp/v3/google-vendor-list.json HTTP/1.1\r\nHost: s.clickiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://prvinote.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://prvinote.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0\r\ndate: Fri, 28 Aug 2026 13:21:34 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 28 Aug 2026 02:05:06 GMT\r\netag: W/\"6a90ecd2-108b5\"\r\nexpires: Fri, 28 Aug 2026 13:51:34 GMT\r\ncache-control: max-age=1800\r\naccess-control-allow-origin: *\r\niseu: eu\r\niscntr: eu\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67765,"size_decoded":20077,"mime_type":"application/json","magic":"JSON text data","md5":"84364ae92d1fd182cc256c1e656fe152","sha1":"efa6d06cf9c72ac4526c2ccc849049499791abc6","sha256":"8ac4fd8a9da7bf1908526b0165067a626e3b1ddb5bef445f0bcad8e99902c133","sha512":"6f4daa554dc6a888193e79f448c21c9530b3e18ced4ac056fd1a00ef4df14e8d8096311a85e0ddb3e1d18852b69a637e94752e73522a0bf9a9d18f719d2593d9","ssdeep":"768:wjLNi95uUt4i6ZozTSY3Wp9Hw3WBXPE3LBr9e8+cCBSgfqHe:wPW5uO42zTSY3Wp1w3WRM319n+cyvV","tlshash":"3163e8efa285eb2cc254bae14f4bd3bcf4d2b41778e86c9b10586f6902e16e4516d037","first_seen":"2026-08-27T17:46:52.56829Z","last_seen":"2026-08-28T14:07:30.117281Z","times_seen":6,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":15,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prvinote.com/","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T13:21:33.545Z","timestamp":1787923293545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prvinote.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 05:22:58 GMT","end":"Fri, 23 Oct 2026 06:22:42 GMT"},"fingerprint":{"sha1":"CB:67:B9:28:2A:54:FF:69:06:1C:19:83:21:6D:9A:AD:69:E7:BD:7D","sha256":"3A:9D:95:0E:BB:DC:EF:7C:D2:33:90:CF:7C:0C:49:E0:40:41:97:15:D1:B4:E4:6A:3B:D0:8D:D6:D5:1E:93:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: prvinote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 13:21:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/7.4.33\r\nset-cookie: PHPSESSID=00f7ec73cda98e8598026855f11dcf56; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EK8afahLykPz%2BPRZ9WCqbYx%2FLuu6CI4%2BkVEfLDZ2k7XPLzVY8ustKPw4wbJlQJIt7IpSH760ze%2BOaZagkX6DZE1DceG5nDx6ov7Zf4Edn341WxK9swqbybc1o0EOGzk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3239ea8c9881525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"00f7ec73cda98e8598026855f11dcf56","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=00f7ec73cda98e8598026855f11dcf56; path=/; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":20449,"size_decoded":5776,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (559)","md5":"70c51b6b0f8be52c3e2efa59441ac438","sha1":"d20ad3e9cbf956e9752d5355b9f7117c476d4dbd","sha256":"eb2a5b839927e09ddf781fa499ac83a91269144661421f189a93690c5a4f0a7d","sha512":"2a65519b4c2782ba0eef11260bb50a3ef2da7d023dfda29006cd5d6983e812dbc202cdf7b366d3cf95d0b8e0837866284d964b028d662217c77b35531db6c487","ssdeep":"192:z0yydsa5WBgfkCzov2nrxqu7YWdRgYjkFov1aLcCMpbtG9sbzmed3o:zUsa5WMkCzHnYiYWdRgYjkmv1Ac13JCX","tlshash":"b792659958f094b20193c1d5b661ae2bfee1a127c7191c0476fc8be40ff7e89de63066","first_seen":"2026-08-28T13:22:13.772089Z","last_seen":"2026-08-28T13:22:13.772089Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":4,"connect":14,"send":0,"wait":191,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"prvinote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prvinote.com/static-58c8928/js-min/common.js","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://prvinote.com/","date":"2026-08-28T13:21:33.974Z","timestamp":1787923293974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prvinote.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 05:22:58 GMT","end":"Fri, 23 Oct 2026 06:22:42 GMT"},"fingerprint":{"sha1":"CB:67:B9:28:2A:54:FF:69:06:1C:19:83:21:6D:9A:AD:69:E7:BD:7D","sha256":"3A:9D:95:0E:BB:DC:EF:7C:D2:33:90:CF:7C:0C:49:E0:40:41:97:15:D1:B4:E4:6A:3B:D0:8D:D6:D5:1E:93:AF"}}},"request":{"raw":"GET /static-58c8928/js-min/common.js HTTP/1.1\r\nHost: prvinote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://prvinote.com/\r\nCookie: PHPSESSID=00f7ec73cda98e8598026855f11dcf56\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 13:21:33 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 28 Jan 2026 19:43:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 246\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6oOSs3KW7uXJVv3eiIoMv3pK7uTFOpY%2BQh%2FP2jbuU3qKy1aMIZ3oRQjIsASsxbECpMBAHedj4I0CsOVN5p3tuqJ2%2FNgqH1nLWdfD%2Bj2JBLyqqeVE9qXTstwAM3o4gOU%3D\"}]}\r\ncf-ray: a3239eab59e31525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 801\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2060,"size_decoded":1557,"mime_type":"text/javascript","magic":"ASCII text","md5":"b89f7651422fe015cea838def9a22f28","sha1":"a3f72f8eb4ddd700a05bc982a858e53e8e854d9c","sha256":"6f39bb5d66e42789ff6d3ab8a785652d537557b1d19ffd4215eb791853af9059","sha512":"6bd4b4522bd77e12df316f3dc7a5d35b5a15a738867b27623be9f8664f4cbc4b0a86e898dbc24294eab7075bf9bc889e52bd38d105aca877037722a50cd58fe7","ssdeep":"","tlshash":"b44132c8b207a6856a5642d42c0f7806b17be6a0180ce50d9f73f75f97b6e139137f26","first_seen":"2023-07-26T11:58:06Z","last_seen":"2026-08-28T14:07:30.127Z","times_seen":33,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"prvinote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prvinote.com/static-58c8928/js-min/legacy.js?ver=0.0012","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://prvinote.com/","date":"2026-08-28T13:21:33.975Z","timestamp":1787923293975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prvinote.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 05:22:58 GMT","end":"Fri, 23 Oct 2026 06:22:42 GMT"},"fingerprint":{"sha1":"CB:67:B9:28:2A:54:FF:69:06:1C:19:83:21:6D:9A:AD:69:E7:BD:7D","sha256":"3A:9D:95:0E:BB:DC:EF:7C:D2:33:90:CF:7C:0C:49:E0:40:41:97:15:D1:B4:E4:6A:3B:D0:8D:D6:D5:1E:93:AF"}}},"request":{"raw":"GET /static-58c8928/js-min/legacy.js?ver=0.0012 HTTP/1.1\r\nHost: prvinote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://prvinote.com/\r\nCookie: PHPSESSID=00f7ec73cda98e8598026855f11dcf56\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 13:21:33 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 23 Mar 2026 17:57:09 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 246\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ud%2FiJD%2F6hxtj%2BpCWFzkMvCsVaHxAi83cGkd1FI8ODGqESiQT3c7VcuQPARbqN3SzEAxCH0698gsZYpLU0xWuf6O%2FdAchJsq1GsjuPVfltkc4oeEeP1KUjrxNQRD89Mk%3D\"}]}\r\ncf-ray: a3239eab59e41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4506\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21715,"size_decoded":5263,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (351)","md5":"6af3ead5505c4300f151e16007c02f56","sha1":"1557381ecc15918464ba3f60c0582155d42085f0","sha256":"5588d51f035c2ee085baafc60053723a6dc41fe6b75ba00086c5444bb2f8c411","sha512":"ba3865a35b537d696b889a8030782886c6c16491199c1f528ebe5642ab6d6f2397347b11050b1d171ef3a23d55a6f55879e24b218142c8ff98df79098d5dfeea","ssdeep":"384:AVVBtIMVdaMVYEuFT1UzG+iK7xlfnzhiL2AAYa:+IMVPVoGzGQ7xlfJAA/","tlshash":"bda2428cf9461f4b15eae4b631b72a07f633834145054640c1bbea8d2f39e0bf15b5ba","first_seen":"2026-03-29T08:42:37.938398Z","last_seen":"2026-08-28T14:07:30.138543Z","times_seen":5,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"prvinote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"up.clickiocdn.com/consent/log/?r=329417240\u0026site_id=230182\u0026version=1692267057\u0026csid=4889\u0026stv=3\u0026tcf2=1\u0026uid=17879232941703852\u0026ugeo=NO\u0026state=21","fqdn":"up.clickiocdn.com","domain":"clickiocdn.com","tld":"com"},"ip":{"addr":"95.211.66.34","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://prvinote.com/","date":"2026-08-28T13:21:34.182Z","timestamp":1787923294182,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.clickiocdn.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 13:20:19 GMT","end":"Sun, 08 Nov 2026 13:20:18 GMT"},"fingerprint":{"sha1":"74:F5:F4:86:71:45:68:C1:9C:6A:4D:D0:7D:76:4E:8C:D2:A2:CE:18","sha256":"EE:D1:5C:34:F2:D3:06:86:D0:19:7D:6D:0F:DB:E9:E0:49:3D:CD:C9:37:56:99:DB:4D:47:76:30:49:BC:FA:54"}}},"request":{"raw":"GET /consent/log/?r=329417240\u0026site_id=230182\u0026version=1692267057\u0026csid=4889\u0026stv=3\u0026tcf2=1\u0026uid=17879232941703852\u0026ugeo=NO\u0026state=21 HTTP/1.1\r\nHost: up.clickiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://prvinote.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.20.1\r\ndate: Fri, 28 Aug 2026 13:21:34 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nx-pixel-host: mnams02\r\niseu: eu\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42,"size_decoded":271,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-28T15:42:39.919233Z","times_seen":1047405,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":2,"connect":21,"send":0,"wait":22,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.clickiocdn.com/t/cmp/v3/vendor-list.json","fqdn":"cdn.clickiocdn.com","domain":"clickiocdn.com","tld":"com"},"ip":{"addr":"46.8.152.14","port":443,"asn":213119,"as":"ALZ Software Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://prvinote.com/","date":"2026-08-28T13:21:34.190Z","timestamp":1787923294190,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clickio.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 07:52:29 GMT","end":"Sat, 07 Nov 2026 07:52:28 GMT"},"fingerprint":{"sha1":"6C:A9:66:F0:88:E6:02:0B:1F:CA:10:72:8A:86:8E:89:EF:94:C3:67","sha256":"17:26:03:09:4E:FA:38:0E:94:88:F0:77:E6:A0:7C:BA:F0:C2:C7:48:63:90:2A:10:02:53:65:0B:69:2E:04:64"}}},"request":{"raw":"GET /t/cmp/v3/vendor-list.json HTTP/1.1\r\nHost: cdn.clickiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://prvinote.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://prvinote.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0\r\ndate: Fri, 28 Aug 2026 13:21:34 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 28 Aug 2026 02:05:04 GMT\r\netag: W/\"6a90ecd0-d043d\"\r\nexpires: Fri, 28 Aug 2026 13:51:34 GMT\r\ncache-control: max-age=1800\r\naccess-control-allow-origin: *\r\niseu: eu\r\niscntr: eu\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":853053,"size_decoded":143553,"mime_type":"application/json","magic":"JSON text data","md5":"fb60d49a5cfb8611d6733bcb93bd10bb","sha1":"7341230703cdd1e6a3719cc9899d6561471e7373","sha256":"22521b743d5ea0c36392dce6dadee30c8f90323537e65d9103cc82ec049f12fc","sha512":"0d18e1ec1f572a65ef3818821c70d4e182e7824b9e0ad12417c36138cb1ab8a163d4a3da9da9c64f6d5bcb9e2bec1af26d5a7e5af085f54289815491f3563480","ssdeep":"3072:DsR02NZi29g19Vj66oFdqPrXJyznYv5x6dj3DM:IRVwjlrXKYv5sLDM","tlshash":"c605266f12840839777b53a9c6067bc759d9307e0fac18e9bc5d193e17e41a33a6228f","first_seen":"2026-08-28T09:48:49.599264Z","last_seen":"2026-08-28T14:07:30.137108Z","times_seen":5,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":3,"connect":22,"send":0,"wait":25,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickiocmp.com/t/cmp/logos/logo_65ad2c5dbc38232f32205715c3fecbc3.png","fqdn":"clickiocmp.com","domain":"clickiocmp.com","tld":"com"},"ip":{"addr":"46.8.152.14","port":443,"asn":213119,"as":"ALZ Software Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://prvinote.com/","date":"2026-08-28T13:21:34.212Z","timestamp":1787923294212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clickiocmp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 12:25:17 GMT","end":"Tue, 29 Sep 2026 12:25:16 GMT"},"fingerprint":{"sha1":"78:B0:83:D4:8E:ED:BB:52:93:2E:92:9C:C9:50:07:09:5B:7C:57:BB","sha256":"9B:48:F8:07:13:94:90:5B:69:1A:0B:10:C6:39:C3:29:94:BD:3E:73:94:84:5E:91:0C:1D:1B:08:DF:65:E2:F3"}}},"request":{"raw":"GET /t/cmp/logos/logo_65ad2c5dbc38232f32205715c3fecbc3.png HTTP/1.1\r\nHost: clickiocmp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://prvinote.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0\r\ndate: Fri, 28 Aug 2026 13:21:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 9787\r\nlast-modified: Wed, 24 May 2023 04:36:55 GMT\r\netag: \"646d9467-263b\"\r\nexpires: Fri, 28 Aug 2026 13:51:34 GMT\r\ncache-control: max-age=1800\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\niseu: eu\r\niscntr: eu\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9787,"size_decoded":10206,"mime_type":"image/png","magic":"PNG image data, 270 x 75, 8-bit/color RGBA, non-interlaced","md5":"d9a6790b73b98a40743c08080e432148","sha1":"08c7bf18a651dd8b2aeba6d56db2e5a734180f8b","sha256":"d87a273d6cc917fc7878dc700937a611505a0572870be34cbe49b3ff0189e81a","sha512":"a583c3b2cff554097b34e70d154e0e6dcb0057e2d293ea6b46ff4d425803cfc7fa109c39925cddda7efae6924a0c0fde00385c3b4440d3480214bb9a95a65cf1","ssdeep":"192:2mIi02k4x7ZaIqjACbSlHPrhpIq/yl7y7KI4qM2PEe8Byvb98L:gi0FE9nCSlvbbqlEKI4qxvb9S","tlshash":"f912afff00eca9bae455fd43ab6490b1b7d7058a1b9b121f90013372e2340e405c96af","first_seen":"2023-11-28T12:56:07Z","last_seen":"2026-08-28T14:07:30.137756Z","times_seen":33,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prvinote.com/static-58c8928/js-min/lib/promise.js","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://prvinote.com/","date":"2026-08-28T13:21:33.972Z","timestamp":1787923293972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prvinote.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 05:22:58 GMT","end":"Fri, 23 Oct 2026 06:22:42 GMT"},"fingerprint":{"sha1":"CB:67:B9:28:2A:54:FF:69:06:1C:19:83:21:6D:9A:AD:69:E7:BD:7D","sha256":"3A:9D:95:0E:BB:DC:EF:7C:D2:33:90:CF:7C:0C:49:E0:40:41:97:15:D1:B4:E4:6A:3B:D0:8D:D6:D5:1E:93:AF"}}},"request":{"raw":"GET /static-58c8928/js-min/lib/promise.js HTTP/1.1\r\nHost: prvinote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://prvinote.com/\r\nCookie: PHPSESSID=00f7ec73cda98e8598026855f11dcf56\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 13:21:33 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 28 Jan 2026 19:43:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 246\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SHgDfUldzSdBoJ7U9TzyzR38lafpAMvTTfG2YENqjGY5SQ69WmWvxu2Ww95%2BPlIcIaQ%2FtJj7HaCanQcF0%2FiqSZeJE12soEg9lWHdzdEntbLGyiRGYITSAdNLnH6XIdE%3D\"}]}\r\ncf-ray: a3239eab59e21525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1088\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2784,"size_decoded":1843,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"05e4b55a50fad40b75edd0cce91e4340","sha1":"ccc4dd629df0cf9dfcadf754e76ea88ed9c8e85b","sha256":"6986df3f8ba7ce00fb51b30b9fff84447f0fd6b874c354b95178bfbeb89d3a64","sha512":"27c7931d227d16a661d7cc2c063d0cfabf51b62adbd17cf0300aeae66c8d9477e08ff4226d74cd5df3714f824ef95ca3b68da0eb38fa3d151c1a8a612cd293b7","ssdeep":"","tlshash":"fd517462fb81e0dbcbc6a134fa2f5e0b6534b8051c56dc54b578e6d809fb01ef11ae19","first_seen":"2023-07-26T11:58:06Z","last_seen":"2026-08-28T14:07:30.125536Z","times_seen":33,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"prvinote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prvinote.com/static-58c8928/style/legacy.css","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://prvinote.com/","date":"2026-08-28T13:21:33.977Z","timestamp":1787923293977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prvinote.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 05:22:58 GMT","end":"Fri, 23 Oct 2026 06:22:42 GMT"},"fingerprint":{"sha1":"CB:67:B9:28:2A:54:FF:69:06:1C:19:83:21:6D:9A:AD:69:E7:BD:7D","sha256":"3A:9D:95:0E:BB:DC:EF:7C:D2:33:90:CF:7C:0C:49:E0:40:41:97:15:D1:B4:E4:6A:3B:D0:8D:D6:D5:1E:93:AF"}}},"request":{"raw":"GET /static-58c8928/style/legacy.css HTTP/1.1\r\nHost: prvinote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://prvinote.com/\r\nCookie: PHPSESSID=00f7ec73cda98e8598026855f11dcf56\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 13:21:34 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 04 Sep 2026 13:17:27 GMT\r\nlast-modified: Wed, 28 Jan 2026 19:43:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 246\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lVfzKs6MQQnSk9f0P%2F36ZIG%2FvTZ7SSyl9VEC%2F7%2BXTPtcROf8RF7%2BHaQ3ZE1jDL6KY5MudB1NaNIi91ELBZYTzldMh%2BF3%2Fkj5t1arbgga7nX1AUq1nAHzSGTxSnGKwlA%3D\"}]}\r\ncf-ray: a3239eab59e71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2627\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":12154,"size_decoded":3432,"mime_type":"text/css","magic":"ASCII text","md5":"8e9c1c0883c1178f41c8a72077708737","sha1":"37823e9a52898287798e7e5c387951f7af5be033","sha256":"0322b629b928912687cc9bc4b47d57e136bb93690f789b77a0032b0b6bad54e9","sha512":"638ba92a2055b98c22cb14ed2fbdc730e4896c79a9be42cb8b322be3278dd545754095674e997d69c1d9699a5294e936e3a5a751abd9a0e4e1df347718102abf","ssdeep":"192:cqjQmjDun5+gYgH5bDhhbDKVFqFVF0FyKDrJD+y+qSP9D2ccR7D6cP7EmvURU2Ew:v5QBDXDKVFqFVF0FPDFDp2DeGP","tlshash":"4b422115aed30845b84bc8647babd781e32840139d0fde3dbe9eb694cf4d19464b9b8c","first_seen":"2023-07-26T11:58:06Z","last_seen":"2026-08-28T14:07:30.12831Z","times_seen":33,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"prvinote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prvinote.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://prvinote.com/","date":"2026-08-28T13:21:33.982Z","timestamp":1787923293982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prvinote.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 05:22:58 GMT","end":"Fri, 23 Oct 2026 06:22:42 GMT"},"fingerprint":{"sha1":"CB:67:B9:28:2A:54:FF:69:06:1C:19:83:21:6D:9A:AD:69:E7:BD:7D","sha256":"3A:9D:95:0E:BB:DC:EF:7C:D2:33:90:CF:7C:0C:49:E0:40:41:97:15:D1:B4:E4:6A:3B:D0:8D:D6:D5:1E:93:AF"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: prvinote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://prvinote.com/\r\nCookie: PHPSESSID=00f7ec73cda98e8598026855f11dcf56\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Sun, 30 Aug 2026 13:21:33 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XnyHp5q2u04DeDbUYV9qyuTmMCgemfMmkkol%2FCvz%2Fuu5ivwESac5mc4wG0IBz1EhCsbFiTUsUuP9IhnqnApOWduYytDG0%2BVEUlpMqaDPmll80xZaTmOok%2F3z%2BRJJKoE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Fri, 28 Aug 2026 13:21:34 GMT\r\nserver: cloudflare\r\ncf-ray: a3239eab69e81525-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1290,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-28T15:43:35.488887Z","times_seen":427030,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"prvinote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prvinote.com/static-58c8928/style/legacy/privnote-page-flip-30.png","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://prvinote.com/","date":"2026-08-28T13:21:34.116Z","timestamp":1787923294116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prvinote.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 05:22:58 GMT","end":"Fri, 23 Oct 2026 06:22:42 GMT"},"fingerprint":{"sha1":"CB:67:B9:28:2A:54:FF:69:06:1C:19:83:21:6D:9A:AD:69:E7:BD:7D","sha256":"3A:9D:95:0E:BB:DC:EF:7C:D2:33:90:CF:7C:0C:49:E0:40:41:97:15:D1:B4:E4:6A:3B:D0:8D:D6:D5:1E:93:AF"}}},"request":{"raw":"GET /static-58c8928/style/legacy/privnote-page-flip-30.png HTTP/1.1\r\nHost: prvinote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://prvinote.com/static-58c8928/style/legacy.css\r\nCookie: PHPSESSID=00f7ec73cda98e8598026855f11dcf56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 13:21:34 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 04 Sep 2026 13:17:27 GMT\r\nlast-modified: Wed, 28 Jan 2026 19:43:19 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 246\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tRG8utgK1VFFypwtrgnCxVNvbW%2B6ASBmxbOsIE4ytRfrQQD9SlZzlPBlaGUOmA5MEH0V1qjJE%2B35o2sNd6F4iVs2zfec4auoEXIAqykJq63e5KOf0xd7YJHJVhFmMzc%3D\"}]}\r\ncf-ray: a3239eac3a171525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 174\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":174,"size_decoded":921,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit colormap, non-interlaced","md5":"eccb8dfcf75f2ddd8f2ce81533ebfb6a","sha1":"ec66a18b92a1635fd2fb2690e0823bbf375b4912","sha256":"0fda09b6fbd18ef079182f76f3a43a0aeedfcefac474efed7fb654e4dd9ae70a","sha512":"1ff3b76dc691123c3bd915ad67216e3a0a537038535017a47b6a2dfbaad41ba9b0b87380757651520464dc4fd1274dd7a6f3ce0fce25b43394040712745e1b34","ssdeep":"","tlshash":"b7c08cc7bd688e78cf230232eb25f20198cac74323219272188a882353e254480f6583","first_seen":"2025-04-25T09:36:31.317447Z","last_seen":"2026-08-28T14:07:30.122691Z","times_seen":89,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"prvinote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prvinote.com/static-58c8928/icon/favicon-16x16.png","fqdn":"prvinote.com","domain":"prvinote.com","tld":"com"},"ip":{"addr":"104.21.6.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://prvinote.com/","date":"2026-08-28T13:21:34.134Z","timestamp":1787923294134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prvinote.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 05:22:58 GMT","end":"Fri, 23 Oct 2026 06:22:42 GMT"},"fingerprint":{"sha1":"CB:67:B9:28:2A:54:FF:69:06:1C:19:83:21:6D:9A:AD:69:E7:BD:7D","sha256":"3A:9D:95:0E:BB:DC:EF:7C:D2:33:90:CF:7C:0C:49:E0:40:41:97:15:D1:B4:E4:6A:3B:D0:8D:D6:D5:1E:93:AF"}}},"request":{"raw":"GET /static-58c8928/icon/favicon-16x16.png HTTP/1.1\r\nHost: prvinote.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://prvinote.com/\r\nCookie: PHPSESSID=00f7ec73cda98e8598026855f11dcf56\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 13:21:34 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 04 Sep 2026 13:17:28 GMT\r\nlast-modified: Wed, 28 Jan 2026 19:43:19 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 245\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iYRQrKvzHquW4Hmd2dlzlt2J87UhgK7DiAlNl1FgEA5MtbaLZ798GV4lR%2FIwv2u%2FPrvNcD08WHXtwRBgIbrCnxvOO6TAD31b%2ByzxjpNJjJssIAHwa1%2BaFnIS6sRVtSM%3D\"}]}\r\ncf-ray: a3239eac5a1d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 426\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":426,"size_decoded":1180,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"f89ab673e26bc011395be48dfbdcb462","sha1":"8d815e9fae24b38e9423cebf0c56ac93d2bf92c1","sha256":"794be059a2ad05011979e9806ad098ce2fc840a739076f00ac5ba898f8c9afa6","sha512":"0a873699ad352e7b6db716f62933c412807a06f8ebe93f3b68394efdd6223b42762c9498b52538dc9888c1a44489f91b5d0bb2d5dda8922280f4f99a15c65476","ssdeep":"","tlshash":"80e05ca7b1423cf9c5840b33a97e79e446284623a0f7193a07715da04805b91e1b107a","first_seen":"2023-11-28T12:56:07Z","last_seen":"2026-08-28T14:07:30.116713Z","times_seen":24,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"prvinote.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"up.clickiocdn.com/consent/log/?r=329417792\u0026site_id=230182\u0026version=1692267057\u0026csid=4889\u0026stv=3\u0026tcf2=1\u0026uid=17879232941703852\u0026ugeo=NO\u0026state=100","fqdn":"up.clickiocdn.com","domain":"clickiocdn.com","tld":"com"},"ip":{"addr":"95.211.66.34","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://prvinote.com/","date":"2026-08-28T13:21:34.183Z","timestamp":1787923294183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.clickiocdn.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 13:20:19 GMT","end":"Sun, 08 Nov 2026 13:20:18 GMT"},"fingerprint":{"sha1":"74:F5:F4:86:71:45:68:C1:9C:6A:4D:D0:7D:76:4E:8C:D2:A2:CE:18","sha256":"EE:D1:5C:34:F2:D3:06:86:D0:19:7D:6D:0F:DB:E9:E0:49:3D:CD:C9:37:56:99:DB:4D:47:76:30:49:BC:FA:54"}}},"request":{"raw":"GET /consent/log/?r=329417792\u0026site_id=230182\u0026version=1692267057\u0026csid=4889\u0026stv=3\u0026tcf2=1\u0026uid=17879232941703852\u0026ugeo=NO\u0026state=100 HTTP/1.1\r\nHost: up.clickiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://prvinote.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.20.1\r\ndate: Fri, 28 Aug 2026 13:21:34 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nx-pixel-host: amn-ams-5-4\r\niseu: eu\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42,"size_decoded":275,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-28T15:42:39.919233Z","times_seen":1047405,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":23,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}