{"report_id":"dd69bb71-ba88-45fb-9c39-f227d13116b9","version":6,"status":"done","tags":[],"date":"2026-01-18T23:30:46Z","url":{"schema":"http","addr":"tikoui.com","fqdn":"tikoui.com","domain":"tikoui.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":0,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"tikoui.com/","fqdn":"tikoui.com","domain":"tikoui.com","tld":"com"},"title":"TikOui.Com – Activer la monétisation","dom":{"size":92698,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (479)","md5":"19616639bf113862461b73557fb9425d","sha1":"843ad20593e855cec48323a59baf7382e8a3fc6d","sha256":"36d9339cb4787c438643105ef11fd6e235ddd45053182b4e05bbea83ec4952a6","sha512":"8fb72ab7960ca7ec44058ebd1ed4b7f793c9396b47939253ee7956e67d3be7cd1f810c8b8a3d34fac8498b0b0a8b0815142bb4c681625caccbc4c798597891d6","ssdeep":"768:z+l+N47pZ6I6gU6f6X686K6/6Z6I6gU6f6X686K6/6Z6I6gU6f6X686K6/svzDWS:zu4Pv3/mkeuuuuuuU","tlshash":"7f931378a3f1046d6097c3e2f6917f6b9eb8cb57da1b8254b26c86911fcbc41de03a44","dom_hash":"domhashf055c661bf9a0a3ea17534fee4a3111e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tikoui.com","fqdn":"tikoui.com","domain":"tikoui.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":0,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-22T23:30:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"tikoui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"tikoui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-18T22:30:25.777558Z","alert_count":0,"request_count":1,"received_data":44563,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tikoui.com","ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":12,"request_count":6,"received_data":214398,"sent_data":2624,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.3/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"be0f95d170d928cc6a62a542fe3fd9df","sha1":"5a8f1d4f0d91add40198fd14f6d114a541d4b615","sha256":"b21df3675814d594880ed4b1a5a8ad8247fbcccbde25ce831c1c9a5e64b6f581","sha512":"181e58a0d47992114b86baa9d160f5aa9e9d9bdd78cfa14f4ec9314e8f0cfb1e188cd543b3e5e728261dddee40dbed65a95a512a0e644ac5478526d6e84adb7c","ssdeep":"","tlshash":"47c08cc058c20904c20338c18039513b2228123092be48642a3ca394d2b310ad05ccfd","size":150,"data":"","first_seen":"2025-07-14T17:17:52.250601Z","last_seen":"2026-06-04T00:27:07.886228Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.3/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2ef788f8b46f011c1dfd62b9a834ee8","sha1":"9a7ab27dd4cb1b1d91e91e0144b9763138112c10","sha256":"c8fa8ff457abdcd212f37a07ef2f292c999011dffabcaa577fb1e1e0076ca658","sha512":"001daf00c56bb66988fb607048ca81fb2d6a18f349a2f50e0a9e30dbb4bda6f5fcc973d035b04ee24b8cf79dbe2e53a99e0f557963dbf3a6f9377d9b92f5d1bd","ssdeep":"768:n3oVzUGotWtG+837to+73jcVOnLnfhF4PWt4b6j85kXvwTlVyR6MPnPaJbfUpqlI:cV0m+7TcVY74fgvkx9y","tlshash":"b613fae973dab17283ef11b650ff4646f3391894680e5428f719e8da342648941f3fba","size":43441,"data":"","first_seen":"2023-11-19T17:33:16Z","last_seen":"2026-06-02T20:24:13.114957Z","times_seen":473,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.3/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"f39fee90085726b5a5d6d1a8bd9bb403","sha1":"23f60b3c3749768bc91d098b7fbb0e7483b8b082","sha256":"8e9c56b0eb50825202cbe01de748f6bc4e11aeab43eeb2a4b63cfba33417d497","sha512":"6251c7e10b0b71ef25b4fd349b65a84925e12bd5b0c7855424c122c4458c09a72ea89a8fc0682bbde203a02d9a5e4ecbd80b6b61ecd12f7e148e1167f509ed9a","ssdeep":"","tlshash":"47c02bc058c21b00c20334c0c036803731381a30817f48a4173ce3588033117d26dc6d","size":139,"data":"","first_seen":"2026-01-18T23:30:50.419923Z","last_seen":"2026-05-01T16:09:45.671255Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikoui.com/assets/js/app.js","fqdn":"tikoui.com","domain":"tikoui.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"eaec658933e1b4feb7839651c4e69d0c","sha1":"38f425d311f450a4670683280840d7db05bc8baf","sha256":"450af8181233a90718e06b4d5411dbaf8d119a23d0c859b0b087dd51f3cca2ee","sha512":"2b62994de441a31b5d84f31060f738b93be036cbd50449a8223ddb898a045c2aa6de55f6513cf62579f25ec7d938102c9be912053732ad59ad28bb7561c0ea06","ssdeep":"","tlshash":"5d51ce9a12ab111981b7733a9e914818f331423f0b87855e3e7c46c01ff623495a1ffc","size":2447,"data":"","first_seen":"2026-01-18T23:30:50.411461Z","last_seen":"2026-05-01T16:09:45.636225Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.3/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"96c22fe2290b771da4b83c63eda21954","sha1":"a952680fc0164359209fb4fdbcf7efd7a73c160d","sha256":"59d583aa861c91c97a217d108b940b45f28b23649144b4ee6174b8aef4a40f5f","sha512":"ef8a49dfb5a0e1b0a5ad93ca2f7b16fb64735ba0d55d38df53dff045013730287b447b60d9ac96e912d25ec02db781d44e6e567e6390e68400979271948a40a4","ssdeep":"","tlshash":"a4c02bc408c31a00c20334c0c035c43722782221c17d8465273cf374d5b3547d01cc9e","size":148,"data":"","first_seen":"2023-04-16T00:09:00Z","last_seen":"2026-05-30T21:58:36.106875Z","times_seen":207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.3/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"0049af843f1b464abf0c24ed58042f9f","sha1":"fcbbf59bc15d8886ff9b846ff52a21f90f6dcc92","sha256":"c5ca9ad355c2d06b19c748e19fdd04eb7ff1b115c817068c17a8cec0988532eb","sha512":"b09cf2957bf66bb88b75286cc4b61389f6b35f9784ac6a5340d736ef121623b4e3355fba6ee71bdba1d26b9896f9389dd02e563d3421ef9003fc80cb4c7aba0f","ssdeep":"","tlshash":"fbc02bc018c34a04c21334c0c039503721391231817d44a8173ce350d03302bd12cc5e","size":143,"data":"","first_seen":"2026-01-18T23:30:50.422011Z","last_seen":"2026-05-17T00:35:06.996058Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.3/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"1ffaa36b8405d2e265dbbfadbd1eb715","sha1":"7ee754f5e16d39f1f7279a6d5cdbb9bd36cac065","sha256":"97de31db0cee7b48b6cf7c4e1c8a8ca22cb04c9b854fcd7a0cebece928a2ced7","sha512":"730408702cf3777976678945281a713ab378c1f5b708cb2b8c76106fcb9ebb368e1e523369e11354803b24516e95c938fc1c121459b0c0eaf7dd2bea2eba2f3b","ssdeep":"","tlshash":"4cc09bd458c65900c2133591c035543b62746661917d44a5273db354d573117d15cc9e","size":132,"data":"","first_seen":"2023-04-16T00:08:59Z","last_seen":"2026-05-30T21:58:36.178532Z","times_seen":214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.3/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"4758ed611a0f84e6395372cc77ad4428","sha1":"266ab397bbfa99f6b652fb0d0be1bcb576087c2f","sha256":"4d80c940c3325183d6cbd4f4cbb2843a73266aa5ad48e52956b7fbbeaccf607e","sha512":"00cd5c41300e3d63a038ab7d97f854081d9d218fe8669a95820b38cc95a8c67105ab84f98af4f591b546b79519dfededfafab09af965d23111f42f1e03ca7c3b","ssdeep":"","tlshash":"dcc02bc00cc61900c30339a2c139643721341320827d4464163cb3549073106d01cc9d","size":136,"data":"","first_seen":"2024-08-11T01:40:42Z","last_seen":"2026-05-18T01:42:11.51646Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.3/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"ef0f1e0b9ad3637514617ff5b5988843","sha1":"c33a339d01747544ea4c8e12bf7afc89f4ca7e51","sha256":"b54cc9498739326536fc384d5ef057bc03d1b89b374d21f6080a44d482797449","sha512":"9968ac57807df8121621f0fce8983556bde6bfb71749130659d60464edd07e8cc7db48058b9573a7183835c502a953ba9bb452119eac9ebd20b7fe27528cb718","ssdeep":"","tlshash":"c0c02bc008c21900c25735d1c039603761351230817d4464163ce3508033017d22cc5e","size":141,"data":"","first_seen":"2026-01-18T23:30:50.424307Z","last_seen":"2026-05-01T16:09:45.658506Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.3/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"9fcd02bdeb59afccca6f5e6c4eaedbcc","sha1":"d88dfa1ab45a9a0af7bdf2ec93c01935ea8feadd","sha256":"98e29d924d47331b88245d82612bfb2af43aca4afa13fe9bc3e9e5f1e0c686bc","sha512":"edb33df713bc71a12fb7030fc59cc21d53fb6724a9f55d237fb76da349261f0bf6a5fa89bdb8d17c54c8c5a9f40292d4d8e89965ddd3ba6f748bebebb630d019","ssdeep":"","tlshash":"e1c02bc448c22b00c2133480c0358037a1783630847d44a43b3cb754d233106d08cc5e","size":143,"data":"","first_seen":"2026-01-18T23:30:50.425199Z","last_seen":"2026-05-01T16:09:45.648726Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.3/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"c9e1732c06bb7014e89a3ac4c43b88f0","sha1":"f993589d9402e4ee9871c6f0174649093aa7202b","sha256":"dd4c93bae232b264219abacf13f2900fd601bd2c30984b77e2a87071496d2480","sha512":"911b61c37e431012535b18568e74316b356363086e45e5ae79d2c599b1b3c3941f6a82436ff9aca86a38022d0338f3171ad82c03c5af8c3d77f9637b4107015f","ssdeep":"","tlshash":"a8c09bc458c65e00c6173995d0365437613516a5927d846d173da355d533116d15cc9d","size":133,"data":"","first_seen":"2026-01-18T23:30:50.426562Z","last_seen":"2026-05-08T07:35:12.817641Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.3/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"867772e015bfb12f42d6418f24345359","sha1":"9a269d065cfe40dae4725142d98de0ff00899bed","sha256":"46fbd7958c1e1afa5097f8d91f7227dd723173949c0dfe6a18f99b315a240d42","sha512":"f966c1703f8dd19244b9482d39b34f12c5199c0b7e721fc32ba683c78187491a6b80c360871a4a46e0c72ed5b3bce3190e7f16940ef95976973ed7b2eabba05b","ssdeep":"","tlshash":"09c02bc048c75b00c2033981c035503b61351220907d4464173ce3908033016f00cc9e","size":135,"data":"","first_seen":"2023-07-18T12:30:00Z","last_seen":"2026-06-06T09:48:12.87256Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.3/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"0efb6f0f5ab6a54a031fc49bdf386a60","sha1":"d4aa0aa5e36d40004f97bbf2f333e7791cfe6ef4","sha256":"2472242b3ecd4201e163eb733592bcdbeae5b2eaa2db8b964f326518eb73bbc8","sha512":"b50aa3e0bc6af731737ba00ff41695b07232e109d05126f781e6295731ce446a2433075b43d1e5aad5bd8956a0fff599a40682ab2ffad89ede791f73634491b5","ssdeep":"","tlshash":"69d0a76c56636510c21334829429d037e1bc77e489bf79947534975557335a2c1ccc6f","size":242,"data":"","first_seen":"2026-01-18T23:30:50.428626Z","last_seen":"2026-05-01T16:09:45.672572Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.3/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"83cf053a36f6c564289fc065aaac7e17","sha1":"1aef886e013be55095ad369bb8fa6f29c45fb94b","sha256":"ba2d8fa62e440277f8908e5fd05c7a146700359d550f1b101c21e4d7368f0eb4","sha512":"daa95c1558362f7fd0a288ad9cafd8d7953ac892ed73070c762c6960270b794988e4b320c01e0959bc62bb120539e1c5b2c078a8c032e1db59a03ca944b4db3e","ssdeep":"","tlshash":"37c09bd458d65d10c2133591c035543b62756671917d44e5363de394d573117d15ccae","size":138,"data":"","first_seen":"2026-01-18T23:30:50.429976Z","last_seen":"2026-05-01T16:09:45.6669Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.3/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"4c72b107ab8ed6e7bdd395e44fc67169","sha1":"ca731769ae3486cfc209f7ceb95aafcb2c57aa4b","sha256":"cd7ccfae38961428a8c627a06a638c08b0ab8b7722334cc71f8889137d4f9e84","sha512":"1b2c3f595a886034b7b2f9e67d140bde92acd421bc7b7fa07b7b34785c6e00659af5602b91c2a49a9c937aafb6be5fad9a235aaecdc6d1cf66d4188dd2bae647","ssdeep":"","tlshash":"02c02bc448ca0900c21334c0c039603721351230c17d44a8173ce390807301be11cc5e","size":141,"data":"","first_seen":"2026-01-18T23:30:50.431332Z","last_seen":"2026-05-01T16:09:45.661704Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.3/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"233b9ae73441dd8ddc7d43d5ec931c2b","sha1":"168000f84adac1cfd0092f189bc7599186d1e666","sha256":"70de4fa5f615da6467d2d437327ffa1fefc714db5f853f0d547b014fbd90e60f","sha512":"1f8a47597b0be0fba271358fca15e4dc2191871b26580663d3b89cfcfef9b67fad400e0029de9f687b9b0fb288dd7b1ef542331b882ae98c6dd7e8390d166921","ssdeep":"","tlshash":"ddc09bc45cc65900c3173d91d035543b62345661917d9475163de3549533116d15cc9e","size":133,"data":"","first_seen":"2023-08-25T17:43:42Z","last_seen":"2026-06-07T06:36:50.314618Z","times_seen":205,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.3/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"c35b320f3b06e77832a3f7cf44be7e1a","sha1":"82b35eaba5d963ba164ad5140b59fae1dd707e23","sha256":"dbedab66069a8de02355c1b20dc42f690e836fbdca03f44f44f6629b5feae51e","sha512":"3c96a295d6fb3715f896a16bf8b8039ee9efa55d61ee308522999b2895c279371a7ddccecf9b845589a1d8d3829de3a1d7c755067a50aa11290dd54dfda4c2b0","ssdeep":"","tlshash":"b6c02bc40cc61900c3033d81c036483b63342a20817e9476173ce350903300ad01ccde","size":141,"data":"","first_seen":"2023-08-25T17:43:42Z","last_seen":"2026-06-07T06:36:50.312459Z","times_seen":180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tikoui.com/","fqdn":"tikoui.com","domain":"tikoui.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-18T23:30:24.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tikoui.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 23:36:49 GMT","end":"Thu, 02 Apr 2026 23:36:48 GMT"},"fingerprint":{"sha1":"0B:77:A5:5D:19:BA:67:00:F7:CD:3C:6B:60:D0:38:6B:13:5F:FE:DA","sha256":"86:04:49:30:20:0A:A5:C0:40:12:36:49:1E:9F:F2:23:C4:0A:30:6D:E6:0A:16:8A:72:91:36:5D:01:0D:09:50"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tikoui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/7.4.33\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 18 Jan 2026 23:30:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":95000,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (425), with CRLF line terminators","md5":"4ce0c4e56d3a86e01b9cb22d16faa757","sha1":"a993925e3c48333a8afb4499914cff0982cfd0aa","sha256":"90c8f08b1f5893696057e5055221d7a765025c095a946363c299f8d487100065","sha512":"169e2740851cf6935212f58d3274449cd1de3f7e29c265c54d562725d109943d046ebacb3a62082d87baf22d186aaa3c5d0f6edd7b6063336ccd6366f5093f8e","ssdeep":"768:vlRFWyVuQuKyuRu/ucuMu5uVuQuKyuRu/ucuMu5uVuQuKyuRu/ucuMu5aYDKnqHA:NqY+KQTscccccqc","tlshash":"2c93d378a2c1146d6473c2e2e6a16fadeea8c743e74b9194b1ac93932ff7c05dd03650","first_seen":"2026-01-18T23:30:50.40759Z","last_seen":"2026-01-18T23:30:50.40759Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":70,"dns":31,"connect":16,"send":0,"wait":20,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"tikoui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"tikoui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tikoui.com/assets/css/style.css","fqdn":"tikoui.com","domain":"tikoui.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tikoui.com/","date":"2026-01-18T23:30:24.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tikoui.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 23:36:49 GMT","end":"Thu, 02 Apr 2026 23:36:48 GMT"},"fingerprint":{"sha1":"0B:77:A5:5D:19:BA:67:00:F7:CD:3C:6B:60:D0:38:6B:13:5F:FE:DA","sha256":"86:04:49:30:20:0A:A5:C0:40:12:36:49:1E:9F:F2:23:C4:0A:30:6D:E6:0A:16:8A:72:91:36:5D:01:0D:09:50"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: tikoui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tikoui.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 23:30:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 03 Jan 2026 00:34:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8814\r\ndate: Sun, 18 Jan 2026 23:30:24 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":70984,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (334)","md5":"f6b5e3652f088f9fb041637305256c5e","sha1":"21470d954a7ed5ddbc66338927cecea1549f96e5","sha256":"5950a0fab7b3213ea5d260511b265b40840ad92cec9317768b8c8067b0d16812","sha512":"ae0064f111c7e517216d542bc90f2f0683d4feef7e398be66cc558d4388d9b448c5a043562fa218bead006f8647871b915458406509e686a3bca02361e1d3b6d","ssdeep":"1536:qg9hnsSOfpBV4XPoPLWK+8PezxxsVmm74LWb4k827FUTBhzrUsoK2:/PoPL3PezxxsVmm74LWb4k827FUTBhzO","tlshash":"5963ac64b2f1d5b77c33b2b993de604d7b39e05bd929dea9b9c801109f922f95cc1a00","first_seen":"2026-01-18T23:30:50.409263Z","last_seen":"2026-01-26T19:10:29.355229Z","times_seen":5,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"tikoui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"tikoui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.3/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tikoui.com/","date":"2026-01-18T23:30:24.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/alpinejs@3.13.3/dist/cdn.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tikoui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 23:30:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 16086\r\ncf-ray: 9c01e1483f36712e-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.13.3\r\nx-jsd-version-type: version\r\netag: W/\"a9b1-mnqyfdTLGx2R6R4BRLl2MTgRLBA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230066-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 6220835\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3BSFafiLKo3JtPXIamgmlN4vAcvsm7%2FDIbQAU0NwrEt8u55%2B2Ra6wbmL2mLVyvCinEJz7fR34xNopbHPNIZTs%2FUOoITpmJT055FjDSgbg0reboUS4yLjNraP8OVAumblkhg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43441,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36769)","md5":"b2ef788f8b46f011c1dfd62b9a834ee8","sha1":"9a7ab27dd4cb1b1d91e91e0144b9763138112c10","sha256":"c8fa8ff457abdcd212f37a07ef2f292c999011dffabcaa577fb1e1e0076ca658","sha512":"001daf00c56bb66988fb607048ca81fb2d6a18f349a2f50e0a9e30dbb4bda6f5fcc973d035b04ee24b8cf79dbe2e53a99e0f557963dbf3a6f9377d9b92f5d1bd","ssdeep":"768:n3oVzUGotWtG+837to+73jcVOnLnfhF4PWt4b6j85kXvwTlVyR6MPnPaJbfUpqlI:cV0m+7TcVY74fgvkx9y","tlshash":"b613fae973dab17283ef11b650ff4646f3391894680e5428f719e8da342648941f3fba","first_seen":"2023-11-19T17:33:16Z","last_seen":"2026-06-02T20:24:13.114957Z","times_seen":473,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":8,"dns":1,"connect":1,"send":0,"wait":11,"receive":1,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikoui.com/assets/js/app.js","fqdn":"tikoui.com","domain":"tikoui.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tikoui.com/","date":"2026-01-18T23:30:24.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tikoui.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 23:36:49 GMT","end":"Thu, 02 Apr 2026 23:36:48 GMT"},"fingerprint":{"sha1":"0B:77:A5:5D:19:BA:67:00:F7:CD:3C:6B:60:D0:38:6B:13:5F:FE:DA","sha256":"86:04:49:30:20:0A:A5:C0:40:12:36:49:1E:9F:F2:23:C4:0A:30:6D:E6:0A:16:8A:72:91:36:5D:01:0D:09:50"}}},"request":{"raw":"GET /assets/js/app.js HTTP/1.1\r\nHost: tikoui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tikoui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 23:30:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 03 Jan 2026 00:34:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 706\r\ndate: Sun, 18 Jan 2026 23:30:24 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2447,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"eaec658933e1b4feb7839651c4e69d0c","sha1":"38f425d311f450a4670683280840d7db05bc8baf","sha256":"450af8181233a90718e06b4d5411dbaf8d119a23d0c859b0b087dd51f3cca2ee","sha512":"2b62994de441a31b5d84f31060f738b93be036cbd50449a8223ddb898a045c2aa6de55f6513cf62579f25ec7d938102c9be912053732ad59ad28bb7561c0ea06","ssdeep":"","tlshash":"5d51ce9a12ab111981b7733a9e914818f331423f0b87855e3e7c46c01ff623495a1ffc","first_seen":"2026-01-18T23:30:50.411461Z","last_seen":"2026-05-01T16:09:45.636225Z","times_seen":8,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"tikoui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"tikoui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tikoui.com/assets/img/bento-img-1.jpg","fqdn":"tikoui.com","domain":"tikoui.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tikoui.com/","date":"2026-01-18T23:30:24.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tikoui.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 23:36:49 GMT","end":"Thu, 02 Apr 2026 23:36:48 GMT"},"fingerprint":{"sha1":"0B:77:A5:5D:19:BA:67:00:F7:CD:3C:6B:60:D0:38:6B:13:5F:FE:DA","sha256":"86:04:49:30:20:0A:A5:C0:40:12:36:49:1E:9F:F2:23:C4:0A:30:6D:E6:0A:16:8A:72:91:36:5D:01:0D:09:50"}}},"request":{"raw":"GET /assets/img/bento-img-1.jpg HTTP/1.1\r\nHost: tikoui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tikoui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 23:30:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 03 Jan 2026 00:34:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17235\r\ndate: Sun, 18 Jan 2026 23:30:24 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17235,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 731x210, components 3","md5":"c3cded2ba94df3aefad99fd570a3829d","sha1":"e0791edbc97245c93b94d7412d4aacdc1ba34c20","sha256":"97a607a720cea49c32f7af80ea45006c30c0a6e93eaf202c4a2014fd855deda7","sha512":"b5f3fa7eb85fe75de737603b3869b32ec1967942b8dca267cc2e4a223309ee07021f45c184ff29b085bc5eab0860548ce537add9a6d2c23df47611351c0d6c6d","ssdeep":"384:I/ck9bi2Z90fb8sessEnw6Ik3CTEn2v8/55hjWsd8ZbFxTp:J2Z90D8sesXw6/CW6y55Usd8L","tlshash":"d5729e3e13d6d896cb6e97b28fd63a28c96cb119208db40db5063f7b1cd21893b13359","first_seen":"2026-01-18T23:30:50.41266Z","last_seen":"2026-05-01T16:09:45.638959Z","times_seen":8,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"tikoui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"tikoui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tikoui.com/assets/img/logo.webp","fqdn":"tikoui.com","domain":"tikoui.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tikoui.com/","date":"2026-01-18T23:30:24.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tikoui.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 23:36:49 GMT","end":"Thu, 02 Apr 2026 23:36:48 GMT"},"fingerprint":{"sha1":"0B:77:A5:5D:19:BA:67:00:F7:CD:3C:6B:60:D0:38:6B:13:5F:FE:DA","sha256":"86:04:49:30:20:0A:A5:C0:40:12:36:49:1E:9F:F2:23:C4:0A:30:6D:E6:0A:16:8A:72:91:36:5D:01:0D:09:50"}}},"request":{"raw":"GET /assets/img/logo.webp HTTP/1.1\r\nHost: tikoui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tikoui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 23:30:24 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sat, 03 Jan 2026 00:34:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25622\r\ndate: Sun, 18 Jan 2026 23:30:24 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25622,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3ca4e200ebb5af18bcc4e1e6627e3684","sha1":"674207010915f5add064bc36bef748aa6e9076d6","sha256":"1e8f558f96bcf8007e46cb26b0c547df1a95e9e32a14161c3a521a57b9ff9e3a","sha512":"3a48a106f88077f7b1d36d495e536ccac5887023ac5914fbc2a83320aad21353f4f56f5f0420d6fa0177c15e18f80096ab9353d7145c2de3e231b950db810739","ssdeep":"768:6O2jtQRXS6z/NiHixFP+GQyJALx4FUHC1wJIVA+/:L2jtL3KFP+GTiLx4YC1wuAW","tlshash":"3db2d06a9b6b9794e210103faef72f1345c992ae2fb229d598d8b6ddcb0508404b1b71","first_seen":"2026-01-18T23:30:50.414675Z","last_seen":"2026-05-01T16:09:45.61685Z","times_seen":8,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"tikoui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"tikoui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tikoui.com/favicon.ico","fqdn":"tikoui.com","domain":"tikoui.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tikoui.com/","date":"2026-01-18T23:30:24.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tikoui.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 23:36:49 GMT","end":"Thu, 02 Apr 2026 23:36:48 GMT"},"fingerprint":{"sha1":"0B:77:A5:5D:19:BA:67:00:F7:CD:3C:6B:60:D0:38:6B:13:5F:FE:DA","sha256":"86:04:49:30:20:0A:A5:C0:40:12:36:49:1E:9F:F2:23:C4:0A:30:6D:E6:0A:16:8A:72:91:36:5D:01:0D:09:50"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: tikoui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tikoui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Sun, 18 Jan 2026 23:30:24 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-06-06T18:19:23.844701Z","times_seen":40765,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"tikoui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"tikoui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}