{"report_id":"e5c663e7-dae8-43dd-b4c6-103f6b15849e","version":6,"status":"done","tags":[],"date":"2026-06-05T23:57:43Z","url":{"schema":"http","addr":"tomaskaraba.com/qrr/","fqdn":"tomaskaraba.com","domain":"tomaskaraba.com","tld":"com"},"ip":{"addr":"92.240.253.18","port":0,"asn":29405,"as":"VNET a.s.","country":"Slovakia","country_code":"SK"},"final":{"url":{"schema":"https","addr":"tomaskaraba.com/qrr/","fqdn":"tomaskaraba.com","domain":"tomaskaraba.com","tld":"com"},"title":"Welcome - Digital Marketing Insights","dom":{"size":3534,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"25552bef5acb216c101b2a7c09fd949f","sha1":"1cad6294a1faa621bd078650fdecc29daef4e012","sha256":"c940c99aa6390ce5fe65449252f24c34199628bb52ab428961af31696728d9b7","sha512":"3c79092ee8fa37360bff909ccde5a00f5400644cbf60e046285bf10569358910d6528638b66cb0f105e4a597b7639aa9a9740603c6c98d85624be4b7dc72076c","ssdeep":"","tlshash":"0a71653797f2055aa00650e06e669b5b2f58c827d28bc9653ecc5388df868e6caf750c","dom_hash":"domhash4bd0a29f5e21e66204943fd1cb98f33d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tomaskaraba.com/qrr/","fqdn":"tomaskaraba.com","domain":"tomaskaraba.com","tld":"com"},"ip":{"addr":"92.240.253.18","port":0,"asn":29405,"as":"VNET a.s.","country":"Slovakia","country_code":"SK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-10T23:57:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"tomaskaraba.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"tomaskaraba.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"www.tomaskaraba.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"www.tomaskaraba.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.tomaskaraba.com","ip":{"addr":"92.240.253.18","port":443,"asn":29405,"as":"VNET a.s.","country":"Slovakia","country_code":"SK"},"domain_registered":"2024-11-09","domain_rank":0,"first_seen":"2026-05-07T13:51:19.175355Z","last_seen":"2026-05-16T14:11:53.756552Z","alert_count":4,"request_count":2,"received_data":7704,"sent_data":932,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tomaskaraba.com","ip":{"addr":"92.240.253.18","port":443,"asn":29405,"as":"VNET a.s.","country":"Slovakia","country_code":"SK"},"domain_registered":"2024-11-09","domain_rank":0,"first_seen":"2026-05-16T18:33:59.276264Z","last_seen":"2026-05-16T18:33:59.276264Z","alert_count":8,"request_count":4,"received_data":13562,"sent_data":2083,"comment":"","tags":null,"fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tomaskaraba.com/qrr/","fqdn":"tomaskaraba.com","domain":"tomaskaraba.com","tld":"com"},"ip":{"addr":"92.240.253.18","port":443,"asn":29405,"as":"VNET a.s.","country":"Slovakia","country_code":"SK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3e4df1609d6fed84d58570124a90dc2","sha1":"077e3b7a38cf2e35ff4d1c2488c7d8e629b523df","sha256":"f3f9a0e6d0dd2d1f085c9425590cdea2aa06838fb52ed4e50cd83c1bcfff4386","sha512":"dcbe9388f58ae8b5868a2ca2ed4cc4664ea39592b2b8a142dce078af0bd645ed1eba04d30b14176117acafd1dea401aadce066d584f0629fcf4500152b49f3b5","ssdeep":"","tlshash":"ffc02b073304d0103eb3d23247330000c17221e30464e220740e30c06f1104b121b0cf","size":138,"data":"","first_seen":"2026-05-16T14:11:53.961711Z","last_seen":"2026-06-05T23:57:44.41388Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tomaskaraba.com/qrr/","fqdn":"tomaskaraba.com","domain":"tomaskaraba.com","tld":"com"},"ip":{"addr":"92.240.253.18","port":443,"asn":29405,"as":"VNET a.s.","country":"Slovakia","country_code":"SK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-05T23:57:23.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tomaskaraba.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 11:53:56 GMT","end":"Thu, 06 Aug 2026 11:53:55 GMT"},"fingerprint":{"sha1":"87:F9:70:5C:60:F1:3B:50:F2:20:DF:90:48:A8:8F:0F:15:62:E7:A5","sha256":"D3:08:92:DC:15:A2:7C:CF:E6:E0:3D:DA:52:BD:3F:95:15:24:8C:98:6C:3A:71:F6:03:9F:D3:86:FE:60:87:1C"}}},"request":{"raw":"GET /qrr/ HTTP/1.1\r\nHost: tomaskaraba.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=0feba3800bd87a14d74748eb04447407; _vsc=a0623bd6b2bec229\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Jun 2026 23:57:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-scaned: True\r\nx-bver: v2\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3657,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"cf0674e692b97778ffd34e0e3f0cd1d9","sha1":"532fff90854766ab2d077c5ee2500d45d4adc6a0","sha256":"055c90b25d6be61ea89f58feb7bb8bee4241e17958fbb725ede2daf6a7db4cc2","sha512":"787d10aa065fa7be7202af6bfda32d7838541845e57e8bfe6fb52aa67977e0258acdeed19a3beb88cd4af45e66702ed9015586830732c31bf965f2f086bd4c40","ssdeep":"","tlshash":"ab714236d6c0051aa03791f4de628b46ff558423d38681653edc63869ff6866c6b3e4c","first_seen":"2026-05-16T14:11:53.960761Z","last_seen":"2026-06-05T23:57:44.40966Z","times_seen":3,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"tomaskaraba.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"tomaskaraba.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tomaskaraba.com/favicon.ico","fqdn":"tomaskaraba.com","domain":"tomaskaraba.com","tld":"com"},"ip":{"addr":"92.240.253.18","port":443,"asn":29405,"as":"VNET a.s.","country":"Slovakia","country_code":"SK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tomaskaraba.com/qrr/","date":"2026-06-05T23:57:23.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tomaskaraba.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 11:53:56 GMT","end":"Thu, 06 Aug 2026 11:53:55 GMT"},"fingerprint":{"sha1":"87:F9:70:5C:60:F1:3B:50:F2:20:DF:90:48:A8:8F:0F:15:62:E7:A5","sha256":"D3:08:92:DC:15:A2:7C:CF:E6:E0:3D:DA:52:BD:3F:95:15:24:8C:98:6C:3A:71:F6:03:9F:D3:86:FE:60:87:1C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: tomaskaraba.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tomaskaraba.com/qrr/\r\nCookie: PHPSESSID=0feba3800bd87a14d74748eb04447407; _vsc=a0623bd6b2bec229\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 05 Jun 2026 23:56:59 GMT\r\nlink: \u003chttps://www.tomaskaraba.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nlocation: https://www.tomaskaraba.com/wp-content/uploads/2024/11/favicon.png\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\nage: 24\r\nx-cache: HIT\r\nx-bver: v2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":3651,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T04:50:52.682529Z","times_seen":17493390,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"tomaskaraba.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"tomaskaraba.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tomaskaraba.com/wp-content/uploads/2024/11/favicon.png","fqdn":"www.tomaskaraba.com","domain":"tomaskaraba.com","tld":"com"},"ip":{"addr":"92.240.253.18","port":443,"asn":29405,"as":"VNET a.s.","country":"Slovakia","country_code":"SK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tomaskaraba.com/qrr/","date":"2026-06-05T23:57:23.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tomaskaraba.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 11:53:56 GMT","end":"Thu, 06 Aug 2026 11:53:55 GMT"},"fingerprint":{"sha1":"87:F9:70:5C:60:F1:3B:50:F2:20:DF:90:48:A8:8F:0F:15:62:E7:A5","sha256":"D3:08:92:DC:15:A2:7C:CF:E6:E0:3D:DA:52:BD:3F:95:15:24:8C:98:6C:3A:71:F6:03:9F:D3:86:FE:60:87:1C"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/favicon.png HTTP/1.1\r\nHost: www.tomaskaraba.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tomaskaraba.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Jun 2026 23:57:23 GMT\r\nlast-modified: Sat, 30 Nov 2024 06:33:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3651\r\ncontent-type: image/png\r\nx-bver: v2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3651,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"0bbdf6b8446e5885f451985c06e32615","sha1":"e9573b1a1861d2bb08b85990a3aed6c6cbc9db20","sha256":"4361901a07f87fe2fbebf8bb17460c2175a76af3799635ae783c0285e021b20e","sha512":"123632e2d0fbdb8a20afb0d255e3e3147ebf05ea72f150efa48bf95c35a7b8568430cdf1611fb51f3fff5bf4388f37801b22b9d4660ded76f7f725c15108b4d3","ssdeep":"","tlshash":"67715c5f3ede29232a733f30677a113087091555471a8008f1ec6b85ac6b355617d82f","first_seen":"2026-05-16T14:11:53.959842Z","last_seen":"2026-06-05T23:57:44.411249Z","times_seen":4,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"www.tomaskaraba.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"www.tomaskaraba.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tomaskaraba.com/qrr/","fqdn":"tomaskaraba.com","domain":"tomaskaraba.com","tld":"com"},"ip":{"addr":"92.240.253.18","port":443,"asn":29405,"as":"VNET a.s.","country":"Slovakia","country_code":"SK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-05T23:57:21.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tomaskaraba.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 11:53:56 GMT","end":"Thu, 06 Aug 2026 11:53:55 GMT"},"fingerprint":{"sha1":"87:F9:70:5C:60:F1:3B:50:F2:20:DF:90:48:A8:8F:0F:15:62:E7:A5","sha256":"D3:08:92:DC:15:A2:7C:CF:E6:E0:3D:DA:52:BD:3F:95:15:24:8C:98:6C:3A:71:F6:03:9F:D3:86:FE:60:87:1C"}}},"request":{"raw":"GET /qrr/ HTTP/1.1\r\nHost: tomaskaraba.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Jun 2026 23:57:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=0feba3800bd87a14d74748eb04447407; path=/\n_vsc=a0623bd6b2bec229; expires=Sat, 06 Jun 2026 23:57:21 GMT; Max-Age=86400; path=/; secure; HttpOnly\r\nx-scaned: True\r\nx-bver: v2\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1145,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"ee40e0b5076c617a8fdb14054e7b868d","sha1":"970a013a9cc27fa9af0bcbee5627b436d310045c","sha256":"6c3e33b9696c153ed77a1c3a377a1d125a66971493346f9ba456dd2c0dea2cc8","sha512":"6c42c251724bef73bbf12d57ea8422b4dddefa742f69f21138b0f3d2ca385fd3e0b5a9e13685b77ec8a4409387ef6cf1577950c29c7680d508b9b5fdbab1a314","ssdeep":"","tlshash":"2f210d032781000957b3c3f1a9e2c700c8f56853a2834d7ab9cc229f4fb959282d3ae0","first_seen":"2026-05-16T14:11:53.958238Z","last_seen":"2026-06-05T23:57:44.413066Z","times_seen":3,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":203,"dns":82,"connect":36,"send":0,"wait":45,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"tomaskaraba.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"tomaskaraba.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tomaskaraba.com/favicon.ico","fqdn":"tomaskaraba.com","domain":"tomaskaraba.com","tld":"com"},"ip":{"addr":"92.240.253.18","port":443,"asn":29405,"as":"VNET a.s.","country":"Slovakia","country_code":"SK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tomaskaraba.com/qrr/","date":"2026-06-05T23:57:21.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tomaskaraba.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 11:53:56 GMT","end":"Thu, 06 Aug 2026 11:53:55 GMT"},"fingerprint":{"sha1":"87:F9:70:5C:60:F1:3B:50:F2:20:DF:90:48:A8:8F:0F:15:62:E7:A5","sha256":"D3:08:92:DC:15:A2:7C:CF:E6:E0:3D:DA:52:BD:3F:95:15:24:8C:98:6C:3A:71:F6:03:9F:D3:86:FE:60:87:1C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: tomaskaraba.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tomaskaraba.com/qrr/\r\nCookie: PHPSESSID=0feba3800bd87a14d74748eb04447407; _vsc=a0623bd6b2bec229\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 05 Jun 2026 23:56:59 GMT\r\nlink: \u003chttps://www.tomaskaraba.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nlocation: https://www.tomaskaraba.com/wp-content/uploads/2024/11/favicon.png\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\nage: 22\r\nx-cache: HIT\r\nx-bver: v2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":3651,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T04:50:52.682529Z","times_seen":17493390,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"tomaskaraba.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"tomaskaraba.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tomaskaraba.com/wp-content/uploads/2024/11/favicon.png","fqdn":"www.tomaskaraba.com","domain":"tomaskaraba.com","tld":"com"},"ip":{"addr":"92.240.253.18","port":443,"asn":29405,"as":"VNET a.s.","country":"Slovakia","country_code":"SK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tomaskaraba.com/qrr/","date":"2026-06-05T23:57:21.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tomaskaraba.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 11:53:56 GMT","end":"Thu, 06 Aug 2026 11:53:55 GMT"},"fingerprint":{"sha1":"87:F9:70:5C:60:F1:3B:50:F2:20:DF:90:48:A8:8F:0F:15:62:E7:A5","sha256":"D3:08:92:DC:15:A2:7C:CF:E6:E0:3D:DA:52:BD:3F:95:15:24:8C:98:6C:3A:71:F6:03:9F:D3:86:FE:60:87:1C"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/favicon.png HTTP/1.1\r\nHost: www.tomaskaraba.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tomaskaraba.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Jun 2026 23:57:22 GMT\r\nlast-modified: Sat, 30 Nov 2024 06:33:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3651\r\ncontent-type: image/png\r\nx-bver: v2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3651,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"0bbdf6b8446e5885f451985c06e32615","sha1":"e9573b1a1861d2bb08b85990a3aed6c6cbc9db20","sha256":"4361901a07f87fe2fbebf8bb17460c2175a76af3799635ae783c0285e021b20e","sha512":"123632e2d0fbdb8a20afb0d255e3e3147ebf05ea72f150efa48bf95c35a7b8568430cdf1611fb51f3fff5bf4388f37801b22b9d4660ded76f7f725c15108b4d3","ssdeep":"","tlshash":"67715c5f3ede29232a733f30677a113087091555471a8008f1ec6b85ac6b355617d82f","first_seen":"2026-05-16T14:11:53.959842Z","last_seen":"2026-06-05T23:57:44.411249Z","times_seen":4,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":86,"connect":36,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"www.tomaskaraba.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-05","alert":"Sinkholed","trigger":"www.tomaskaraba.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}