{"report_id":"f7928b31-17d2-487d-9b17-8ef9c4a8dcc6","version":6,"status":"done","tags":[],"date":"2026-01-11T14:18:43Z","url":{"schema":"https","addr":"ploynest.com/","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"ploynest.com/","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"title":"ploynest.com/","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ploynest.com/","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-15T14:18:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ploynest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-04T22:18:41.67311Z","alert_count":0,"request_count":1,"received_data":435146,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cm.mgid.com","ip":{"addr":"104.17.198.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2001-12-30","domain_rank":16282,"first_seen":"2016-01-25T16:51:08Z","last_seen":"2026-01-03T05:40:30.582206Z","alert_count":0,"request_count":1,"received_data":515,"sent_data":412,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"jsc.mgid.com","ip":{"addr":"104.17.198.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2001-12-30","domain_rank":51187,"first_seen":"2012-09-30T18:50:35Z","last_seen":"2026-01-06T23:27:53.523027Z","alert_count":0,"request_count":1,"received_data":1124363,"sent_data":412,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-01-04T23:18:50.311218Z","alert_count":0,"request_count":2,"received_data":41983,"sent_data":847,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img-cdn.brainberries.co","ip":{"addr":"104.18.35.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-04-22","domain_rank":2854459,"first_seen":"2016-10-05T11:51:39Z","last_seen":"2025-12-28T17:48:57.203839Z","alert_count":0,"request_count":11,"received_data":749429,"sent_data":5434,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}]},{"fqdn":"a.mgid.com","ip":{"addr":"104.17.198.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2001-12-30","domain_rank":233246,"first_seen":"2013-11-17T05:08:48Z","last_seen":"2026-01-08T05:52:30.709102Z","alert_count":0,"request_count":1,"received_data":19521,"sent_data":423,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ploynest.com","ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2018-10-09","domain_rank":589137,"first_seen":"2025-06-13T17:52:24.150644Z","last_seen":"2026-01-02T00:39:12.853581Z","alert_count":16,"request_count":16,"received_data":359481,"sent_data":7945,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery Migrate:3.3.2","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Ivory Search:5.5.6","description":"Ivory Search is a WordPress search plugin that improves WordPress search by providing advanced options to extend search or exclude specific content from search.","website":"https://ivorysearch.com","common_platform_enumeration":"","icon":"ivory_searc.png","categories":["WordPress plugins"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"OneTrust","description":"OneTrust is a cloud-based data privacy management compliance platform.","website":"https://www.onetrust.com","common_platform_enumeration":"","icon":"OneTrust.svg","categories":["Cookie compliance"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MGID","description":"MGID is a programmatic advertising platform frequently used by misinformation websites.","website":"https://www.mgid.com","common_platform_enumeration":"","icon":"MGID.png","categories":["Advertising"]},{"name":"WordPress:5.7.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"AOS:2.3.1","description":"JavaScript library to animate elements on your page as you scroll.","website":"https://michalsnik.github.io/aos/","common_platform_enumeration":"","icon":"AOS.svg","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"geolocation.onetrust.com","ip":{"addr":"172.64.155.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-01-12","domain_rank":4022,"first_seen":"2018-02-07T11:23:41Z","last_seen":"2026-01-05T00:31:54.331564Z","alert_count":0,"request_count":1,"received_data":461,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.cookielaw.org","ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-06-20","domain_rank":2972,"first_seen":"2013-12-28T13:20:36Z","last_seen":"2026-01-05T00:27:48.251448Z","alert_count":0,"request_count":13,"received_data":1619746,"sent_data":6095,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.usefulcontentsites.com","ip":{"addr":"104.21.92.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-03-26","domain_rank":1393736,"first_seen":"2020-04-11T03:38:10Z","last_seen":"2026-01-05T02:04:57.976071Z","alert_count":0,"request_count":2,"received_data":8446,"sent_data":895,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ploynest.com/wp-content/themes/best-minimalist/assets/js/end.js","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"782a5769db125c61973ce8db6827334e","sha1":"7a460a50c0d674b32133a8b6bfc8a391a186d193","sha256":"21866afb1e9cd49fcec8b6d8e016bcc4bae1bef6990115ff8e49ef90d3f5f591","sha512":"800dd72bf244f1862bd155c39679a2887e0cf7e1646820291211b39328ba3c60a22a8a9757f415cc42b331dd31571c38da44e51d6d171d1d896de77120ca8424","ssdeep":"192:oD2Swo/ToMnXVNA4YIFVM7PVWGFeSrRIymdQV0XCBX:Awo/TfXnA4AkGoStILBCBX","tlshash":"4ad1af1afb5e14be6179124c8ee7114815f43d835f058fdeb79c0a189befe66817a304","size":6609,"data":"","first_seen":"2025-06-13T17:52:28.807457Z","last_seen":"2026-03-30T01:22:02.537436Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"79b4956b7ec478ec10244b5e2d33ac7d","sha1":"a46025b9d05e3df30d610a8aef14f392c7058dc9","sha256":"029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300","sha512":"217f86fee871fa36eca4f25830e3917c7bf57a681140b135c508aa32f2a1e3eff5a80661f3b5ba46747d0c305af10b658d207f449550f3d417d9683216feea8f","ssdeep":"192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS","tlshash":"8232c59d71a6b4624eb735b8b03f939f71b605d9250d8940d26cc9f6782c84ec22bf68","size":11224,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-19T02:36:11.10921Z","times_seen":76156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MKYFKCW9GF","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8824bb300156ea6c186efbcba9321330","sha1":"2b039687fdd8c8264e2133f3446f6f19abea9473","sha256":"4585c681d79e4a3d897ea50ffc43292db8ddec19b932e868c7dcbfee9b507a93","sha512":"007e538389c99fd8022cb62e22c88019b6dff9578280e5574c306a67df274775242413e1ef8ae89dcc5983a29f01825075ccf3ce49c9540fae0302230a2674bb","ssdeep":"6144:zYrVfsMxo6qWroAizhQkc1/po7YA+TkIzvovBQVnFRA:ABrqLAi1C7TkI0t","tlshash":"5c941ace73d674269396e078503f018ba57b29a2b45dc896f189cce02d74a9a0277f7c","size":434542,"data":"","first_seen":"2026-01-11T14:18:50.49569Z","last_seen":"2026-01-11T14:18:50.49569Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.mgid.com/mgsensor.js?d=1768141102086","fqdn":"a.mgid.com","domain":"mgid.com","tld":"com"},"ip":{"addr":"104.17.198.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea0a871e86984cbf79bbb146f28f8a7c","sha1":"18f5324d29214c5108c077770371eeaf8a4dfb62","sha256":"6e19d52566e2f1338cdcc35af03627038efd291d4aeebec7a3b2336e2094d0c5","sha512":"1c186034e3da84972bf2bc05ae2602b9c339e8dfa2cfbf1f66fc14224d37047472bade49f062d68267d1a25872e64b1cc048dbbd541fe7dad770068a651fb877","ssdeep":"192:22zVfz/9UJfRykpXbf/OFON6b5vda/yYi/1g4GoLn6zAHzdxU1qRMwkuMKP4UBfJ:8JQuPo5v0y7Nb3hhnn","tlshash":"ea828589b6d4b15102e3517d493fb20ab336653968da84a06171c8d03dbab8f71a3ff9","size":19025,"data":"","first_seen":"2025-11-24T11:22:47.686386Z","last_seen":"2026-03-08T23:23:48.939713Z","times_seen":1283,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/wp-content/themes/best-minimalist/assets/js/navigation.js?ver=20151215","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a03afdac8a2b4b0e6931740a3c961088","sha1":"1058072fc6fc5ce0eaf3ed396481b9f45d61bc39","sha256":"85ba32250dfea4a69d42dc1f10a5c8e1eb93950185e38fe205bf2c813eabd2ae","sha512":"61de37a57704d896f647738d2896df433fc44c80f4a5b1db7f37dd362b67e02289e225891f89d7a536b843a1a26e9c3c9a186d483e927cca2f99a214cc20ba37","ssdeep":"96:xpZYfcqJ2KVmKP/JERJiUIRMeH1LbHSpRCP2B2UEb:xpZYRJ7Y0/iRJ7Y3LgAki","tlshash":"2791259af7af236769be34d75927c066353e8837e0452831bcaac5697bc80050799f3c","size":4247,"data":"","first_seen":"2024-12-11T18:59:34.81259Z","last_seen":"2026-04-17T16:40:39.586183Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"990f6ba7c77cdd06cefdf9c6a2db2cad","sha1":"d472e317c6093a9a5fb7d23aa84898b5e89685bb","sha256":"128a39484595c902fc7fe38bc118b25975cbfdbbbdc31e82294d5aea0df64727","sha512":"59910f7dcfcc3e7b6f72ec68ceb334aa4d1de6357239d58d14c0e7a569cf53b3a4f95de6ae62c3f9f944418a5f9bb046743a0f8b451724ac087a817ce5f119b3","ssdeep":"","tlshash":"0ec08c98211a4cb062eb27400b3fb904b0623210a4901c314819a3485960e83d754860","size":158,"data":"","first_seen":"2025-06-13T17:52:28.866222Z","last_seen":"2026-03-30T01:22:02.575634Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8fded28a25500b654d510dabf74acb13","sha1":"a319afbc9fca2645a1034734102036a11aed6abb","sha256":"7b808e647540074cccb0510bc60b48bc58ea859fb5b9f6f489129d492ba41dce","sha512":"61abd0dd83bcffde3305219161a7ec0e04b04dc2bedc5a3afd53d9d76885a79d3456656650fd789f4a059f78bfb44a23be0ee152b17718f6b4f99603316c8511","ssdeep":"","tlshash":"9be0c2f0710a9d711aa7402fa83983e83e35342eaa33a810601cf96f81a0f087a77c74","size":298,"data":"","first_seen":"2023-03-07T15:39:10Z","last_seen":"2026-04-17T16:40:39.605301Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1da94e270000c864fccae5981f2a8f8b","sha1":"783bd6a7f746db7f20a304866495cbf3e303bea0","sha256":"c2f975fa61a3ef19c0b38c79dac0819ae99a8009443a3313480b302bc8aa50e6","sha512":"dac79dd87e174e6b08a1a1c0e2225831834c77eae3b413fa423ea57067b997f3fc7213a155abf05eb16053106c3b746a85a8179b7ba0ff05f0778a3fe9708042","ssdeep":"","tlshash":"6580044c10103001510115fd4d570d1470507055d311503c104470474d7701407014cc","size":33,"data":"","first_seen":"2023-03-07T15:31:59Z","last_seen":"2026-04-17T16:40:39.604847Z","times_seen":452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3551858c4248edbbaca2759af0aac19e","sha1":"9849582c3a989432f568ebfcea3f452307367a1f","sha256":"59e0a9da04eaaf289325e598fd4aaba775b1f6602cb8dc5ee370183274ebc6a3","sha512":"bff0fe22511483447eaea29a5d8fd5f272b4fd94da2a70c02eb44678288621e8675ada1c76471626b9bd3d4a5e33d7b0f5d397750968772c60d61a8ba144d4ca","ssdeep":"","tlshash":"4c4162763b9155596af208b3f13f1b0e3f26450300c9aa368298a9e0397ddd5c0fad1c","size":2120,"data":"","first_seen":"2025-06-13T17:52:28.871529Z","last_seen":"2026-03-30T01:22:02.578215Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"moz-extension","addr":"moz-extension://be4e3d3c-8ea1-4097-ba70-015d5bb93b63/lib/shim_messaging_helper.js","fqdn":"moz-extension","domain":"moz-extension","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"865f01cbb34eb505834e826380d7dc2e","sha1":"c239ccc37191f1be78dfaa6bb3f1da5d314fdf9e","sha256":"30ed6392b8de4590bd974a4a797ee0b12b382f2141738115bfd2d692cfa6ec17","sha512":"9e37cd2e9fb9e4e926e2d1e1232c4c4ba3531d89b1d165293708849e0f88df6a40711d87c2b267ced9b6c4a27ac13079b5cb907334e2e297b588318df629b9ee","ssdeep":"","tlshash":"9e31ba1959fa0d1c0063b4a977673403722a90271149fe92bedcc3536f9652bc6f2bc8","size":1684,"data":"","first_seen":"2023-05-05T22:33:37Z","last_seen":"2026-04-19T02:37:32.912008Z","times_seen":159153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsc.mgid.com/site/595406.js","fqdn":"jsc.mgid.com","domain":"mgid.com","tld":"com"},"ip":{"addr":"104.17.198.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8647267df5c5790c6f6b28a3b9f74b62","sha1":"75105446b369b2792386f6e32474f4338c2a6e21","sha256":"29654bb6bf2962b6025c146bf99d1c77ad1988b41cdb3ba1a4931233b5d97a29","sha512":"1bdea0f13469e309f668b03c55091ba71610cf5de239067a7c5bc32226d773d5f4c1d61266193c930b8cc98de445a4b893bfcf0e27622b10a8852d2cd0067f09","ssdeep":"24576:SqDltsyeQxraMaqBJftKhEkjuloy8SPLPg5j+BAmIeiWLNTVpMQ6k/HqdcI5txs:SqDltsyeQAMaqBJftKhEkjuloy8SzPgu","tlshash":"5f355b6132a02031818f819d796737053236904ae5274a2cf979f9e94eeddcf3677bb8","size":1123425,"data":"","first_seen":"2025-11-23T10:32:44.864921Z","last_seen":"2026-02-03T13:52:25.947122Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"64a8e70511cab687276abe0c758c360c","sha1":"cc4169419915e132c971bc54551b8f2a2ad8e08c","sha256":"43454c1111788ccbac9feb213a28816597b5a3b09fc49421704602d4b39929fb","sha512":"5579854c30f397ac583a380e2c1e5372c40df2fe9bab514704b48403cda49fbdacaeeb1b68e7182da375af6a5e2b8d7f82b40838531676147670b2942737f700","ssdeep":"","tlshash":"b3e0c24e7a90b1180ff9647b1a3645ad316d6a400b114c4a4d8ac8ad6674fe546d8b98","size":299,"data":"","first_seen":"2025-06-13T17:52:28.87539Z","last_seen":"2026-03-30T01:22:02.578742Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f6d2523fd90895c7bc13d59ea37dec93","sha1":"41cfc45f2ab21dbd6b0dbc9943a3a8c83ad8d6b7","sha256":"7494bff0cf1cef09149e39b3d113a6e5238450d57fb250b3b76b7024c1b52bbf","sha512":"d7259eb6a9ffb31e2a6b8cee69c3d34242abdef5e71db4994689cce913c23bff08121f5e969be37ee3f46ae83018bcddc56a3676ca8029bdbe13edb3e5e4ea5f","ssdeep":"","tlshash":"fcf0c90f6c9b05a4b7aa036c0b3ad00421c2003326a5c0263a8de5461f44f992c797ea","size":583,"data":"","first_seen":"2025-06-13T17:52:28.877046Z","last_seen":"2026-03-30T01:22:02.580105Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/otSDKStub.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7d5ec92092a6d24e4621faebcfc71be","sha1":"b2c9502d5804e854e5e17bfbf00dd116e138fade","sha256":"57e99ffdcaa5df268c115fed41ce45490d1bfe8607151738e561292a5e2e5ca7","sha512":"065c9da88b5617ac73258a74e20209db6d2f4ca1f1507a3404bf2c9597b826f4352d5b43c7189179dce5d873499c0683e5b6ed6bf3f51f1f987a0d92bf6f23bf","ssdeep":"384:F58KNPpfxrLWMABwX/Ny0rkB+r58eYxcCLn2cVKZ5Q8eFKJx6yzGq:bdxfxvlABwXVyvB+r5a+CDhCWq","tlshash":"d4c2e8ddb144ee3446d361dc9a3be26ab23a786d3485d064b864dce0247cc4f6533bb6","size":26070,"data":"","first_seen":"2025-12-08T05:57:37.270424Z","last_seen":"2026-04-09T12:09:38.621386Z","times_seen":11049,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"985fc03237c0627c6917c1318eddb2dd","sha1":"bc7ed05f47cdccd9678eb254287fd852a315b09e","sha256":"25e130b987458c7e6c8f17c8b2a170f1f53800b163b9832711eabd699a3693e9","sha512":"2e081b50154fc3da4dfcbff10fbad2f3c30e7dbb8b6faaf508a4e05fd16c4e5436205d9523341d6344d1271d88547be6a8f10386585236dd40719b0e67e9e4b6","ssdeep":"","tlshash":"0da0125601046224c9d72143092a6454810341a0aa40c4c0318c685119524330011c8d","size":80,"data":"","first_seen":"2023-04-11T21:41:08Z","last_seen":"2026-04-19T02:50:50.13077Z","times_seen":7623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/en_EN/sdk.js#xfbml=1\u0026version=v2.3","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b938e0b835c600209bdaae9d8ccda6d7","sha1":"d5ee79d277057e05f002a18381722b5eb75d3883","sha256":"d1b95aeb57c3285042e1e24c00cc56a8560d16daf7ee5cdfd5c75296b21ac91b","sha512":"f519d10ba250add8cdb46a82b3cddc68e01735c6c80b24d4af37aa0ca108340b59a21bd2cc19bcd4753f66ff5a5dc17f6e3500e91be6436fdd90c954a6ed3800","ssdeep":"384:Ps5FfMCDA9SQM/Psw1A9uW1HVMJDXMlS3RpU9JCo4wiLF:kU9SVjoHqXMA3CJCodiLF","tlshash":"1672b51e46f31232456370766b4b72047235d0473a0afe993f9c87542f8aa6e86f27ec","size":16896,"data":"","first_seen":"2023-05-05T22:33:37Z","last_seen":"2026-04-19T02:37:32.91057Z","times_seen":153968,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.usefulcontentsites.com/js/push/usefulcontentsites-subscribe.js?v=7","fqdn":"cdn.usefulcontentsites.com","domain":"usefulcontentsites.com","tld":"com"},"ip":{"addr":"104.21.92.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7cc7a9644cd7ae65b2c0eb2e307aa2d","sha1":"9850858184eed39b09560331633255f041c584dc","sha256":"9d79c29271cf03fe5ef7c84550e43c920b5487e2f592fabf663043eee9c137a5","sha512":"934d6e93e24d725f38f8cba1d4ec574f17187cf4e36a2a045a8aabff65c76a8b612f9812ba558766155e81f483447c270e82d2327353a7c6484b5e3b25b23fb4","ssdeep":"","tlshash":"0fd0a77d2959a1320a3e105b74b7e7ac7ee47418e401a511a2fdcc1c0970e5436e2850","size":241,"data":"","first_seen":"2023-03-07T15:39:10Z","last_seen":"2026-04-17T16:40:39.561895Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"68a68c9f90afb3512344e0508a130124","sha1":"bf0dc9528f91ba221640ab599f50b68c0ddc1ecb","sha256":"a529ea851912ec14bc2ceaffa2f0c0b864646bcb24d456ed9eb4a2394eeda52b","sha512":"8900891e7e4fd5da7a30ec3ca9cf84bfbf8364b33b6f0559d184afc8005280813f7de9502bf51b65ad05f84f7fce1d542cbc1460d64dc151df28ade07e08013a","ssdeep":"","tlshash":"b8f0dcad2c42b49637fd3539c227aa6b3b63070074c2d5688641c4542c94a824c429ce","size":464,"data":"","first_seen":"2025-06-13T17:52:28.878349Z","last_seen":"2026-03-30T01:22:02.581566Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"785a7d8dd09bba0737c0add086aff4af","sha1":"e1df59b3d650a045eceb91b65b3bf85d17ba4e17","sha256":"d5829acc2b9511ebe78ccbc7aef0b436389a9e3a6a6190af9342a39abec9900c","sha512":"ef441ff75d7439f42bd6f933ef63c380ae5360eb8f7ea2a21f91ffa61568d2224d8b29f45ba7858bf855b0e6d9f5315a01c9a0900fbdad7a54a495d5d4f6f54f","ssdeep":"","tlshash":"1dc02b4c40513fc371d238e2b2b5830146670000056f4d3d01ccc81d1c53101508f0dc","size":131,"data":"","first_seen":"2023-03-07T15:39:10Z","last_seen":"2026-04-17T16:40:39.617466Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/wp-content/themes/best-minimalist/assets/js/main.js?ver=1","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"af8c1b9ab0a5d5e8682d6e147d96661d","sha1":"c5bc2b0e5ed5e8613c325bba039c838e8c73b7d7","sha256":"6933c8a20c70544ab3932d9266cd0ca61c0ee5b400dc39da43fcd3659182039a","sha512":"e13041de8def1593faf75ab97d29c8c437e0580f845724a4f8be69169124cc24a0ea68af40bc09068512c7205e0da1974ed8746f40a03d45d5fbd2aafcaa92b5","ssdeep":"","tlshash":"2b319ee7f3ea75255537a0ec947e4184653f1053e5820c79bcac9d2467e11bc23d2e2c","size":1850,"data":"","first_seen":"2025-06-13T17:52:28.857967Z","last_seen":"2026-03-30T01:22:02.561821Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202409.2.0/otBannerSdk.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"69bd14c7ec0bb23da2dfa38cc1a940aa","sha1":"ea33f2da4a5d389fd07b4162b21b867f6cd3000b","sha256":"d20357455b511ce933ce8d435007781a67ad2c01453af9b88f79e57e14476add","sha512":"d8d49b051ba4fdcca1cc0b72c67dc0e4e88b242024f60f0282e314516d99429121f36bace74594a852fe0e64e0903c7f4119b9f6ebdd5da8e4021f488bef1ae4","ssdeep":"6144:qIfzrfx/KzE7q/s0jvzW2AHCfdIiubTxfPvqAo96V/7jeF:qufx/KzE7q/orTx4961Y","tlshash":"dfa4088d75a0753547e752b8c02b114aba3574adac95806cb40cc5f90ff9f821aa3fbb","size":472088,"data":"","first_seen":"2024-11-28T10:15:36.955915Z","last_seen":"2026-04-18T13:04:34.754692Z","times_seen":1511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/wp-includes/js/wp-embed.min.js?ver=5.7.2","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"905225d5711b559d3092387d5ffbedbd","sha1":"6f6c39075263bafb9e8c10f1b34a1a0f7ee03c9d","sha256":"5be614bce53f767993a5f5f14a6badd6aae6bf3af7cbdbf4d31520de49e27991","sha512":"5ad34cf11acf45ae256b2641496be13939cd5e0212810c43ab20cadbb313a1d99cb3a451148e160d80f1f952a8514480c2953bc6ca0c4697a466a01e1c3d5f8d","ssdeep":"","tlshash":"5c21522a3228943758db11d3bc4535cad2e11fed681215d20e38cc49eae4e935969fe0","size":1426,"data":"","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-04-19T00:33:14.45622Z","times_seen":4675,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab1b0ef42311479d7559bffd29ef8d7d","sha1":"ba1509057a5f82563a2b55a7379f4825fe35bcab","sha256":"37bf8b4db5288941c20c28fd7c0b201d2270201a94739d64462744ffe6b52f79","sha512":"db4e6a5953ddc8e4aaf65287c085511a7c59b676a412525a17e699b40fe34eca264c2780f3654f96c1fa4dac9147f628885c5da8c2bca6a204a1d92b2d1cae48","ssdeep":"","tlshash":"85a0120040c1349e207240152ad09042bbc1411001117824004c839b1e5f44065d5904","size":79,"data":"","first_seen":"2023-03-07T01:07:29Z","last_seen":"2026-04-18T14:53:45.641071Z","times_seen":2064,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/wp-includes/js/wp-emoji-release.min.js?ver=5.7.2","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eaa8641bcda2371f4024a71fbb67de3b","sha1":"0e46c39d3821683c856605a82254115f9a6a7792","sha256":"0c5f584d1ea2c3313dc8c55824c2a572d3cf2eae87c5ca62a58e598aec9ddb5c","sha512":"82b6b84d0a7a28d6a8b013ee41eef27e1df8c1fca396dfb4ed6d01249e12479230cb2d3683a56eb80651d22046c74506d194fa34b05e2a8ad8a08ae297f79aeb","ssdeep":"384:inJ5kNuPTbUUh31//bEP+XgA3FqC2effJmp3:iJ5aUUUh31//YWXgA7ffC3","tlshash":"ad52ce9b732b5f9b743e37d78d96cf4ec5da55832580e078dafeb68129a00598374c80","size":14229,"data":"","first_seen":"2023-03-07T01:02:17Z","last_seen":"2026-04-19T01:31:07.158418Z","times_seen":9570,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/wp-content/themes/best-minimalist/assets/js/skip-link-focus-fix.js?ver=20151215","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1debd63422a6a784207437c882ec3eb2","sha1":"067163a0accd201cc48c8f309037c1c98135b882","sha256":"5d02ce90a5f6ac96f0d9cc25f1d9e7cea22e85d0b62007335b4a706dcc34a9f4","sha512":"13274afc5f14ca58db8656bc1dd42deab795c5552a522b082e9da63b61f5f7ed393eef2fa816471d03f663d71506b66fd755e2827137d587e0b093650fec3cd0","ssdeep":"","tlshash":"4a01c0a5f30d44b6049a3117dd4f51cd293cd0b2b419649f9c9d08401924d6d137be74","size":695,"data":"","first_seen":"2024-12-24T16:55:45.053322Z","last_seen":"2026-04-17T16:40:39.579249Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/wp-includes/js/jquery/jquery.min.js?ver=3.5.1","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6f7093369a0e8b83703914ce731b13c","sha1":"d1889f5c173c2a4b20288f1f84758599afd346ef","sha256":"60240d5a27ede94fd35fea44bd110b88c7d8cfc08127f032d13b0c622b8be827","sha512":"d6aa7835d7b256b94ddd2f9d8db84484f0413ebc502762c1ba21cba7a392c6f550db2418cdc8bd6d1da6ed2cea55bf22473c778493d416b1a1c38e6ffdb8c79d","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakU:AYh8eip3huuf6IidlrvakdtQ47GKE","tlshash":"7393f9ddb2c6702257a720ba007f510bf236199d6c4d8450f269d8e9bc78a4e827bf7d","size":89496,"data":"","first_seen":"2023-03-07T01:02:17Z","last_seen":"2026-04-19T01:31:07.107024Z","times_seen":11098,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","size":14239,"data":"","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-04-19T01:40:25.09409Z","times_seen":16920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202409.2.0/otTCF.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c11817c8b372aff4193b8b303750c9bd","sha1":"c4fa2a5c16a28232b812df74d95b5110871130e1","sha256":"a77ed58556547050d62efb8363841c0ef48dd9ef8b092935d5e6b1b00a9c4c15","sha512":"f0f913bad2d5a5b52ef76c1149ddb702bad60b5d1996e1d41fd192ec7ff25ccfe0c255e4ec243633ab589059303a5f6e6b47ace626e5a6cf15cd55f092761505","ssdeep":"768:qdbzzYH9XCNfvCfNlH2jJsegEofmMpFWKKNF+JtYyi24MHa0aloHPZz+r8ZWH7:pGfselrofTqF+JtY7leY7","tlshash":"8553c788f295b4f04bdb7270542f100aa67a7464289cc0a4f776c8e1bef464e6577fb8","size":65438,"data":"","first_seen":"2024-08-12T06:43:01Z","last_seen":"2026-04-17T16:40:39.569499Z","times_seen":1212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/wp-content/plugins/add-search-to-menu/public/js/ivory-search.min.js?ver=5.5.6","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce428a87a021e7b3f2eaf54cf42acdd8","sha1":"61b07035596e0737e5bf55fb13be37b29124511a","sha256":"66d0c8cbacc09ad8746e64ad28d887186d1f060f04c388c2f1102ee346120a8c","sha512":"f39588285cec38eccb0fb7bf74b37750a4b52fc9a45753d691c38be2c312c4bdc5f6fe5454cb94ecb0cccef00cab519bdc143366ddf8cb683050cd4c48fbdcf2","ssdeep":"96:3UqZsOXiCI7XaeAgFltFLNCcVuPQH+RFLZUNBLmLmR9qXo:2lxoRxZA98g","tlshash":"c291fee9d084aecb01fa07f932f73542931a0822571d0f61b4af803c9daed89417ab7d","size":4580,"data":"","first_seen":"2023-10-29T19:39:38Z","last_seen":"2026-04-19T02:22:30.008329Z","times_seen":2859,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.usefulcontentsites.com/js/push/subscribe.js?t=1.2.7","fqdn":"cdn.usefulcontentsites.com","domain":"usefulcontentsites.com","tld":"com"},"ip":{"addr":"104.21.92.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcdff02c1de1d14c569f9b22c16da636","sha1":"9d68bf70544b96ab6649be047c992694190dbb23","sha256":"88020ca8c595c4981b84b6d65df1233bb0a387a4e7e6cad00ffdaf8e3048df0d","sha512":"4c667a0dddf6bb38c205f3edeb59a9f8780409875ac5df6ddb2965640f326ac75b12fa0487c5f59711edce1ebac6750504a5fe8199c2cab82d5a645a5ef86f96","ssdeep":"96:sDWyndiILybZl9ILxIAy/OShEHETuGMUdExE8SpBJxY2YjFgAg5W:sDHdiI+bZPILxIAy2ShcSZMUdIE7pBGH","tlshash":"72b1bc6d19f7443266a3b26d37bf61043132a003b048da057fcd97655fd4aa98be2fac","size":5494,"data":"","first_seen":"2024-10-25T11:03:42.516961Z","last_seen":"2026-04-17T16:40:39.584274Z","times_seen":426,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:21.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /aos@2.3.1/dist/aos.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9bc50afcdae1723c-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 257591\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 11 Jan 2027 14:18:21 GMT\r\nlast-modified: Tue, 08 Jul 2025 08:14:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:8mhhK6WerRskNTu3fWZ4O8xDWv8cIr5fk8QLrDhplo4=:\r\nfly-request-id: 01JZMHK6A5YDBGTRS8NHGNQCS4-ord\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14239,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14239), with no line terminators","md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-04-19T01:40:25.09409Z","times_seen":16920,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":23,"dns":9,"connect":1,"send":0,"wait":14,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-cdn.brainberries.co/wp-content/uploads/2025/05/Screenshot-2025-05-07-at-16.21.23-e1746624146754-391x250.png","fqdn":"img-cdn.brainberries.co","domain":"brainberries.co","tld":"co"},"ip":{"addr":"104.18.35.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:22.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brainberries.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 10:20:19 GMT","end":"Sat, 11 Apr 2026 11:20:17 GMT"},"fingerprint":{"sha1":"05:61:82:30:F4:36:6E:56:12:F3:B8:9F:55:F8:14:60:19:A4:53:13","sha256":"76:4D:4D:CE:AA:A8:6B:23:B0:61:25:EE:58:46:71:02:D5:F7:81:74:68:CC:A3:73:19:14:32:BF:34:DB:7D:47"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/Screenshot-2025-05-07-at-16.21.23-e1746624146754-391x250.png HTTP/1.1\r\nHost: img-cdn.brainberries.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 112900\r\ncf-ray: 9bc50b01688056c7-OSL\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=210951\r\ncontent-disposition: inline; filename=\"Screenshot-2025-05-07-at-16.webp\"\r\nvary: Accept\r\ncache: MISS\r\netag: \"6241f4d3f74ab6adbfa78c67606e7931\"\r\nexpires: Mon, 11 Jan 2027 14:18:22 GMT\r\nlast-modified: Wed, 07 May 2025 13:22:28 GMT\r\ntraceparent: 00-a17d1fbf250ce9aca5861ba58117a209-c82a2a3c9d6e1176-01\r\nx-amz-id-2: FokNZ0nmbRBep24m9704IbJfsQX2I1wYOqxNv8cWT3nead/kwVDbeqV96gGPdd6Vg14hAQit0DQ=\r\nx-amz-request-id: FFZYGXPS5M6Y1J5H\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: zkX_R9ponR5D3PJkU7wlV9pi7vtYlpzY\r\nx-id: wa2-hw-edge-gc9\r\nx-id-fe: wa2-hw-edge-gc9\r\ncf-cache-status: HIT\r\nage: 76784\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":112900,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"de80bbc7b99a125ced6e8d4b2045bbf6","sha1":"2f6a7f8daef76a65c630d49560f997d531247080","sha256":"98c30a55b5f0a7b212f651768aeca56dce5b13e631627dac7a5bdd95fed39173","sha512":"6ed857f743404b3d858657710dee8ba0372146e06c3a824e26c3a2fbb5e66688e28b7332f3ef1630b4b6b0d5b0acd49319d93ebabd1b1e3bd3ccab81da81c1f5","ssdeep":"3072:xPnSxXABQuJRDUFdkwSTjdBQ5Uaj/CIIRVfl:FS6QuJyawS0Pj/C7RJl","tlshash":"efb30264c9e30b5b8efa3a0416cafc34823b63865fe4187eed59bf70d6267506ad01c5","first_seen":"2025-06-13T17:52:28.859497Z","last_seen":"2026-02-03T13:52:25.900642Z","times_seen":8,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":59,"dns":4,"connect":1,"send":0,"wait":34,"receive":18,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202409.2.0/otBannerSdk.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:22.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /scripttemplates/202409.2.0/otBannerSdk.js HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 114325\r\ncf-ray: 9bc50b037dce0883-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: EYTvawVeoF2EX9oFJA4mjQ==\r\nlast-modified: Thu, 28 Nov 2024 09:42:15 GMT\r\netag: 0x8DD0F90F13BC86B\r\nx-ms-request-id: 6fdf066b-f01e-009a-7e5a-ec1f4f000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nage: 43416\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":472088,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"69bd14c7ec0bb23da2dfa38cc1a940aa","sha1":"ea33f2da4a5d389fd07b4162b21b867f6cd3000b","sha256":"d20357455b511ce933ce8d435007781a67ad2c01453af9b88f79e57e14476add","sha512":"d8d49b051ba4fdcca1cc0b72c67dc0e4e88b242024f60f0282e314516d99429121f36bace74594a852fe0e64e0903c7f4119b9f6ebdd5da8e4021f488bef1ae4","ssdeep":"6144:qIfzrfx/KzE7q/s0jvzW2AHCfdIiubTxfPvqAo96V/7jeF:qufx/KzE7q/orTx4961Y","tlshash":"dfa4088d75a0753547e752b8c02b114aba3574adac95806cb40cc5f90ff9f821aa3fbb","first_seen":"2024-11-28T10:15:36.955915Z","last_seen":"2026-04-18T13:04:34.754692Z","times_seen":1511,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202409.2.0/assets/otCookieSettingsButton.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:23.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /scripttemplates/202409.2.0/assets/otCookieSettingsButton.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ploynest.com/\r\nOrigin: https://ploynest.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:23 GMT\r\ncontent-type: application/json\r\ncontent-length: 1738\r\ncf-ray: 9bc50b076c2d8be6-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: GOapCZyjVrnvdPoHU3liVg==\r\nlast-modified: Thu, 28 Nov 2024 09:42:10 GMT\r\netag: 0x8DD0F90EE9830EB\r\nx-ms-request-id: a5251816-501e-0036-24ec-e03ed8000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nage: 61669\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4699,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2a769325e5b1e66c323d09440632e5f8","sha1":"d854cc916a0ddc0388d770e236cae31b5873a73b","sha256":"5fb7c176325267082e94a7131fed5e157516e6805cee3ac6f6a93340a947d640","sha512":"f03ff893972cb92751a015251849b54033c6ee4ee0d3d940018c7665ed709647b830b4a91ac8f12cb98bd2092bd12aa2f58221f35e077aba01eb2b505b64415e","ssdeep":"96:jb+9cRBftWErJehL8mS0790bnC43JIEJ5G:QcRBfYE9eh4mJInC43JIEJ5G","tlshash":"afa16326d549276d510bb2855fd5644fa81992c3ba262ccd334db6f30f8b38f02a6ec6","first_seen":"2024-03-19T20:50:04Z","last_seen":"2026-04-19T00:21:30.523587Z","times_seen":8075,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/logos/static/ot_company_logo.png","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:23.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /logos/static/ot_company_logo.png HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 8666\r\ncf-ray: 9bc50b080ae30883-OSL\r\ncontent-md5: rstrgrQJ65M8PVOYMzpFlA==\r\nlast-modified: Tue, 06 Jan 2026 09:58:22 GMT\r\netag: 0x8DE4D0A20B65D73\r\nx-ms-request-id: 5a577bc5-e01e-00ca-0a9c-7f0047000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nage: 25668\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8666,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 106, 8-bit/color RGBA, non-interlaced","md5":"aecb6b82b409eb933c3d5398333a4594","sha1":"b3c1e078d55dd660a368b506b8b21024451426ad","sha256":"56615530ca1fa2eb144ef8d4c4bf06604115367f9f4cfff6bad1b4e8f344d3c7","sha512":"5edcf4bb9cbb36501ff21a4e06f86ed542689994823efc1e78697c15e033925df8c817395648653c0c0a754ec840d3d916f0e6c03ae0cc577239bc5749beb60e","ssdeep":"192:X0YIB/s/MyNJNG3id1t8kQBDGGzjOItNasnHpl7qltVHRrcT:kYi/s/MgEaX8kczjO4NaAAb1+T","tlshash":"9102b0de5a39d2039cabc6e730c6d8256f724916862a721acf389d147970ff38250a73","first_seen":"2025-01-28T04:28:53.011067Z","last_seen":"2026-04-14T23:51:32.373888Z","times_seen":24725,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.usefulcontentsites.com/js/push/usefulcontentsites-subscribe.js?v=7","fqdn":"cdn.usefulcontentsites.com","domain":"usefulcontentsites.com","tld":"com"},"ip":{"addr":"104.21.92.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:21.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usefulcontentsites.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 08:55:34 GMT","end":"Thu, 26 Feb 2026 09:54:19 GMT"},"fingerprint":{"sha1":"79:F3:EC:89:CC:C4:63:68:9F:B0:DB:7A:21:65:F1:1A:7E:7B:28:8C","sha256":"76:95:10:81:C0:ED:61:A9:6F:53:C1:FE:A8:D1:4A:0E:23:95:D2:D5:35:70:32:EB:18:94:59:31:8F:0B:B8:4B"}}},"request":{"raw":"GET /js/push/usefulcontentsites-subscribe.js?v=7 HTTP/1.1\r\nHost: cdn.usefulcontentsites.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:21 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-id-fe: osix-hw-edge-gc4\r\ntraceparent: 00-db3f9e208643564241d263a0866cfea9-549e9adf73b1459c-01\r\nx-amz-id-2: fJMhGH1E12iwd5buJHJpoXOQR6+x+Qd80HQlwDBtNe1jXxDsADJVXJg3jKk8VQKa4Iy6XtCnDSUYI4lo4KZgbm5bn6Zw5M48uKU+0u3XFM4=\r\nx-amz-request-id: 6DDGJM2JJ5QB69NW\r\nlast-modified: Wed, 30 Mar 2022 12:06:36 GMT\r\netag: \"f7cc7a9644cd7ae65b2c0eb2e307aa2d\"\r\nx-amz-meta-s3cmd-attrs: atime:1648641987/ctime:1648641987/gid:0/gname:root/md5:f7cc7a9644cd7ae65b2c0eb2e307aa2d/mode:33206/mtime:1648641987/uid:0/uname:root\r\nx-amz-version-id: null\r\nx-id: osix-hw-edge-gc4\r\nage: 4843\r\naccess-control-allow-origin: *\r\ncache: STALE\r\nx-cached-since: 2025-08-29T03:23:41+00:00\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HIboTc0YbMXlr%2F2gqB9s9oBUEWQRcxU2SYzuA1ksyZDheyfudS3ANW585Qe1nWDvmTQ5GD39x%2B1gAG0VFFVr2fxFpPjOn0EwiEC2ZYaNnJJN%2FF6bC1I0bQ%3D%3D\"}]}\r\ncf-ray: 9bc50afcbd5356a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":241,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f7cc7a9644cd7ae65b2c0eb2e307aa2d","sha1":"9850858184eed39b09560331633255f041c584dc","sha256":"9d79c29271cf03fe5ef7c84550e43c920b5487e2f592fabf663043eee9c137a5","sha512":"934d6e93e24d725f38f8cba1d4ec574f17187cf4e36a2a045a8aabff65c76a8b612f9812ba558766155e81f483447c270e82d2327353a7c6484b5e3b25b23fb4","ssdeep":"","tlshash":"0fd0a77d2959a1320a3e105b74b7e7ac7ee47418e401a511a2fdcc1c0970e5436e2850","first_seen":"2023-03-07T15:39:10Z","last_seen":"2026-04-17T16:40:39.561895Z","times_seen":80,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":38,"dns":3,"connect":3,"send":0,"wait":10,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/otSDKStub.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:21.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /scripttemplates/otSDKStub.js HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 8589\r\ncf-ray: 9bc50afcb96e0883-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: 2NwwNDYzZ2anGzIjSOoA1g==\r\nlast-modified: Tue, 06 Jan 2026 09:58:15 GMT\r\netag: 0x8DE4D0A1C526C69\r\nx-ms-request-id: 4682705e-a01e-0089-3182-7f2aae000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nage: 40180\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26070,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26069)","md5":"d7d5ec92092a6d24e4621faebcfc71be","sha1":"b2c9502d5804e854e5e17bfbf00dd116e138fade","sha256":"57e99ffdcaa5df268c115fed41ce45490d1bfe8607151738e561292a5e2e5ca7","sha512":"065c9da88b5617ac73258a74e20209db6d2f4ca1f1507a3404bf2c9597b826f4352d5b43c7189179dce5d873499c0683e5b6ed6bf3f51f1f987a0d92bf6f23bf","ssdeep":"384:F58KNPpfxrLWMABwX/Ny0rkB+r58eYxcCLn2cVKZ5Q8eFKJx6yzGq:bdxfxvlABwXVyvB+r5a+CDhCWq","tlshash":"d4c2e8ddb144ee3446d361dc9a3be26ab23a786d3485d064b864dce0247cc4f6533bb6","first_seen":"2025-12-08T05:57:37.270424Z","last_seen":"2026-04-09T12:09:38.621386Z","times_seen":11049,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":28,"dns":0,"connect":1,"send":0,"wait":14,"receive":1,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.mgid.com/mgsensor.js?d=1768141102086","fqdn":"a.mgid.com","domain":"mgid.com","tld":"com"},"ip":{"addr":"104.17.198.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:22.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgid.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:16:32 GMT","end":"Fri, 20 Mar 2026 06:16:15 GMT"},"fingerprint":{"sha1":"09:C3:65:03:3F:7F:F6:CF:7F:18:FB:81:85:2B:4B:52:95:BB:FD:B9","sha256":"86:54:6A:FD:BA:0C:FD:54:73:94:08:E7:C5:B0:49:32:87:AA:42:EB:B2:65:68:04:A1:22:5B:E1:67:C1:15:07"}}},"request":{"raw":"GET /mgsensor.js?d=1768141102086 HTTP/1.1\r\nHost: a.mgid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:22 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9bc50b002b0e5ebd-OSL\r\nvary: Accept-Encoding\r\nx-mg-request-uuid: ca2cca86-5f1b-40e5-9533-7801a3c985c1\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19025,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19025), with no line terminators","md5":"ea0a871e86984cbf79bbb146f28f8a7c","sha1":"18f5324d29214c5108c077770371eeaf8a4dfb62","sha256":"6e19d52566e2f1338cdcc35af03627038efd291d4aeebec7a3b2336e2094d0c5","sha512":"1c186034e3da84972bf2bc05ae2602b9c339e8dfa2cfbf1f66fc14224d37047472bade49f062d68267d1a25872e64b1cc048dbbd541fe7dad770068a651fb877","ssdeep":"192:22zVfz/9UJfRykpXbf/OFON6b5vda/yYi/1g4GoLn6zAHzdxU1qRMwkuMKP4UBfJ:8JQuPo5v0y7Nb3hhnn","tlshash":"ea828589b6d4b15102e3517d493fb20ab336653968da84a06171c8d03dbab8f71a3ff9","first_seen":"2025-11-24T11:22:47.686386Z","last_seen":"2026-03-08T23:23:48.939713Z","times_seen":1283,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-cdn.brainberries.co/wp-content/uploads/2025/04/Great-TV-Shows-That-Lost-Their-Way-10-391x250.png","fqdn":"img-cdn.brainberries.co","domain":"brainberries.co","tld":"co"},"ip":{"addr":"104.18.35.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:22.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brainberries.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 10:20:19 GMT","end":"Sat, 11 Apr 2026 11:20:17 GMT"},"fingerprint":{"sha1":"05:61:82:30:F4:36:6E:56:12:F3:B8:9F:55:F8:14:60:19:A4:53:13","sha256":"76:4D:4D:CE:AA:A8:6B:23:B0:61:25:EE:58:46:71:02:D5:F7:81:74:68:CC:A3:73:19:14:32:BF:34:DB:7D:47"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/Great-TV-Shows-That-Lost-Their-Way-10-391x250.png HTTP/1.1\r\nHost: img-cdn.brainberries.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 97492\r\ncf-ray: 9bc50b01587e56c7-OSL\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=160343\r\ncontent-disposition: inline; filename=\"Great-TV-Shows-That-Lost-Their-Way-10-391x250.webp\"\r\nvary: Accept\r\ncache: MISS\r\netag: \"58c1c98ac072cee264823e4446d3769a\"\r\nexpires: Mon, 11 Jan 2027 14:18:22 GMT\r\nlast-modified: Thu, 24 Apr 2025 12:33:57 GMT\r\ntraceparent: 00-75df04ba8f08de1e0f35523b5ecda134-bc147844c547bd81-01\r\nx-amz-id-2: HFArTgkfQsoS5fKxV2tp6+ATH3gmKPSa6mxl68lP/OUH/x9ebIGTYzPVJEH/7P1qDK/ZjnrHQ8o=\r\nx-amz-request-id: DEGTASQKMHX20640\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: hqhb0v4DNqGPbuNOqRuPDYtDAahl.p7c\r\nx-id: wa2-hw-edge-gc9\r\nx-id-fe: wa2-hw-edge-gc9\r\ncf-cache-status: HIT\r\nage: 76781\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97492,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e1853b642f6570d25fc8397b6c34cd7c","sha1":"ccc36dda034650a18fabc9888aa862f298337070","sha256":"ecf0d0425803401672aa1a6da4bc4980d40256ef525e016b2daa43a0c29477e6","sha512":"c9c9a50bff08e9d8a95277e062ab48a6f8c5ecc5d72cee125e87ce115b311c432ef60e09952b98159bb4f65bd2ebd9f919c4ecad96dca6aa423aba0b4260a975","ssdeep":"1536:wz/dLZbV0IHgwxXSe/sPNPeJ/7pVkPuCvb8OI8xNPyRBDyZA7g/LJRd9wA:wz/dXHgwlSGsPY/DkrbVIuPNA7YZz","tlshash":"c59302a67cd8017dc9e8759b69c93cf6ab0e342d4c66e07a028d315389a77c5f252c3d","first_seen":"2025-06-13T17:52:28.838422Z","last_seen":"2026-02-03T13:52:25.91152Z","times_seen":8,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":38,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202409.2.0/assets/otCommonStyles.css","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:23.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /scripttemplates/202409.2.0/assets/otCommonStyles.css HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ploynest.com/\r\nOrigin: https://ploynest.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:23 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\ncontent-md5: A9jekd5UoO8SyzJ6LiStug==\r\nlast-modified: Thu, 28 Nov 2024 09:42:20 GMT\r\nx-ms-request-id: 1a37eb86-701e-0021-2702-4efebb000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nage: 27303\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\ncf-ray: 9bc50b076c2f8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24745,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (24745), with no line terminators","md5":"03d8de91de54a0ef12cb327a2e24adba","sha1":"5d758dcc4afeaf7989e499e5842e2ba355c8c535","sha256":"e2afa04c9a3e080712c94d68b9c1d33587fddcbaeaba9dfcaf1d53d19f6a280a","sha512":"75aecaca92892f75129bc02d50293b1f144fa8a914305ddcc5f135c1ffcda0ec35c6ee6cce036081d91e865a49fedebd09ad8903bfd6bb4d8a741e5360c38f31","ssdeep":"384:WZ8ChhGoFpHDouLlCS7FGAVsq1nwGfg4xqsQMPNE:OlpuJ","tlshash":"f5b2459b38512b1ae7d7c719992139827d11aceffd739ceee005a3784adc3e24c1464a","first_seen":"2024-10-11T08:31:51.730256Z","last_seen":"2026-04-19T02:20:23.42952Z","times_seen":6587,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/logos/static/powered_by_logo.svg","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:23.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /logos/static/powered_by_logo.svg HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:23 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\ncontent-md5: Y+c301RBZNK39PvKQWrIBw==\r\nlast-modified: Tue, 06 Jan 2026 09:58:23 GMT\r\nx-ms-request-id: bf972bec-e01e-0042-6e9c-7fb89e000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nage: 29138\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\ncf-ray: 9bc50b080ae90883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5194,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63e737d3544164d2b7f4fbca416ac807","sha1":"030370aa38715e4c41589633f69d0bfe8255d46c","sha256":"5fa00d047acd959697b9d7772c31dcd37bec33c70c6fbf80ab8316205d1d286d","sha512":"31ee1bb536c0e50f5568a415ea3308367bfcfd11d2a6f7dff1c8e3a982f7be790c240a603cd4c6e187672824b8e5d07646049a28c6a88a7b001eb9a0142f312b","ssdeep":"96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV","tlshash":"93b1a9f5aa45d29c391e8984ce37a964551fb4eb7bfe83d06192d332e40ede0f900c18","first_seen":"2023-05-04T19:47:29Z","last_seen":"2026-04-19T01:15:17.44214Z","times_seen":118598,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MKYFKCW9GF","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:21.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-MKYFKCW9GF HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 11 Jan 2026 14:18:21 GMT\r\nexpires: Sun, 11 Jan 2026 14:18:21 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143885\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":434542,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"8824bb300156ea6c186efbcba9321330","sha1":"2b039687fdd8c8264e2133f3446f6f19abea9473","sha256":"4585c681d79e4a3d897ea50ffc43292db8ddec19b932e868c7dcbfee9b507a93","sha512":"007e538389c99fd8022cb62e22c88019b6dff9578280e5574c306a67df274775242413e1ef8ae89dcc5983a29f01825075ccf3ce49c9540fae0302230a2674bb","ssdeep":"6144:zYrVfsMxo6qWroAizhQkc1/po7YA+TkIzvovBQVnFRA:ABrqLAi1C7TkI0t","tlshash":"5c941ace73d674269396e078503f018ba57b29a2b45dc896f189cce02d74a9a0277f7c","first_seen":"2026-01-11T14:18:50.49569Z","last_seen":"2026-01-11T14:18:50.49569Z","times_seen":1,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":164,"dns":0,"connect":11,"send":0,"wait":26,"receive":24,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/wp-includes/css/dist/block-library/style.min.css?ver=5.7.2","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:21.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ploynest.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 19:35:55 GMT","end":"Sun, 08 Feb 2026 19:35:54 GMT"},"fingerprint":{"sha1":"0B:65:AF:FF:BB:00:8E:94:A8:F2:6F:8B:07:D8:52:90:98:66:BD:75","sha256":"ED:61:DE:41:84:A6:60:ED:9F:20:B6:65:A3:63:D7:EE:70:DC:B8:C0:01:06:53:0B:2D:66:E9:B8:66:B3:E5:DD"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=5.7.2 HTTP/1.1\r\nHost: ploynest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 14:18:21 GMT\r\ncontent-type: text/css\r\ncontent-length: 58171\r\nlast-modified: Fri, 11 Jun 2021 10:11:56 GMT\r\netag: \"60c336ec-e33b\"\r\nexpires: Tue, 10 Feb 2026 14:18:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=15768000; includeSubdomains; preload\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58171,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (29677)","md5":"b5d1e2c87b60ce71c3fd90ca27073250","sha1":"b65e3890ef1565f98971b344b4c85866a5f33860","sha256":"2cd9de3dd26246204749cff259bc34e8e6a47ae5d6e4528b9b28c75d68d50cde","sha512":"0698905368e41d22f1026dcc64f716be70bfde1bc05bc85918242af9c30351166726b4dc4426898e9ef0428ef0a2f875d8fed54bbc8b925289363a39fabba165","ssdeep":"384:T2vicPcBZDn/KRM34XMX6cD+d+AwlVHI+LQ3R+T55GPh5IIINXTXlx:AXMX6E+d+AwlxI+LQ3RC4h5DwTVx","tlshash":"83431f2413b5ccf935afab3c8d9de248e146a981c54a97e7f432e060624c95a5cf3b1f","first_seen":"2023-04-05T07:33:55Z","last_seen":"2026-04-19T01:31:07.014052Z","times_seen":3836,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ploynest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:21.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ploynest.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 19:35:55 GMT","end":"Sun, 08 Feb 2026 19:35:54 GMT"},"fingerprint":{"sha1":"0B:65:AF:FF:BB:00:8E:94:A8:F2:6F:8B:07:D8:52:90:98:66:BD:75","sha256":"ED:61:DE:41:84:A6:60:ED:9F:20:B6:65:A3:63:D7:EE:70:DC:B8:C0:01:06:53:0B:2D:66:E9:B8:66:B3:E5:DD"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1\r\nHost: ploynest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 14:18:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 11224\r\nlast-modified: Fri, 11 Jun 2021 10:11:56 GMT\r\netag: \"60c336ec-2bd8\"\r\nexpires: Tue, 10 Feb 2026 14:18:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=15768000; includeSubdomains; preload\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11224,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11126)","md5":"79b4956b7ec478ec10244b5e2d33ac7d","sha1":"a46025b9d05e3df30d610a8aef14f392c7058dc9","sha256":"029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300","sha512":"217f86fee871fa36eca4f25830e3917c7bf57a681140b135c508aa32f2a1e3eff5a80661f3b5ba46747d0c305af10b658d207f449550f3d417d9683216feea8f","ssdeep":"192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS","tlshash":"8232c59d71a6b4624eb735b8b03f939f71b605d9250d8940d26cc9f6782c84ec22bf68","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-19T02:36:11.10921Z","times_seen":76156,"resource_available":true,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ploynest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cm.mgid.com/js-cookie-muidn","fqdn":"cm.mgid.com","domain":"mgid.com","tld":"com"},"ip":{"addr":"104.17.198.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:22.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgid.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:16:32 GMT","end":"Fri, 20 Mar 2026 06:16:15 GMT"},"fingerprint":{"sha1":"09:C3:65:03:3F:7F:F6:CF:7F:18:FB:81:85:2B:4B:52:95:BB:FD:B9","sha256":"86:54:6A:FD:BA:0C:FD:54:73:94:08:E7:C5:B0:49:32:87:AA:42:EB:B2:65:68:04:A1:22:5B:E1:67:C1:15:07"}}},"request":{"raw":"GET /js-cookie-muidn HTTP/1.1\r\nHost: cm.mgid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 0\r\ncf-ray: 9bc50affea685ebd-OSL\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nx-robots-tag: noindex\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-cdn.brainberries.co/wp-content/uploads/2025/04/TV-Couples-That-Still-Give-Us-Butterflies-Years-Later-7-391x250.jpg","fqdn":"img-cdn.brainberries.co","domain":"brainberries.co","tld":"co"},"ip":{"addr":"104.18.35.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:22.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brainberries.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 10:20:19 GMT","end":"Sat, 11 Apr 2026 11:20:17 GMT"},"fingerprint":{"sha1":"05:61:82:30:F4:36:6E:56:12:F3:B8:9F:55:F8:14:60:19:A4:53:13","sha256":"76:4D:4D:CE:AA:A8:6B:23:B0:61:25:EE:58:46:71:02:D5:F7:81:74:68:CC:A3:73:19:14:32:BF:34:DB:7D:47"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/TV-Couples-That-Still-Give-Us-Butterflies-Years-Later-7-391x250.jpg HTTP/1.1\r\nHost: img-cdn.brainberries.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21516\r\ncf-ray: 9bc50b01587a56c7-OSL\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: qual=85, origFmt=jpeg, origSize=23964\r\ncontent-disposition: inline; filename=\"TV-Couples-That-Still-Give-Us-Butterflies-Years-Later-7-391x250.webp\"\r\nvary: Accept\r\ncache: MISS\r\netag: \"6ed243f9d8e0b0a499692ae734c19b9a\"\r\nexpires: Mon, 11 Jan 2027 14:18:22 GMT\r\nlast-modified: Wed, 30 Apr 2025 10:19:09 GMT\r\ntraceparent: 00-4c2ee6bdfa3d8716d6afc33f94e53f7c-d4adc29965b41124-01\r\nx-amz-id-2: jNttBs9ai77m4gItkEAWT7Cawml3A5tGEDU22J8XZnaQQvCsqZBYK380WYIE+9aKSwYNt7DtSWfgVUepDyC/cJTfQFeXabFqowoqUEHsqz8=\r\nx-amz-request-id: DEGHGKBMCXSDJW0E\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: FdtgcjAQHYqhGm7nlGrBQibAi1QasiSE\r\nx-id: fr5-hw-edge-gc28\r\nx-id-fe: fr5-hw-edge-gc28\r\ncf-cache-status: HIT\r\nage: 21561\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":21516,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 391x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"883b5411724797c75d64ccf5fc3b8048","sha1":"f92529e47f30494f33238f599ac2a58fda67c454","sha256":"b4caba4423ec348e226be006257979ae6044771be86e1536c063b15c9e12055c","sha512":"c83fba3cccd67d3d0f982a47f1ca888749a1758208d7a289131ff3915d79ec00af8193fdb3fba6e8c30f930367d5577d020ca5ffd0e2d22a6ed5fc66dae75274","ssdeep":"384:wVrMGnBlHo+GGNTQds/E7AYoC2s4MyIh6ohr/CMF3Qp0sV/9KN34elScNbdmjQ/Y:wVBro+Ids/E7AYoCe/M5kFe/BaQg","tlshash":"29a2e035cae837e88405d28e9d0e64d23a5ca44dd1eb08f14367313e2e196766a2e1da","first_seen":"2025-06-13T17:52:28.827848Z","last_seen":"2026-03-30T01:22:02.543338Z","times_seen":12,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-cdn.brainberries.co/wp-content/uploads/2021/10/cropped-wp_logo.png","fqdn":"img-cdn.brainberries.co","domain":"brainberries.co","tld":"co"},"ip":{"addr":"104.18.35.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:22.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brainberries.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 10:20:19 GMT","end":"Sat, 11 Apr 2026 11:20:17 GMT"},"fingerprint":{"sha1":"05:61:82:30:F4:36:6E:56:12:F3:B8:9F:55:F8:14:60:19:A4:53:13","sha256":"76:4D:4D:CE:AA:A8:6B:23:B0:61:25:EE:58:46:71:02:D5:F7:81:74:68:CC:A3:73:19:14:32:BF:34:DB:7D:47"}}},"request":{"raw":"GET /wp-content/uploads/2021/10/cropped-wp_logo.png HTTP/1.1\r\nHost: img-cdn.brainberries.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 11 Jan 2026 14:18:23 GMT\r\ncontent-type: application/xml\r\ncontent-encoding: br\r\nx-id-fe: osix-hw-edge-gc4\r\ntraceparent: 00-19a1684e0fbf734c708855bdfa8e547d-cbfc7e05d5a3c662-01\r\nx-amz-request-id: G1NA9W104GEJ0PGK\r\nx-amz-id-2: CKizgY8f3drhcNcT7pGzZc8Hqnh9aK5LVLamo8SLJrXd0skxCsyL9xdEyYjzvtjx3qf/e1p3jFQ=\r\nx-id: osix-hw-edge-gc4\r\ncache: MISS\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9bc50b03ba7456c7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":1002,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1002,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/wp-content/plugins/add-search-to-menu/public/css/ivory-search.min.css?ver=5.5.6","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:21.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ploynest.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 19:35:55 GMT","end":"Sun, 08 Feb 2026 19:35:54 GMT"},"fingerprint":{"sha1":"0B:65:AF:FF:BB:00:8E:94:A8:F2:6F:8B:07:D8:52:90:98:66:BD:75","sha256":"ED:61:DE:41:84:A6:60:ED:9F:20:B6:65:A3:63:D7:EE:70:DC:B8:C0:01:06:53:0B:2D:66:E9:B8:66:B3:E5:DD"}}},"request":{"raw":"GET /wp-content/plugins/add-search-to-menu/public/css/ivory-search.min.css?ver=5.5.6 HTTP/1.1\r\nHost: ploynest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 14:18:21 GMT\r\ncontent-type: text/css\r\ncontent-length: 6640\r\nlast-modified: Tue, 23 Jul 2024 18:48:36 GMT\r\netag: \"669ffb04-19f0\"\r\nexpires: Tue, 10 Feb 2026 14:18:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=15768000; includeSubdomains; preload\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6640,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6640), with no line terminators","md5":"71c070bf1edf9096b5acac42b4430f9c","sha1":"a3e8550e5df92244db3775df5a3a9925bcfa9828","sha256":"24d4d543bbeadbd760863ea450a255864acb17df7e254d5893c8c4b2845f6718","sha512":"e9656c9b2d6ec372cdb9aef4e2ce0668110d2ce73966e29c1fed4cfe6983bfbd7835760126f1a428bd7a4a534af5626a018985c7d52e726234dd1d9780360bf1","ssdeep":"96:LjiuCPcQqShczc2Ck90O/RUg7hs4kkwREwVPbNUc+ttsH0Z/Bn57Ucd:nxCPcQqShczckZ/RUgds4kkSVssE","tlshash":"c7d12f53d9c02d44b43b881462c97b693f7993127b120f6fb625ba30c78fcad0576b94","first_seen":"2023-10-29T23:37:55Z","last_seen":"2026-04-18T16:07:15.292899Z","times_seen":447,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ploynest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.usefulcontentsites.com/js/push/subscribe.js?t=1.2.7","fqdn":"cdn.usefulcontentsites.com","domain":"usefulcontentsites.com","tld":"com"},"ip":{"addr":"104.21.92.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:21.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usefulcontentsites.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 08:55:34 GMT","end":"Thu, 26 Feb 2026 09:54:19 GMT"},"fingerprint":{"sha1":"79:F3:EC:89:CC:C4:63:68:9F:B0:DB:7A:21:65:F1:1A:7E:7B:28:8C","sha256":"76:95:10:81:C0:ED:61:A9:6F:53:C1:FE:A8:D1:4A:0E:23:95:D2:D5:35:70:32:EB:18:94:59:31:8F:0B:B8:4B"}}},"request":{"raw":"GET /js/push/subscribe.js?t=1.2.7 HTTP/1.1\r\nHost: cdn.usefulcontentsites.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 14:18:21 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\npriority: u=3,i=?0\r\nx-id-fe: osix-hw-edge-gc4\r\ntraceparent: 00-3d67e58d16039c29052f80ec5c2695bf-65b183625eae6eb7-01\r\nx-amz-id-2: DU2lmkFu9UTudd8NVv6E7ZPedT87HO46XK1MUNg78J49X6PvdUz9PA3vU0aOL5yjLOcapKRTAWM=\r\nx-amz-request-id: FTRRCNQA7A95MQFG\r\nlast-modified: Thu, 10 Oct 2024 15:33:58 GMT\r\netag: \"fcdff02c1de1d14c569f9b22c16da636\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-s3cmd-attrs: atime:1728574436/ctime:1728574436/gid:0/gname:root/md5:fcdff02c1de1d14c569f9b22c16da636/mode:33206/mtime:1728574396/uid:0/uname:root\r\nx-amz-version-id: r20H4LbcjpvT9DRLMlqB4GBEHYvIzGPm\r\nx-id: osix-hw-edge-gc4\r\nage: 4843\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-07-04T01:53:18+00:00\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jK4tYtONVpG5sPyXKsQO%2B9fR101WeFgyMybXl1xSFdnmT%2FxmOXZXKl%2Bh9kh6MtvnyIDI0uDuCMIuWcdf8xU6YHtz18D9Tgl%2F8E2EWaUnb8Y2ys3MtMxayg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc50afe4a1c56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5494,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"fcdff02c1de1d14c569f9b22c16da636","sha1":"9d68bf70544b96ab6649be047c992694190dbb23","sha256":"88020ca8c595c4981b84b6d65df1233bb0a387a4e7e6cad00ffdaf8e3048df0d","sha512":"4c667a0dddf6bb38c205f3edeb59a9f8780409875ac5df6ddb2965640f326ac75b12fa0487c5f59711edce1ebac6750504a5fe8199c2cab82d5a645a5ef86f96","ssdeep":"96:sDWyndiILybZl9ILxIAy/OShEHETuGMUdExE8SpBJxY2YjFgAg5W:sDHdiI+bZPILxIAy2ShcSZMUdIE7pBGH","tlshash":"72b1bc6d19f7443266a3b26d37bf61043132a003b048da057fcd97655fd4aa98be2fac","first_seen":"2024-10-25T11:03:42.516961Z","last_seen":"2026-04-17T16:40:39.584274Z","times_seen":426,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-cdn.brainberries.co/wp-content/uploads/2025/05/1-2-391x250.png","fqdn":"img-cdn.brainberries.co","domain":"brainberries.co","tld":"co"},"ip":{"addr":"104.18.35.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:22.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brainberries.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 10:20:19 GMT","end":"Sat, 11 Apr 2026 11:20:17 GMT"},"fingerprint":{"sha1":"05:61:82:30:F4:36:6E:56:12:F3:B8:9F:55:F8:14:60:19:A4:53:13","sha256":"76:4D:4D:CE:AA:A8:6B:23:B0:61:25:EE:58:46:71:02:D5:F7:81:74:68:CC:A3:73:19:14:32:BF:34:DB:7D:47"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/1-2-391x250.png HTTP/1.1\r\nHost: img-cdn.brainberries.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 134908\r\ncf-ray: 9bc50b01587856c7-OSL\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=196403\r\ncontent-disposition: inline; filename=\"1-2-391x250.webp\"\r\nvary: Accept\r\ncache: MISS\r\netag: \"61bc51f33a02ca5db155b7a0ff1816e4\"\r\nexpires: Mon, 11 Jan 2027 14:18:22 GMT\r\nlast-modified: Tue, 13 May 2025 13:51:21 GMT\r\ntraceparent: 00-2b9d8dde97b0b97b4a95ac364e9475cf-0e4216e97dbacb85-01\r\nx-amz-id-2: vkbufXtP3+GSR23DHTrjZuZjqS43b6lehDYe8AXlWq5irPTJHHDZthvjTIS0a7JQWsffdHwsNNbQYQF7gIXG+R9wCpDI+WKrs+2cU2j4nlg=\r\nx-amz-request-id: FFZX6ETQJW6AFVB1\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 2Ur0pAguYXibzt2iozU8HBpeit0F8HZE\r\nx-id: fr5-hw-edge-gc56\r\nx-id-fe: fr5-hw-edge-gc56\r\ncf-cache-status: HIT\r\nage: 76784\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":134908,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7962ae6ba5da46022cda8f8d5020502b","sha1":"97a42af190400fbdeeb4c13dd2ffb068a4405e0d","sha256":"8bff707e70ca4acf858475618ef7683636210ad9fe4400400ef71f7ef8d25c6e","sha512":"c368d324967b77899099fadf3c5ccd1cd5c514360534919d623836cb46c6f8c907beb7652aa9a9ef2120eb39eca2ec2799adbe30c861832e23d90164a06b7ffa","ssdeep":"3072:sFIBF4X+IUpLB/ue1hhMWD4Pv9vUqElEmDA3pe2DK470ynqZ4o3SfJ:3BFa+IUphu+hhMWDsv9vnm83pe/470y9","tlshash":"88d312563eee08ce64064b05827cf566f2aa2377dda39b987126c1df50087ab09ff704","first_seen":"2025-06-13T17:52:28.800686Z","last_seen":"2026-02-03T13:52:25.891064Z","times_seen":8,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":55,"dns":3,"connect":1,"send":0,"wait":33,"receive":14,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-cdn.brainberries.co/wp-content/uploads/2021/10/cropped-wp_logo.png","fqdn":"img-cdn.brainberries.co","domain":"brainberries.co","tld":"co"},"ip":{"addr":"104.18.35.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:22.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brainberries.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 10:20:19 GMT","end":"Sat, 11 Apr 2026 11:20:17 GMT"},"fingerprint":{"sha1":"05:61:82:30:F4:36:6E:56:12:F3:B8:9F:55:F8:14:60:19:A4:53:13","sha256":"76:4D:4D:CE:AA:A8:6B:23:B0:61:25:EE:58:46:71:02:D5:F7:81:74:68:CC:A3:73:19:14:32:BF:34:DB:7D:47"}}},"request":{"raw":"GET /wp-content/uploads/2021/10/cropped-wp_logo.png HTTP/1.1\r\nHost: img-cdn.brainberries.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 11 Jan 2026 14:18:23 GMT\r\ncontent-type: application/xml\r\ncontent-encoding: br\r\nx-id-fe: osix-hw-edge-gc4\r\ntraceparent: 00-334961d991d2f3f907f11e272af4b325-0076bcec70eed96d-01\r\nx-amz-request-id: G1N21E72RKFRQ7NX\r\nx-amz-id-2: waX+9EGU64iA/Yo9HpoAz2ksj66k2W5ZTS4QjCdoewPNAEjbFjhTaFVL2jN9yPceeaLVop7Do7c=\r\nx-id: osix-hw-edge-gc4\r\ncache: MISS\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9bc50b03ba7556c7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202409.2.0/otTCF.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:22.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /scripttemplates/202409.2.0/otTCF.js HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 18016\r\ncf-ray: 9bc50b041f640883-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: sAjrKmV7rzJH12DgCvY0fQ==\r\nlast-modified: Thu, 28 Nov 2024 09:42:14 GMT\r\netag: 0x8DD0F90F075D482\r\nx-ms-request-id: ec2b3f93-301e-00c8-8027-3902bd000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nvary: accept-encoding\r\nage: 86108\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65438,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65288)","md5":"c11817c8b372aff4193b8b303750c9bd","sha1":"c4fa2a5c16a28232b812df74d95b5110871130e1","sha256":"a77ed58556547050d62efb8363841c0ef48dd9ef8b092935d5e6b1b00a9c4c15","sha512":"f0f913bad2d5a5b52ef76c1149ddb702bad60b5d1996e1d41fd192ec7ff25ccfe0c255e4ec243633ab589059303a5f6e6b47ace626e5a6cf15cd55f092761505","ssdeep":"768:qdbzzYH9XCNfvCfNlH2jJsegEofmMpFWKKNF+JtYyi24MHa0aloHPZz+r8ZWH7:pGfselrofTqF+JtY7leY7","tlshash":"8553c788f295b4f04bdb7270542f100aa67a7464289cc0a4f776c8e1bef464e6577fb8","first_seen":"2024-08-12T06:43:01Z","last_seen":"2026-04-17T16:40:39.569499Z","times_seen":1212,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202409.2.0/assets/otFlat.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:23.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /scripttemplates/202409.2.0/assets/otFlat.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ploynest.com/\r\nOrigin: https://ploynest.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:23 GMT\r\ncontent-type: application/json\r\ncontent-length: 3003\r\ncf-ray: 9bc50b076c1a8be6-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: KL0M7jDr39bOhstSUdPe1w==\r\nlast-modified: Thu, 28 Nov 2024 09:42:09 GMT\r\netag: 0x8DD0F90ED89510B\r\nx-ms-request-id: 8944e8fb-c01e-001a-190e-c5bce5000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nage: 4183\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13554,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"23e8424aa65b5cc6f0693ec20c2ceae0","sha1":"0f4f59077d295d0799b9b02c0da2076f7dd73960","sha256":"d890abf66010907c7a0a61236d25c3c98bcb7edec34b13dc887f5be122bfef7e","sha512":"9d649426db646bce98e4a3aab625cb1de12f2afae943adc7dd9c5b54740a7e14e20b826e6fa7812ca7add18e5a12b4feca99ff864c8bf29349e200b7a8641b48","ssdeep":"384:KIy0clDjbn42OXOw85csXf1NFyNg/OoH6iAHyPtJJAR:KIy5F/i","tlshash":"7152bb513e204b29e1efcb994882b5d835327d8bfe3399cd924da7b443ad2f50d22745","first_seen":"2024-06-28T23:53:54Z","last_seen":"2026-04-19T00:21:30.540375Z","times_seen":16337,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/logos/static/ot_guard_logo.svg","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:23.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /logos/static/ot_guard_logo.svg HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ploynest.com/\r\nOrigin: https://ploynest.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:23 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\ncontent-md5: tXyZydHjxQshFMbbBT1/8A==\r\nlast-modified: Tue, 06 Jan 2026 09:58:21 GMT\r\nx-ms-request-id: 01475f84-e01e-00c1-3ea2-7f1833000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nage: 26812\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\ncf-ray: 9bc50b083ef28be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":497,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b57c99c9d1e3c50b2114c6db053d7ff0","sha1":"ada8abfed92ba8a545bbd9d299d74d5972cc4ae8","sha256":"691dcdb24853a0f5ce4e6597e5713dea66799b57ffe2c2a10f28f98e0b569b19","sha512":"0dab6d06f386d922fb28f70f2590d4f9c361e7f4e5d5e581b98e59aac12b266cba596ffccd87203b4330673ee4ec1d459a1abdfc4b066d243a43b2bf7909f0ee","ssdeep":"","tlshash":"2ef0d4d91906a6adb6822e7cdd3c56e04c2c7ce274dc22c894cce094d4489bc9705855","first_seen":"2023-05-07T20:46:54Z","last_seen":"2026-04-19T02:36:31.309244Z","times_seen":123587,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/wp-content/themes/best-minimalist/style.css?ver=5.7.2","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:21.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ploynest.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 19:35:55 GMT","end":"Sun, 08 Feb 2026 19:35:54 GMT"},"fingerprint":{"sha1":"0B:65:AF:FF:BB:00:8E:94:A8:F2:6F:8B:07:D8:52:90:98:66:BD:75","sha256":"ED:61:DE:41:84:A6:60:ED:9F:20:B6:65:A3:63:D7:EE:70:DC:B8:C0:01:06:53:0B:2D:66:E9:B8:66:B3:E5:DD"}}},"request":{"raw":"GET /wp-content/themes/best-minimalist/style.css?ver=5.7.2 HTTP/1.1\r\nHost: ploynest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 14:18:21 GMT\r\ncontent-type: text/css\r\ncontent-length: 37833\r\nlast-modified: Thu, 02 Oct 2025 10:11:22 GMT\r\netag: \"68de4fca-93c9\"\r\nexpires: Tue, 10 Feb 2026 14:18:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=15768000; includeSubdomains; preload\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37833,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1720)","md5":"977bcc394465c275938c67ab9d45f83e","sha1":"fa07a52dbed446d28f67932992eba7ed8bea1a46","sha256":"d96807488d913e10150117d7d37d243a2a126ea452cc3dc1e49e9170bdb1181d","sha512":"a8e2a453edb4402fd46cb48f008491acf2fb4c2da82ae2787b9fc7480372f85addbe2d827c33bcaf7b5f72b1e4c38099a93902aad8112f9b1dccddc2cfedab52","ssdeep":"768:KHbHbasAdl4vYaX2NIrTFTXrbjif5MtAtC:KHbHLE+2NIrTBr/ifWl","tlshash":"e303eaa16f442844952bc2babfd5db51e71f40139e0daebab094912cc7cb59501ffb8c","first_seen":"2025-06-13T17:52:28.815481Z","last_seen":"2026-03-30T01:22:02.541181Z","times_seen":13,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ploynest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img-cdn.brainberries.co/wp-content/uploads/2025/05/3-391x250.jpg","fqdn":"img-cdn.brainberries.co","domain":"brainberries.co","tld":"co"},"ip":{"addr":"104.18.35.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:22.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brainberries.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 10:20:19 GMT","end":"Sat, 11 Apr 2026 11:20:17 GMT"},"fingerprint":{"sha1":"05:61:82:30:F4:36:6E:56:12:F3:B8:9F:55:F8:14:60:19:A4:53:13","sha256":"76:4D:4D:CE:AA:A8:6B:23:B0:61:25:EE:58:46:71:02:D5:F7:81:74:68:CC:A3:73:19:14:32:BF:34:DB:7D:47"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/3-391x250.jpg HTTP/1.1\r\nHost: img-cdn.brainberries.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20218\r\ncf-ray: 9bc50b01b8c656c7-OSL\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: qual=85, origFmt=jpeg, origSize=23820\r\ncontent-disposition: inline; filename=\"3-391x250.webp\"\r\nvary: Accept\r\ncache: MISS\r\netag: \"9e9c07383f5bfbeff61f0920f930acb5\"\r\nexpires: Mon, 11 Jan 2027 14:18:22 GMT\r\nlast-modified: Mon, 05 May 2025 15:39:36 GMT\r\ntraceparent: 00-241281a5081c7cfa70146480a78544bd-f4f50afc4ff66cba-01\r\nx-amz-id-2: Tnte9NRtSn0Fm5efuB3uQkhXtBTOTVwILoyG7Sqfp9kBJnTMyGo57UnQ6JXCaa8F7mDXMcu1e0c=\r\nx-amz-request-id: DEGN57JNKGRDX4NC\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ZiDWQkoTZbEZGQxMAZqaoypBtrl.s_hI\r\nx-id: wa2-hw-edge-gc9\r\nx-id-fe: wa2-hw-edge-gc9\r\ncf-cache-status: HIT\r\nage: 76784\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20218,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 391x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f35120bb146ce4d6499899f005be097c","sha1":"641ca83edf4654efa1f4902f1c156567bdc83b91","sha256":"5a2a6be82197ca736e0bda64480dd1c5a055db35233ad3c7c33c65262f57d43f","sha512":"50ad2cebc62a9db9b5e81bd9019bc92baf4aa3957a3670f35821d3207e7046ca48fb98f0f16a74f8eb7a3d2696f48c5c17d0aa306d99ab841a2f2df8c36147aa","ssdeep":"384:SKgri5XZsIdkHpXYUmvcsxpAewvF8yVmWYUeKimwrpZ2r5oza207buH:H35XZJGYzvv+eEqWY0imker5omfaH","tlshash":"f992e1ce443f56ca8fad3d5e492b35c9fd8430683f695da49711d67902ec8882c78336","first_seen":"2025-06-13T17:52:28.8401Z","last_seen":"2026-03-30T01:22:02.542187Z","times_seen":12,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":103,"dns":12,"connect":1,"send":0,"wait":13,"receive":1,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/vendorlist/iab2V2Data.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:22.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /vendorlist/iab2V2Data.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ploynest.com/\r\nOrigin: https://ploynest.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:22 GMT\r\ncontent-type: application/json\r\ncontent-length: 85958\r\ncf-ray: 9bc50b041a188be6-OSL\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\ncontent-md5: m50jGfsLkxeOV253ZaWTZg==\r\nlast-modified: Sat, 10 Jan 2026 13:15:26 GMT\r\netag: 0x8DE504A51B0E16C\r\nx-ms-request-id: b288f27a-801e-00bc-5c61-8284fb000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 61669\r\nexpires: Mon, 12 Jan 2026 14:18:22 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":668997,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6de76597cf52887438fd9969dc6e076c","sha1":"b6fedb583251287e583059a46afd92555f00a8df","sha256":"54b347ac11cf2e64735b72e498c05a068fc51518b7f46ff3408938db7dd233d8","sha512":"f98765635981636bbe31d5625e248451d0b86c72d6b36deab0d6f3b87ff1d78cbb5f54015ecbd555a288a2d807ef13f720635dc2159fd9a472a3067ca4cf69a5","ssdeep":"3072:Nvilly0bd3AAqezkUOYqphblVlo6H2Vz0purchQ7BMPZJzvXVLMCTV:UyCZqOkzY2Zlo6HM4fQ7BYZJz/LV","tlshash":"3ce4346d7280483167fb03d5ce05b7ca6ae5307f0f2c08ea7c9e196e17982b5366619f","first_seen":"2026-01-09T04:50:43.487116Z","last_seen":"2026-01-16T16:42:36.195957Z","times_seen":186,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202409.2.0/assets/v2/otPcTab.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:23.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /scripttemplates/202409.2.0/assets/v2/otPcTab.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ploynest.com/\r\nOrigin: https://ploynest.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:23 GMT\r\ncontent-type: application/json\r\ncontent-length: 13789\r\ncf-ray: 9bc50b076c298be6-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: ExiEhLSOQWB1TbCxl8aZ/g==\r\nlast-modified: Thu, 28 Nov 2024 09:42:11 GMT\r\netag: 0x8DD0F90EF0D04AF\r\nx-ms-request-id: dd4e9f8c-c01e-0077-23c2-f716cb000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nage: 17666\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65609,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2b4777e0452bec8a4f354cfb519cec20","sha1":"3c091acd0e5e90241f17ba9771a3277f5671792d","sha256":"4016f0eb8333275dd19d417256d10f1baeb5185536d43503f5e0f54e3253e71d","sha512":"b10849617a23f839352cc2774b516242df3bc3589140d21b5cd5c000b07fcc8b5eb244701cf8d9d3149c07348f2c9c41b17f6f38a38c0d876413c5ae7b457f2d","ssdeep":"768:N56AeiWAJmhGhsxpCBCcq3CsJLPOpe5Qqi:NKpoqCe3jJipeSZ","tlshash":"0953ea9b7ea1530afed38b19eb926de97124c81fbc334deef1420678868d3e18d51509","first_seen":"2024-10-17T11:03:13.969328Z","last_seen":"2026-04-18T13:04:34.711892Z","times_seen":677,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/wp-content/themes/best-minimalist/assets/js/main.js?ver=1","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:21.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ploynest.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 19:35:55 GMT","end":"Sun, 08 Feb 2026 19:35:54 GMT"},"fingerprint":{"sha1":"0B:65:AF:FF:BB:00:8E:94:A8:F2:6F:8B:07:D8:52:90:98:66:BD:75","sha256":"ED:61:DE:41:84:A6:60:ED:9F:20:B6:65:A3:63:D7:EE:70:DC:B8:C0:01:06:53:0B:2D:66:E9:B8:66:B3:E5:DD"}}},"request":{"raw":"GET /wp-content/themes/best-minimalist/assets/js/main.js?ver=1 HTTP/1.1\r\nHost: ploynest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 14:18:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1850\r\nlast-modified: Thu, 02 Oct 2025 10:11:22 GMT\r\netag: \"68de4fca-73a\"\r\nexpires: Tue, 10 Feb 2026 14:18:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=15768000; includeSubdomains; preload\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1850,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"af8c1b9ab0a5d5e8682d6e147d96661d","sha1":"c5bc2b0e5ed5e8613c325bba039c838e8c73b7d7","sha256":"6933c8a20c70544ab3932d9266cd0ca61c0ee5b400dc39da43fcd3659182039a","sha512":"e13041de8def1593faf75ab97d29c8c437e0580f845724a4f8be69169124cc24a0ea68af40bc09068512c7205e0da1974ed8746f40a03d45d5fbd2aafcaa92b5","ssdeep":"","tlshash":"2b319ee7f3ea75255537a0ec947e4184653f1053e5820c79bcac9d2467e11bc23d2e2c","first_seen":"2025-06-13T17:52:28.857967Z","last_seen":"2026-03-30T01:22:02.561821Z","times_seen":14,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ploynest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jsc.mgid.com/site/595406.js","fqdn":"jsc.mgid.com","domain":"mgid.com","tld":"com"},"ip":{"addr":"104.17.198.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:21.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgid.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 05:16:32 GMT","end":"Fri, 20 Mar 2026 06:16:15 GMT"},"fingerprint":{"sha1":"09:C3:65:03:3F:7F:F6:CF:7F:18:FB:81:85:2B:4B:52:95:BB:FD:B9","sha256":"86:54:6A:FD:BA:0C:FD:54:73:94:08:E7:C5:B0:49:32:87:AA:42:EB:B2:65:68:04:A1:22:5B:E1:67:C1:15:07"}}},"request":{"raw":"GET /site/595406.js HTTP/1.1\r\nHost: jsc.mgid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:21 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 243316\r\ncf-ray: 9bc50afccad1723c-OSL\r\nx-amz-id-2: uCAZy9i7fRIfLMS+cMgiJT840TDsjVgQtAbsosca9/BTFuWjgTofavDOJZwdOKfLVQfO0GKjeGN8nZAF8HpKjCSa2SXteXVpixT50BZvb28=\r\nx-amz-request-id: MRC0BQ4DEDAVG3B8\r\nlast-modified: Wed, 19 Nov 2025 12:23:13 GMT\r\netag: \"4cddc62c2c9b42cf1dcdb2c16b218b9f\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: G1QOTpZrqlHKO4SF_MoDcCafLeV8KfC8\r\ncf-cache-status: HIT\r\nexpires: Sun, 11 Jan 2026 17:18:21 GMT\r\ncache-control: public, max-age=10800\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nx-robots-tag: noindex\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-cntry\r\nx-cntry: NO\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1123425,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13437)","md5":"624b6df1aeac151669e6a6bd9afe6ce2","sha1":"25db360c6e0ccf9eae05eadf5b2ebfa4727863a0","sha256":"487263b83a1ddd57c7ba561e4ec792d3e6c85c5e0cda7ff422c6a6371f937ee7","sha512":"e7653878c382d6710c53f4c2b587630d23a3f8bdbc9513b77b5fa7f7ea76b01df655554261390966b6947513a940c777400af3a2801d89b5302cebd15bd0f1e1","ssdeep":"24576:SqDltsyeQxraMaqBJftKhEkjuloy8SPLPg5j+BAmIeiWLNTVpMQ6k/HqdcI5te:SqDltsyeQAMaqBJftKhEkjuloy8SzPgq","tlshash":"5a255b7132902031819f819d7667370a3136900ae5274a2cf979f9e94aeddcf3677bb8","first_seen":"2025-11-23T10:32:44.837888Z","last_seen":"2026-02-03T13:52:25.926561Z","times_seen":6,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":34,"dns":8,"connect":2,"send":0,"wait":68,"receive":13,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/wp-content/themes/best-minimalist/assets/js/skip-link-focus-fix.js?ver=20151215","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:21.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ploynest.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 19:35:55 GMT","end":"Sun, 08 Feb 2026 19:35:54 GMT"},"fingerprint":{"sha1":"0B:65:AF:FF:BB:00:8E:94:A8:F2:6F:8B:07:D8:52:90:98:66:BD:75","sha256":"ED:61:DE:41:84:A6:60:ED:9F:20:B6:65:A3:63:D7:EE:70:DC:B8:C0:01:06:53:0B:2D:66:E9:B8:66:B3:E5:DD"}}},"request":{"raw":"GET /wp-content/themes/best-minimalist/assets/js/skip-link-focus-fix.js?ver=20151215 HTTP/1.1\r\nHost: ploynest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 14:18:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 695\r\nlast-modified: Thu, 02 Oct 2025 10:11:22 GMT\r\netag: \"68de4fca-2b7\"\r\nexpires: Tue, 10 Feb 2026 14:18:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=15768000; includeSubdomains; preload\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":695,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"1debd63422a6a784207437c882ec3eb2","sha1":"067163a0accd201cc48c8f309037c1c98135b882","sha256":"5d02ce90a5f6ac96f0d9cc25f1d9e7cea22e85d0b62007335b4a706dcc34a9f4","sha512":"13274afc5f14ca58db8656bc1dd42deab795c5552a522b082e9da63b61f5f7ed393eef2fa816471d03f663d71506b66fd755e2827137d587e0b093650fec3cd0","ssdeep":"","tlshash":"4a01c0a5f30d44b6049a3117dd4f51cd293cd0b2b419649f9c9d08401924d6d137be74","first_seen":"2024-12-24T16:55:45.053322Z","last_seen":"2026-04-17T16:40:39.579249Z","times_seen":59,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ploynest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img-cdn.brainberries.co/wp-content/uploads/2025/05/Young-and-Shirtless-Justin-Trudeau-Smokin-Hot-Look-From-His-Younger-Days-3-391x250.png","fqdn":"img-cdn.brainberries.co","domain":"brainberries.co","tld":"co"},"ip":{"addr":"104.18.35.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:22.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brainberries.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 10:20:19 GMT","end":"Sat, 11 Apr 2026 11:20:17 GMT"},"fingerprint":{"sha1":"05:61:82:30:F4:36:6E:56:12:F3:B8:9F:55:F8:14:60:19:A4:53:13","sha256":"76:4D:4D:CE:AA:A8:6B:23:B0:61:25:EE:58:46:71:02:D5:F7:81:74:68:CC:A3:73:19:14:32:BF:34:DB:7D:47"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/Young-and-Shirtless-Justin-Trudeau-Smokin-Hot-Look-From-His-Younger-Days-3-391x250.png HTTP/1.1\r\nHost: img-cdn.brainberries.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 80894\r\ncf-ray: 9bc50b01688356c7-OSL\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=128731\r\ncontent-disposition: inline; filename=\"Young-and-Shirtless-Justin-Trudeau-Smokin-Hot-Look-From-His-Younger-Days-3-391x250.webp\"\r\nvary: Accept\r\ncache: MISS\r\netag: \"2882571e397f2f932357201502f78626\"\r\nexpires: Mon, 11 Jan 2027 14:18:22 GMT\r\nlast-modified: Wed, 14 May 2025 10:45:23 GMT\r\ntraceparent: 00-01c6ab748154a2f23a462f59c27e7b20-cd8cff6d1ff87681-01\r\nx-amz-id-2: 4dQshMNdEVhYRDzVge5Gw9Ew6stwppndKDzSr2VJmulgSgI9N6NNCz0PVd0G73fHlcTpRSBiL5g=\r\nx-amz-request-id: FFZXV2C0GH563KHK\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: dlOOKZgWGyKImKOF2HNfNDIOdQnSsU60\r\nx-id: wa2-hw-edge-gc9\r\nx-id-fe: wa2-hw-edge-gc9\r\ncf-cache-status: HIT\r\nage: 76784\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80894,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bf0ba075470a174185a08f8920741b57","sha1":"f45ce15b666a4d5d8245a2c64347f5612bafb625","sha256":"ca73c9d88c995e481d4fa043442e6f25f1894f08e57b0f3903456c99e61a58be","sha512":"ad6e836648478cdda36aeed38fc1e15f64b43a81620aad8b4bf192410d504a117f043509a49915b3050e9f698d29b5375fa296980504b870a731828b43222b64","ssdeep":"1536:LMELGT/dqd33Tfe0mJvEztAKrd9dJEqc/Ewf4GUT3rRWZIvTBwEOXtzd:OT/Id67JvEBAKBdtccwf4N7RsGNwEezd","tlshash":"2f8302678396601221a540f028b156864f71a33ef8ba23d4db40b9feb5be7fb37054b5","first_seen":"2025-06-13T17:52:28.852935Z","last_seen":"2026-02-03T13:52:25.916635Z","times_seen":8,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":68,"dns":1,"connect":7,"send":0,"wait":30,"receive":13,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/wp-content/themes/best-minimalist/assets/css/minimalist.css?ver=5.7.2","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:21.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ploynest.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 19:35:55 GMT","end":"Sun, 08 Feb 2026 19:35:54 GMT"},"fingerprint":{"sha1":"0B:65:AF:FF:BB:00:8E:94:A8:F2:6F:8B:07:D8:52:90:98:66:BD:75","sha256":"ED:61:DE:41:84:A6:60:ED:9F:20:B6:65:A3:63:D7:EE:70:DC:B8:C0:01:06:53:0B:2D:66:E9:B8:66:B3:E5:DD"}}},"request":{"raw":"GET /wp-content/themes/best-minimalist/assets/css/minimalist.css?ver=5.7.2 HTTP/1.1\r\nHost: ploynest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 14:18:21 GMT\r\ncontent-type: text/css\r\ncontent-length: 1329\r\nlast-modified: Thu, 02 Oct 2025 10:11:22 GMT\r\netag: \"68de4fca-531\"\r\nexpires: Tue, 10 Feb 2026 14:18:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=15768000; includeSubdomains; preload\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1329,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5c94c4be690fb9a73a7ca5da9d41a8ca","sha1":"20f9937f9cd7adaf7455b095e34260b7c1b44545","sha256":"e5bd00da19bb6f356678c9988e06d95c45e82701bedc8c9c442befe3813a1a4d","sha512":"34a4237971140dd301bfca7e22383f2f10bbc32691f81b4e54397d39e8ee4ea51b52956a960c61ec4891e979aafa0fffe46c96f330c4e6cf699ce0fee84205de","ssdeep":"","tlshash":"84210961e56a1560a39188d3218f3b395f0cb212a9425c739213bd1ed7f9bd112d079d","first_seen":"2024-12-31T11:26:25.8082Z","last_seen":"2026-04-04T18:00:58.031965Z","times_seen":32,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ploynest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/wp-includes/js/jquery/jquery.min.js?ver=3.5.1","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:21.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ploynest.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 19:35:55 GMT","end":"Sun, 08 Feb 2026 19:35:54 GMT"},"fingerprint":{"sha1":"0B:65:AF:FF:BB:00:8E:94:A8:F2:6F:8B:07:D8:52:90:98:66:BD:75","sha256":"ED:61:DE:41:84:A6:60:ED:9F:20:B6:65:A3:63:D7:EE:70:DC:B8:C0:01:06:53:0B:2D:66:E9:B8:66:B3:E5:DD"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.5.1 HTTP/1.1\r\nHost: ploynest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 14:18:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 89496\r\nlast-modified: Fri, 11 Jun 2021 10:11:56 GMT\r\netag: \"60c336ec-15d98\"\r\nexpires: Tue, 10 Feb 2026 14:18:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=15768000; includeSubdomains; preload\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89496,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"b6f7093369a0e8b83703914ce731b13c","sha1":"d1889f5c173c2a4b20288f1f84758599afd346ef","sha256":"60240d5a27ede94fd35fea44bd110b88c7d8cfc08127f032d13b0c622b8be827","sha512":"d6aa7835d7b256b94ddd2f9d8db84484f0413ebc502762c1ba21cba7a392c6f550db2418cdc8bd6d1da6ed2cea55bf22473c778493d416b1a1c38e6ffdb8c79d","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakU:AYh8eip3huuf6IidlrvakdtQ47GKE","tlshash":"7393f9ddb2c6702257a720ba007f510bf236199d6c4d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-07T01:02:17Z","last_seen":"2026-04-19T01:31:07.107024Z","times_seen":11098,"resource_available":true,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ploynest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/wp-content/themes/best-minimalist/assets/js/end.js","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:21.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ploynest.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 19:35:55 GMT","end":"Sun, 08 Feb 2026 19:35:54 GMT"},"fingerprint":{"sha1":"0B:65:AF:FF:BB:00:8E:94:A8:F2:6F:8B:07:D8:52:90:98:66:BD:75","sha256":"ED:61:DE:41:84:A6:60:ED:9F:20:B6:65:A3:63:D7:EE:70:DC:B8:C0:01:06:53:0B:2D:66:E9:B8:66:B3:E5:DD"}}},"request":{"raw":"GET /wp-content/themes/best-minimalist/assets/js/end.js HTTP/1.1\r\nHost: ploynest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 14:18:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6609\r\nlast-modified: Thu, 02 Oct 2025 10:11:22 GMT\r\netag: \"68de4fca-19d1\"\r\nexpires: Tue, 10 Feb 2026 14:18:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=15768000; includeSubdomains; preload\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6609,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"782a5769db125c61973ce8db6827334e","sha1":"7a460a50c0d674b32133a8b6bfc8a391a186d193","sha256":"21866afb1e9cd49fcec8b6d8e016bcc4bae1bef6990115ff8e49ef90d3f5f591","sha512":"800dd72bf244f1862bd155c39679a2887e0cf7e1646820291211b39328ba3c60a22a8a9757f415cc42b331dd31571c38da44e51d6d171d1d896de77120ca8424","ssdeep":"192:oD2Swo/ToMnXVNA4YIFVM7PVWGFeSrRIymdQV0XCBX:Awo/TfXnA4AkGoStILBCBX","tlshash":"4ad1af1afb5e14be6179124c8ee7114815f43d835f058fdeb79c0a189befe66817a304","first_seen":"2025-06-13T17:52:28.807457Z","last_seen":"2026-03-30T01:22:02.537436Z","times_seen":13,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ploynest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/wp-content/themes/best-minimalist/assets/js/navigation.js?ver=20151215","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:21.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ploynest.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 19:35:55 GMT","end":"Sun, 08 Feb 2026 19:35:54 GMT"},"fingerprint":{"sha1":"0B:65:AF:FF:BB:00:8E:94:A8:F2:6F:8B:07:D8:52:90:98:66:BD:75","sha256":"ED:61:DE:41:84:A6:60:ED:9F:20:B6:65:A3:63:D7:EE:70:DC:B8:C0:01:06:53:0B:2D:66:E9:B8:66:B3:E5:DD"}}},"request":{"raw":"GET /wp-content/themes/best-minimalist/assets/js/navigation.js?ver=20151215 HTTP/1.1\r\nHost: ploynest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 14:18:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4247\r\nlast-modified: Thu, 02 Oct 2025 10:11:22 GMT\r\netag: \"68de4fca-1097\"\r\nexpires: Tue, 10 Feb 2026 14:18:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=15768000; includeSubdomains; preload\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4247,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a03afdac8a2b4b0e6931740a3c961088","sha1":"1058072fc6fc5ce0eaf3ed396481b9f45d61bc39","sha256":"85ba32250dfea4a69d42dc1f10a5c8e1eb93950185e38fe205bf2c813eabd2ae","sha512":"61de37a57704d896f647738d2896df433fc44c80f4a5b1db7f37dd362b67e02289e225891f89d7a536b843a1a26e9c3c9a186d483e927cca2f99a214cc20ba37","ssdeep":"96:xpZYfcqJ2KVmKP/JERJiUIRMeH1LbHSpRCP2B2UEb:xpZYRJ7Y0/iRJ7Y3LgAki","tlshash":"2791259af7af236769be34d75927c066353e8837e0452831bcaac5697bc80050799f3c","first_seen":"2024-12-11T18:59:34.81259Z","last_seen":"2026-04-17T16:40:39.586183Z","times_seen":60,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ploynest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img-cdn.brainberries.co/wp-content/uploads/2025/05/7-1-391x250.jpg","fqdn":"img-cdn.brainberries.co","domain":"brainberries.co","tld":"co"},"ip":{"addr":"104.18.35.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:22.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brainberries.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 10:20:19 GMT","end":"Sat, 11 Apr 2026 11:20:17 GMT"},"fingerprint":{"sha1":"05:61:82:30:F4:36:6E:56:12:F3:B8:9F:55:F8:14:60:19:A4:53:13","sha256":"76:4D:4D:CE:AA:A8:6B:23:B0:61:25:EE:58:46:71:02:D5:F7:81:74:68:CC:A3:73:19:14:32:BF:34:DB:7D:47"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/7-1-391x250.jpg HTTP/1.1\r\nHost: img-cdn.brainberries.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25730\r\ncf-ray: 9bc50b01b8bd56c7-OSL\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: degrade=85, origSize=28302, status=webp_bigger\r\ncache: MISS\r\netag: \"32311006d021dd1b1619fcbdd5ef6e2d\"\r\nexpires: Mon, 11 Jan 2027 14:18:22 GMT\r\nlast-modified: Tue, 06 May 2025 13:02:44 GMT\r\ntraceparent: 00-880e87e627a8987556b7960ee74bd671-94c99a0e38cfe633-01\r\nx-amz-id-2: /RpHyZ5qJqWgbzGdEqjIC/OQ/F7uVJ7W87YEoo7onkn9ompb5HHh4D13P7PbWYZyT4D5OC+XNQcnms3wU3Y0UKOEw/nuVpA8\r\nx-amz-request-id: DEGWQZGJ1BEGDXCB\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Hr_eQsJRJ36IERG37DTSkD5NGR12cDxk\r\nx-id: wa2-hw-edge-gc9\r\nx-id-fe: wa2-hw-edge-gc9\r\ncf-cache-status: HIT\r\nage: 76784\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25730,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 391x250, components 3","md5":"c0cc33f0c90bbe2aa588ab53ea08b2c5","sha1":"b1d0dc0cd987f3de5614c42125463be80aa23e91","sha256":"2cd92a1e4e9162e39148f6199ebff4891fd05bb6a5a86c82c7819e7ac708f869","sha512":"a5cd2463103691965f45aa7aeecdcee87acada0c0c69006f67c620f741ca3c2aea927ba387b0b5f099ac2cd741905b551ccb94304b7269af939366201cac8f48","ssdeep":"768:tZv9A1SyFxOr4O7ZSbwfWaVjEAOY3M0u9/ym69RBCohf:tQvFQB7cb/aPOY3Ju9Vot","tlshash":"cdc2e16595cc6287efc25f27aeeeef2a331d905912ca0bb00f104ed2dba94820751137","first_seen":"2025-06-13T17:52:28.825934Z","last_seen":"2026-02-03T13:52:25.918092Z","times_seen":8,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":104,"dns":12,"connect":1,"send":0,"wait":13,"receive":1,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-cdn.brainberries.co/wp-content/uploads/2025/05/Wyatt-Russell-Toughest-Life-Ordeals-4-391x250.png","fqdn":"img-cdn.brainberries.co","domain":"brainberries.co","tld":"co"},"ip":{"addr":"104.18.35.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:22.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brainberries.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 10:20:19 GMT","end":"Sat, 11 Apr 2026 11:20:17 GMT"},"fingerprint":{"sha1":"05:61:82:30:F4:36:6E:56:12:F3:B8:9F:55:F8:14:60:19:A4:53:13","sha256":"76:4D:4D:CE:AA:A8:6B:23:B0:61:25:EE:58:46:71:02:D5:F7:81:74:68:CC:A3:73:19:14:32:BF:34:DB:7D:47"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/Wyatt-Russell-Toughest-Life-Ordeals-4-391x250.png HTTP/1.1\r\nHost: img-cdn.brainberries.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 132902\r\ncf-ray: 9bc50b01b8c756c7-OSL\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=203812\r\ncontent-disposition: inline; filename=\"Wyatt-Russell-Toughest-Life-Ordeals-4-391x250.webp\"\r\nvary: Accept\r\ncache: MISS\r\netag: \"ef7de39fc09e700f02cdabbf66c60e12\"\r\nexpires: Mon, 11 Jan 2027 14:18:22 GMT\r\nlast-modified: Thu, 01 May 2025 15:13:03 GMT\r\ntraceparent: 00-1975bdf566bc10b83cb67ea548d6997c-adb65e45e70f83c4-01\r\nx-amz-id-2: LM3DW/VApwkdp3QjW1P3KusPnhTfwLDuOAYDHuM+AvPdZTBuRzBQRJQnwu2SfE2ELyPs8bhuqNCvJVMo0Dn7lKUUoHuxhFZH\r\nx-amz-request-id: DEGTHXT3CHDJG7E0\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: _pRuCmVY69pizv2kv3VNBeGKPVTDtaR8\r\nx-id: fr5-hw-edge-gc57\r\nx-id-fe: fr5-hw-edge-gc57\r\ncf-cache-status: HIT\r\nage: 76784\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":132902,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2c86eb6142348c5b15625f160451baa4","sha1":"e2c19371f48dd726e2deea407d501cad4d6cf74a","sha256":"2ae2ac011f2d053d953ffaa1895e0e8db48c5df8e4089bb2d14880bbc5af0a7b","sha512":"526180f72406908c0272d75c2142b257153d033f976912efe6c6da0355f072a9ebb3cb4dcd1590929da7cab6405fb67ad71f35525ee3bce948ab208e5edb2952","ssdeep":"3072:5orY/GWvCdTQ1ebwhJ5lKh4uAKDDN1M1LxNCWDlSxTm:5T/GVZfwhJ58hdN//yCqYa","tlshash":"cad3135c6da5b1904dc0b1f2ec69b42f5c3ef4742f4d58ec467d48202bcbe2e694ae98","first_seen":"2025-06-13T17:52:28.836712Z","last_seen":"2026-02-03T13:52:25.896224Z","times_seen":8,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":102,"dns":11,"connect":1,"send":0,"wait":13,"receive":4,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-cdn.brainberries.co/wp-content/uploads/2025/04/1-1-391x250.png","fqdn":"img-cdn.brainberries.co","domain":"brainberries.co","tld":"co"},"ip":{"addr":"104.18.35.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:22.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brainberries.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 10:20:19 GMT","end":"Sat, 11 Apr 2026 11:20:17 GMT"},"fingerprint":{"sha1":"05:61:82:30:F4:36:6E:56:12:F3:B8:9F:55:F8:14:60:19:A4:53:13","sha256":"76:4D:4D:CE:AA:A8:6B:23:B0:61:25:EE:58:46:71:02:D5:F7:81:74:68:CC:A3:73:19:14:32:BF:34:DB:7D:47"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/1-1-391x250.png HTTP/1.1\r\nHost: img-cdn.brainberries.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 112748\r\ncf-ray: 9bc50b01587c56c7-OSL\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=178450\r\ncontent-disposition: inline; filename=\"1-1-391x250.webp\"\r\nvary: Accept\r\ncache: HIT\r\netag: \"7970e42e0698926ab3d12485b34bbc88\"\r\nexpires: Mon, 11 Jan 2027 14:18:22 GMT\r\nlast-modified: Tue, 29 Apr 2025 15:24:20 GMT\r\ntraceparent: 00-7f6bafbd2dc73659d7f2a9afc2211d23-e2109d1561520cec-01\r\nx-amz-id-2: HPtTzgjKJACB+jkx/gl4V5MMc9VkUbQAijb4WslEg95tX3A1jkPY54gquSp5DKhtSubzfpCOp+Z6LTr9a2h7aEQImJYL+lAD4ushJu8FmpQ=\r\nx-amz-request-id: HPBR9G5BPEEWAN2J\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: _ZZA1dPJ9HyIyBjmxBkAVGVmjB.Hcg.7\r\nx-cached-since: 2025-12-01T07:18:42+00:00\r\nx-id: fr5-hw-edge-gc32\r\nx-id-fe: fr5-hw-edge-gc32\r\ncf-cache-status: HIT\r\nage: 76781\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112748,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5edfe9f90a480ba4acd004d47fbad2da","sha1":"b11ead0c233bd11819082dba4a17044841684242","sha256":"61d23776142a0fdb828a7f0ac81903ea4ff908410508cbcd3abf153a1dc2086a","sha512":"99453ebad12ccadf17ebe663100fe002f4ba67ddc1e4cf4e259e637c65bf569960766c4fc2b77f8d1d5172ed314094ba31bd9f80276bb5139e1f1baf8d44d0a1","ssdeep":"3072:l5SdmbQ2NHKrwgBFHjAzHYtnc1cvUUVC1elGMl9:jSdwQ2NHKcQR24tncmMUVCun","tlshash":"4eb31295ee073820e4eb6f8f7636b5034642e0bdf1e542aeb227b726380a89556714a1","first_seen":"2025-06-13T17:52:28.854686Z","last_seen":"2026-02-03T13:52:25.910282Z","times_seen":8,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":35,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/consent/eb7bb1be-7a36-4a6d-8fc7-c35fa68063c5/ee7acaff-d492-4fc9-b394-4cba90619e94/en.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:22.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /consent/eb7bb1be-7a36-4a6d-8fc7-c35fa68063c5/ee7acaff-d492-4fc9-b394-4cba90619e94/en.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ploynest.com/\r\nOrigin: https://ploynest.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:22 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncf-ray: 9bc50b041a148be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 61669\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\netag: 0x8DCF272A1124ACA\r\nexpires: Mon, 12 Jan 2026 14:18:22 GMT\r\nlast-modified: Tue, 22 Oct 2024 08:22:12 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding, X-OneTrust-IsBot\r\ncontent-md5: 2B7LqrvNbbBz5UyGMfsQXw==\r\ncross-origin-resource-policy: cross-origin, cross-origin\r\nx-content-type-options: nosniff\r\nx-onetrust-isbot: false\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: c2b6dbff-d01e-0027-7fb4-ef09c3000000\r\nx-ms-version: 2009-09-19\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":246663,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d2d3996efdc314c6a1783be9c7a3dc98","sha1":"e531274024dcc217142f902076f84ddb702ee452","sha256":"ff6a847942f2b4aa879f49122e6b7c170ce83be86b70c66bc1347e9e39562e24","sha512":"046a82d65649563084e06806c6dd17e01bb058914196bc16b9c24d711c650c5561183bccf52ed1e72fd9d306841d78e3d0569aacdfb36e351fa77e0deb5b7a34","ssdeep":"3072:7EzcAYTuCRcUcdC1he7VL0c6RNiKiSaY817B:7ExC8C1hsbUaYs7B","tlshash":"b934e806cba8b5f80b0f029518a27f8de33d1295e760de59ac1c0e3e42537e955b72de","first_seen":"2025-06-13T17:52:28.812104Z","last_seen":"2026-03-30T01:22:02.535718Z","times_seen":13,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-11T14:18:20.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ploynest.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 19:35:55 GMT","end":"Sun, 08 Feb 2026 19:35:54 GMT"},"fingerprint":{"sha1":"0B:65:AF:FF:BB:00:8E:94:A8:F2:6F:8B:07:D8:52:90:98:66:BD:75","sha256":"ED:61:DE:41:84:A6:60:ED:9F:20:B6:65:A3:63:D7:EE:70:DC:B8:C0:01:06:53:0B:2D:66:E9:B8:66:B3:E5:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ploynest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 14:18:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: pll_language=en; expires=Mon, 11 Jan 2027 05:44:21 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax\r\nlink: \u003chttps://ploynest.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nstrict-transport-security: max-age=15768000; includeSubdomains; preload\r\nx-content-type-options: nosniff\r\nx-fastcgi-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery Migrate:3.3.2","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Ivory Search:5.5.6","description":"Ivory Search is a WordPress search plugin that improves WordPress search by providing advanced options to extend search or exclude specific content from search.","website":"https://ivorysearch.com","common_platform_enumeration":"","icon":"ivory_searc.png","categories":["WordPress plugins"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"OneTrust","description":"OneTrust is a cloud-based data privacy management compliance platform.","website":"https://www.onetrust.com","common_platform_enumeration":"","icon":"OneTrust.svg","categories":["Cookie compliance"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MGID","description":"MGID is a programmatic advertising platform frequently used by misinformation websites.","website":"https://www.mgid.com","common_platform_enumeration":"","icon":"MGID.png","categories":["Advertising"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress:5.7.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"AOS:2.3.1","description":"JavaScript library to animate elements on your page as you scroll.","website":"https://michalsnik.github.io/aos/","common_platform_enumeration":"","icon":"AOS.svg","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":41975,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1820)","md5":"be31001f3224bbb1be4b30156dd01aca","sha1":"c460c8e6c0ecf3d523b19b4d92c9874ebc673ebe","sha256":"94e153c103fce2791a40b6c6c9f78ecb4ad9db71a06c05332d2294dce82e74e5","sha512":"eb67c40db8677ba6588ddcb9f40201b7de850334ce350a01c80e3cb00a0064bcb348db4bd286f767ecbf43764479c6d850c8796b3300ccbbfebe25287e1ed9c8","ssdeep":"768:Y8D8lm8k6iFGG7Q25THr6xheI4G+cGNuu7n7WrLCizAesMsoMkC9NN8zZzZeIEPb:Ym8lm8k6iFGG7Q25TL6xheI4G+cGNuuv","tlshash":"03132af3d54d1e3a136913d9a8163e2cfcb3440bcb8188a4e2fdd79da791ed19c22199","first_seen":"2026-01-11T14:18:50.542862Z","last_seen":"2026-01-11T14:18:50.542862Z","times_seen":1,"resource_available":false,"data":null}},"time_used":790,"timings":{"blocked":297,"dns":6,"connect":93,"send":0,"wait":186,"receive":0,"ssl":205},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ploynest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:21.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /aos@2.3.1/dist/aos.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:21 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\ncf-ray: 9bc50afcba96723c-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 1926151\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 11 Jan 2027 14:18:21 GMT\r\nlast-modified: Sun, 26 Oct 2025 23:27:43 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:GqiEX9BuR1rv5zPU5Vs2qS/NSHl1BJyBcjQYJ6ycwD4=:\r\nfly-request-id: 01K8HDJRGH614A319Y1CPHT2M4-fra\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-04-19T02:42:47.092062Z","times_seen":32422,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":35,"dns":2,"connect":7,"send":0,"wait":20,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/wp-content/plugins/add-search-to-menu/public/js/ivory-search.min.js?ver=5.5.6","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:21.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ploynest.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 19:35:55 GMT","end":"Sun, 08 Feb 2026 19:35:54 GMT"},"fingerprint":{"sha1":"0B:65:AF:FF:BB:00:8E:94:A8:F2:6F:8B:07:D8:52:90:98:66:BD:75","sha256":"ED:61:DE:41:84:A6:60:ED:9F:20:B6:65:A3:63:D7:EE:70:DC:B8:C0:01:06:53:0B:2D:66:E9:B8:66:B3:E5:DD"}}},"request":{"raw":"GET /wp-content/plugins/add-search-to-menu/public/js/ivory-search.min.js?ver=5.5.6 HTTP/1.1\r\nHost: ploynest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 14:18:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4580\r\nlast-modified: Tue, 23 Jul 2024 18:48:36 GMT\r\netag: \"669ffb04-11e4\"\r\nexpires: Tue, 10 Feb 2026 14:18:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=15768000; includeSubdomains; preload\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4580,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4580), with no line terminators","md5":"ce428a87a021e7b3f2eaf54cf42acdd8","sha1":"61b07035596e0737e5bf55fb13be37b29124511a","sha256":"66d0c8cbacc09ad8746e64ad28d887186d1f060f04c388c2f1102ee346120a8c","sha512":"f39588285cec38eccb0fb7bf74b37750a4b52fc9a45753d691c38be2c312c4bdc5f6fe5454cb94ecb0cccef00cab519bdc143366ddf8cb683050cd4c48fbdcf2","ssdeep":"96:3UqZsOXiCI7XaeAgFltFLNCcVuPQH+RFLZUNBLmLmR9qXo:2lxoRxZA98g","tlshash":"c291fee9d084aecb01fa07f932f73542931a0822571d0f61b4af803c9daed89417ab7d","first_seen":"2023-10-29T19:39:38Z","last_seen":"2026-04-19T02:22:30.008329Z","times_seen":2859,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ploynest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/wp-includes/js/wp-embed.min.js?ver=5.7.2","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:21.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ploynest.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 19:35:55 GMT","end":"Sun, 08 Feb 2026 19:35:54 GMT"},"fingerprint":{"sha1":"0B:65:AF:FF:BB:00:8E:94:A8:F2:6F:8B:07:D8:52:90:98:66:BD:75","sha256":"ED:61:DE:41:84:A6:60:ED:9F:20:B6:65:A3:63:D7:EE:70:DC:B8:C0:01:06:53:0B:2D:66:E9:B8:66:B3:E5:DD"}}},"request":{"raw":"GET /wp-includes/js/wp-embed.min.js?ver=5.7.2 HTTP/1.1\r\nHost: ploynest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 14:18:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1426\r\nlast-modified: Fri, 11 Jun 2021 10:11:56 GMT\r\netag: \"60c336ec-592\"\r\nexpires: Tue, 10 Feb 2026 14:18:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=15768000; includeSubdomains; preload\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1426,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1391)","md5":"905225d5711b559d3092387d5ffbedbd","sha1":"6f6c39075263bafb9e8c10f1b34a1a0f7ee03c9d","sha256":"5be614bce53f767993a5f5f14a6badd6aae6bf3af7cbdbf4d31520de49e27991","sha512":"5ad34cf11acf45ae256b2641496be13939cd5e0212810c43ab20cadbb313a1d99cb3a451148e160d80f1f952a8514480c2953bc6ca0c4697a466a01e1c3d5f8d","ssdeep":"","tlshash":"5c21522a3228943758db11d3bc4535cad2e11fed681215d20e38cc49eae4e935969fe0","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-04-19T00:33:14.45622Z","times_seen":4675,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ploynest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/consent/eb7bb1be-7a36-4a6d-8fc7-c35fa68063c5/eb7bb1be-7a36-4a6d-8fc7-c35fa68063c5.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:21.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /consent/eb7bb1be-7a36-4a6d-8fc7-c35fa68063c5/eb7bb1be-7a36-4a6d-8fc7-c35fa68063c5.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ploynest.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:21 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncf-ray: 9bc50afe891e8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 66879\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\netag: 0x8DCF2729FC9FC45\r\nexpires: Mon, 12 Jan 2026 14:18:21 GMT\r\nlast-modified: Tue, 22 Oct 2024 08:22:10 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding, X-OneTrust-IsBot\r\ncontent-md5: dMcVUGeLaaWBd1uB/4g+vQ==\r\ncross-origin-resource-policy: cross-origin, cross-origin\r\nx-content-type-options: nosniff\r\nx-onetrust-isbot: false\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: 7000e5b9-601e-0035-0116-f73ddf000000\r\nx-ms-version: 2009-09-19\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5348,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c3aa95a93e4057411ad18da60d48429e","sha1":"c9c0c3ace27ae8d7f3b3ea109fd51a62c1bd943b","sha256":"1739d431bc9cc867c84e7d8b2af1b028a9d016a2211fec21d3364c9fa8b3a769","sha512":"9ac564f38f52bae37738eab3331f521e10f5549eb12d684d07403bec2de371e2c819bb624a4db63467a694334c963ad9cd0e3ff485c888ff8695df97270e0edb","ssdeep":"96:npyIC40wgwkNUOC9CBHxYa6Ayytb4Gjj2rjujJjFZZ2m8A:FlgXCOC9M6vyB4y+6JpOA","tlshash":"5db1521da70c947dc79d8398d02dbd0d8bde283b12897c14d48e4e2c179bbf728a5a67","first_seen":"2025-06-13T17:52:28.795731Z","last_seen":"2026-03-30T01:22:02.55113Z","times_seen":13,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":9,"dns":1,"connect":1,"send":0,"wait":19,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/wp-includes/js/wp-emoji-release.min.js?ver=5.7.2","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:22.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ploynest.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 19:35:55 GMT","end":"Sun, 08 Feb 2026 19:35:54 GMT"},"fingerprint":{"sha1":"0B:65:AF:FF:BB:00:8E:94:A8:F2:6F:8B:07:D8:52:90:98:66:BD:75","sha256":"ED:61:DE:41:84:A6:60:ED:9F:20:B6:65:A3:63:D7:EE:70:DC:B8:C0:01:06:53:0B:2D:66:E9:B8:66:B3:E5:DD"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=5.7.2 HTTP/1.1\r\nHost: ploynest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 14:18:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 14229\r\nlast-modified: Fri, 11 Jun 2021 10:11:56 GMT\r\netag: \"60c336ec-3795\"\r\nexpires: Tue, 10 Feb 2026 14:18:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=15768000; includeSubdomains; preload\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14229,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11272)","md5":"eaa8641bcda2371f4024a71fbb67de3b","sha1":"0e46c39d3821683c856605a82254115f9a6a7792","sha256":"0c5f584d1ea2c3313dc8c55824c2a572d3cf2eae87c5ca62a58e598aec9ddb5c","sha512":"82b6b84d0a7a28d6a8b013ee41eef27e1df8c1fca396dfb4ed6d01249e12479230cb2d3683a56eb80651d22046c74506d194fa34b05e2a8ad8a08ae297f79aeb","ssdeep":"384:inJ5kNuPTbUUh31//bEP+XgA3FqC2effJmp3:iJ5aUUUh31//YWXgA7ffC3","tlshash":"ad52ce9b732b5f9b743e37d78d96cf4ec5da55832580e078dafeb68129a00598374c80","first_seen":"2023-03-07T01:02:17Z","last_seen":"2026-04-19T01:31:07.158418Z","times_seen":9570,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ploynest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geolocation.onetrust.com/cookieconsentpub/v1/geo/location","fqdn":"geolocation.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"172.64.155.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:22.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geolocation.onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 20:56:58 GMT","end":"Thu, 26 Feb 2026 21:56:54 GMT"},"fingerprint":{"sha1":"72:40:94:AD:74:7A:94:28:52:42:B3:BF:D9:FE:79:24:5E:BD:71:33","sha256":"36:66:D7:CB:F1:03:82:23:59:92:38:B0:AF:A0:12:71:63:49:13:A3:23:97:75:36:98:A3:85:A4:31:06:9C:E1"}}},"request":{"raw":"GET /cookieconsentpub/v1/geo/location HTTP/1.1\r\nHost: geolocation.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ploynest.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 14:18:22 GMT\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, OPTIONS\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9bc50b000bf15691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8d896eded71ee5fc863cf1ec1485da75","sha1":"b36c99cd02aa88e94a55b028381d9c5cb61cbbef","sha256":"3dddf5b1f3c0e76d359e7fe585b61f721980981a612e17d7ebfedfc3e6fc3b3d","sha512":"a216a2ec987ed8aa509d4bf88075844374819f15767190c2f9fc1b7dc05436cb33ac0fa3466bd207bd3104e455cd3c72fb8622dd0759ab64f197ac216850382e","ssdeep":"","tlshash":"3da0025864599d1d9dfd824a530e726a1244a309828751c6c6c9ed75c5812c9b05c480","first_seen":"2025-06-02T14:25:58.002399Z","last_seen":"2026-04-19T02:36:31.324456Z","times_seen":113099,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":24,"dns":0,"connect":1,"send":0,"wait":19,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/wp-content/themes/best-minimalist/assets/fonts/minimalist.woff","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:22.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ploynest.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 19:35:55 GMT","end":"Sun, 08 Feb 2026 19:35:54 GMT"},"fingerprint":{"sha1":"0B:65:AF:FF:BB:00:8E:94:A8:F2:6F:8B:07:D8:52:90:98:66:BD:75","sha256":"ED:61:DE:41:84:A6:60:ED:9F:20:B6:65:A3:63:D7:EE:70:DC:B8:C0:01:06:53:0B:2D:66:E9:B8:66:B3:E5:DD"}}},"request":{"raw":"GET /wp-content/themes/best-minimalist/assets/fonts/minimalist.woff HTTP/1.1\r\nHost: ploynest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/wp-content/themes/best-minimalist/assets/css/minimalist.css?ver=5.7.2\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 14:18:22 GMT\r\ncontent-type: font/woff\r\ncontent-length: 2012\r\nlast-modified: Thu, 02 Oct 2025 10:11:22 GMT\r\netag: \"68de4fca-7dc\"\r\nstrict-transport-security: max-age=15768000; includeSubdomains; preload\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2012,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 2012, version 1.0","md5":"583dcc3a8ac08fe73ebabebb45aee305","sha1":"3b2d6d010fc15a5bdf6580e9d6e72e4a6bdb0af9","sha256":"f39412a6497c56b4dde8cda938493ff22bac5130719715fa58b395a3fa115bf0","sha512":"f92ef65888ba62896d9bde67ad7c7217c9d4a05af5938232d453081c4f0481fba9f6ee5bd86b91f9f67669d4b485d130549659125e605ed494d54cca4aaca3e8","ssdeep":"","tlshash":"ea41e8c49c91e2e9e1421772772284b87ba6004c0832bd9b492eb889f96f4dfd5e0537","first_seen":"2023-05-26T01:46:37Z","last_seen":"2026-04-17T16:40:39.562398Z","times_seen":79,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ploynest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ploynest.com/wp-content/themes/best-minimalist/assets/images/thumbnail-missing.png","fqdn":"ploynest.com","domain":"ploynest.com","tld":"com"},"ip":{"addr":"35.172.72.9","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ploynest.com/","date":"2026-01-11T14:18:21.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ploynest.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 19:35:55 GMT","end":"Sun, 08 Feb 2026 19:35:54 GMT"},"fingerprint":{"sha1":"0B:65:AF:FF:BB:00:8E:94:A8:F2:6F:8B:07:D8:52:90:98:66:BD:75","sha256":"ED:61:DE:41:84:A6:60:ED:9F:20:B6:65:A3:63:D7:EE:70:DC:B8:C0:01:06:53:0B:2D:66:E9:B8:66:B3:E5:DD"}}},"request":{"raw":"GET /wp-content/themes/best-minimalist/assets/images/thumbnail-missing.png HTTP/1.1\r\nHost: ploynest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ploynest.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 14:18:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 70585\r\nlast-modified: Thu, 02 Oct 2025 10:11:22 GMT\r\netag: \"68de4fca-113b9\"\r\nexpires: Tue, 10 Feb 2026 14:18:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=15768000; includeSubdomains; preload\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 391 x 250, 8-bit colormap, non-interlaced","md5":"4f594949167660db84540835e6cbe4cd","sha1":"09f6494c20bd08f2555b2e22ea95b64ef4219812","sha256":"05c6b9b5918876984268a5eaaaeed50704d0ac239b63f6db6a9584858b5d5851","sha512":"c8ad6e00d44b38a4451241f330a6ef86c6091de7c3a3813e910edd64b21bf5073e5ecf71118864e48e46d48d05bcbf431113b7464af6b562d7dba8bbd0a8638e","ssdeep":"1536:nkT03RSbdZ7a7qhTPKn1F6HvK0InmvvU37:nSaRpqhEF6Hv1WavUL","tlshash":"646302d379f94e6c84568fc76df548a2a8b46c004b1df0e31066aaf93147b4ac997bf0","first_seen":"2025-10-08T10:39:00.831418Z","last_seen":"2026-03-30T01:22:02.545488Z","times_seen":11,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ploynest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}
