{"report_id":"03ddb709-81ac-4d9d-8f08-d734dff8714a","version":6,"status":"done","tags":[],"date":"2025-09-27T14:19:49Z","url":{"schema":"http","addr":"carolinplegge.shop/","fqdn":"carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"104.21.8.77","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.carolinplegge.shop/","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"title":"Carolin Plegge - Women's Clothing \u0026 Bodywear"},"submit":{"url":{"schema":"http","addr":"carolinplegge.shop/","fqdn":"carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"104.21.8.77","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-01T14:19:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-21T22:11:31.014241Z","alert_count":0,"request_count":1,"received_data":49367,"sent_data":562,"comment":"","tags":null,"fingerprints":null},{"fqdn":"carolinplegge.shop","ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-09-27T14:19:49.407456Z","last_seen":"2025-09-27T14:19:49.407456Z","alert_count":2,"request_count":1,"received_data":33617,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-21T22:11:31.798564Z","alert_count":0,"request_count":1,"received_data":3241,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.carolinplegge.shop","ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":41,"request_count":21,"received_data":675028,"sent_data":11334,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.carolinplegge.shop/","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef1856884b447d684b3969f4360cca09","sha1":"262143b8321d67bc9cb97b56a72553bdcabe8d5f","sha256":"8e150abab7d3bb1ef11f1fb7147574d80adb210b7240558ee35b718cb13becb8","sha512":"2943538887d3c2247e77ee8f1b6b6506fc5246db5e3ef461b4d762dd3bc7bf2a88e68a131c20cda3098e1a6c46bdee80e1b7aa20dc108674ba5ee7ee669e4708","ssdeep":"","tlshash":"b331d86687b7309d8817303b5f9f21486269944b454bce893e1c9094af8086c7fb7fbd","size":1475,"data":"","first_seen":"2025-05-05T14:32:10.143255Z","last_seen":"2026-04-04T06:33:40.808458Z","times_seen":1803,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.carolinplegge.shop/js/all.js?ver=1","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d969ea2b9ecd39377d2688699a7b2e28","sha1":"65f5d904cf89c82e6bd4efa3a24bb326c399a8f9","sha256":"526f26c1138df8e3ea782fe0fbd8316c1a9b1514ff1584527496f063bab77074","sha512":"a716a70b06cc1ec83b6d34c6c43227fd2c9adc937b3ab6dc5122506b9a4899f3c34d2ab9f911bc1b0f436176c048486aab9526f192bc28d7fe0cd76a78b543c3","ssdeep":"1536:AU5ARWpII7hpjypU9mmmfkUQ4BI6CysAGq:AU5ARdkUQsH","tlshash":"49430249bafb1075821b606f5f8f2248b638801f4846d95d7c6cc2d89fd0a3416eaff9","size":57528,"data":"","first_seen":"2025-05-05T14:32:10.136373Z","last_seen":"2026-04-04T06:33:40.786327Z","times_seen":1852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.carolinplegge.shop/css/font-awesome-4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.carolinplegge.shop/","date":"2025-09-27T14:19:26.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carolinplegge.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 07:25:35 GMT","end":"Wed, 05 Nov 2025 08:24:10 GMT"},"fingerprint":{"sha1":"8F:52:94:19:75:AF:BC:C7:72:2E:17:7A:3D:9C:2D:17:91:CC:34:94","sha256":"B0:D4:92:44:EC:55:E5:9D:F7:37:FC:43:C4:DD:4A:7F:3B:BB:6E:A3:E1:A6:64:7E:7D:7B:B8:3B:12:EA:42:C8"}}},"request":{"raw":"GET /css/font-awesome-4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: www.carolinplegge.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.carolinplegge.shop/css/font-awesome-4.7.0/css/font-awesome.css?ver=1\r\nCookie: PHPSESSID=ma4uj125pgeggm3jslnkm9i1b9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 14:19:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\nlast-modified: Mon, 21 Apr 2025 15:56:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68066abb-12d68\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bnVNdnzWhn20CNqOvVOy8cUGomB6cK%2BSVVUBpBuFUQodpBW8GlxYunBAX%2BSoO5FCLuf63wOhddO64fnE2RTAdjW%2BwvqvKgN9ysDuEinPQplvebB9\"}]}\r\nvary: accept-encoding\r\ncf-ray: 985ba2d47ae25690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-05T06:47:48.7842Z","times_seen":411961,"resource_available":true,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":261,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.carolinplegge.shop/uploads/p/25/06/women-wolford-panties-skin-panty-nude_x350.jpg","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.carolinplegge.shop/","date":"2025-09-27T14:19:26.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carolinplegge.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 07:25:35 GMT","end":"Wed, 05 Nov 2025 08:24:10 GMT"},"fingerprint":{"sha1":"8F:52:94:19:75:AF:BC:C7:72:2E:17:7A:3D:9C:2D:17:91:CC:34:94","sha256":"B0:D4:92:44:EC:55:E5:9D:F7:37:FC:43:C4:DD:4A:7F:3B:BB:6E:A3:E1:A6:64:7E:7D:7B:B8:3B:12:EA:42:C8"}}},"request":{"raw":"GET /uploads/p/25/06/women-wolford-panties-skin-panty-nude_x350.jpg HTTP/1.1\r\nHost: www.carolinplegge.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.carolinplegge.shop/\r\nCookie: PHPSESSID=ma4uj125pgeggm3jslnkm9i1b9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 14:19:26 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V8WbAodafdRitEwP1T0QQDvsaXnFucIq5%2B2zFEXwQ6s%2B4uY5IzwX8iP19krnxBxXAsVDvFeEPpLGqFUKoC4jP3LP%2F0PTkTKK0345imgnuQpqiJnR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 04 Jun 2025 21:16:56 GMT\r\netag: W/\"6840b7c8-218c\"\r\nexpires: Mon, 27 Oct 2025 14:19:26 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 985ba2d1bab55690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8588,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 350x467, components 3","md5":"9417845fd3540ba5f44673d5dbd33c18","sha1":"2d4e86af6b8325a3cc82dc94ffb7a09833537c64","sha256":"d453e23d43ffdc23bdb5cb99f80c676219f32cec38e341393c3d7914c1b89821","sha512":"167292d9883e563081e3c9ec569e121060a55c8d5e464eda4ba63e270723a1eeaaf44d1daae4b110a21d81c980959b686cb111110f6136eec8dcd003bdf898ae","ssdeep":"192:GQTJEIYkGkWmLKd+aWAA8ota8RsmGKOWP6ElvMUZeRFLyepL:GyKZjqFROWP6ElkUYRFHpL","tlshash":"bb0208476d14cb83d72853e8be474da99f591b0ce9853afe82719f8b3c20db6188c16d","first_seen":"2025-09-27T14:19:54.533145Z","last_seen":"2025-09-27T14:19:54.533145Z","times_seen":1,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.carolinplegge.shop/","date":"2025-09-27T14:19:26.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.carolinplegge.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Sep 2025 17:22:06 GMT\r\nexpires: Thu, 24 Sep 2026 17:22:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 248240\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-05T06:48:43.373279Z","times_seen":133761,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":80,"dns":3,"connect":15,"send":0,"wait":16,"receive":20,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.carolinplegge.shop/uploads/p/25/06/women-wolford-longsleeve-bodies-berlin-body-saba_x150.jpg","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.carolinplegge.shop/","date":"2025-09-27T14:19:26.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carolinplegge.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 07:25:35 GMT","end":"Wed, 05 Nov 2025 08:24:10 GMT"},"fingerprint":{"sha1":"8F:52:94:19:75:AF:BC:C7:72:2E:17:7A:3D:9C:2D:17:91:CC:34:94","sha256":"B0:D4:92:44:EC:55:E5:9D:F7:37:FC:43:C4:DD:4A:7F:3B:BB:6E:A3:E1:A6:64:7E:7D:7B:B8:3B:12:EA:42:C8"}}},"request":{"raw":"GET /uploads/p/25/06/women-wolford-longsleeve-bodies-berlin-body-saba_x150.jpg HTTP/1.1\r\nHost: www.carolinplegge.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.carolinplegge.shop/\r\nCookie: PHPSESSID=ma4uj125pgeggm3jslnkm9i1b9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 14:19:26 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oFKmaMSxirHfm2vPlWb%2Fu2hKRBtzwfPk0vGgyTdnmNrBWucx6EL4CxO0PH797j8Zl70P7UF3iDuW4oHOfYqsREdmsonNeFV%2Flg53kfXYOf67xawf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 04 Jun 2025 21:24:12 GMT\r\netag: W/\"6840b97c-cdc\"\r\nexpires: Mon, 27 Oct 2025 14:19:26 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 985ba2d1cab95690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3292,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 150x200, components 3","md5":"d0f044d1db4f141c34d5056597b770db","sha1":"bf87faf2bd319d6f183b6bab889e051276f9def1","sha256":"c2e378c0dbcefa01f603d306ba329f5e28feaea5d79e9b445382fb09a8ed6feb","sha512":"3c4f10dbfbcf30405bc0e36c2fac53adc3823a2fbd933ed5fedb9ab565b23eb933ed93aab2bd42c506b636d2d65a51c3ae700be6ac5fe7eee606c02079e90f7e","ssdeep":"","tlshash":"e3615c447f2971d8eb9683b28185082ac1c5bed19815f93d62b096ead9a0cfcc7487fc","first_seen":"2025-09-27T14:19:54.535213Z","last_seen":"2025-09-27T14:19:54.535213Z","times_seen":1,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.carolinplegge.shop/uploads/25/06/wolford-icon.png","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.carolinplegge.shop/","date":"2025-09-27T14:19:27.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carolinplegge.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 07:25:35 GMT","end":"Wed, 05 Nov 2025 08:24:10 GMT"},"fingerprint":{"sha1":"8F:52:94:19:75:AF:BC:C7:72:2E:17:7A:3D:9C:2D:17:91:CC:34:94","sha256":"B0:D4:92:44:EC:55:E5:9D:F7:37:FC:43:C4:DD:4A:7F:3B:BB:6E:A3:E1:A6:64:7E:7D:7B:B8:3B:12:EA:42:C8"}}},"request":{"raw":"GET /uploads/25/06/wolford-icon.png HTTP/1.1\r\nHost: www.carolinplegge.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.carolinplegge.shop/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ma4uj125pgeggm3jslnkm9i1b9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 14:19:27 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T4n2qoyFiBMoViq6QR64a00Z4oecFEA5tt5vJUbZXF1Id93Hf%2BhpwCjfsWnIy%2FasZ4W5BsUBUCHVbQiIGKBu3COwKGq%2FaCDTPLk2lpgNU0Vypt0O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 05 Jun 2025 08:05:30 GMT\r\netag: W/\"68414fca-771\"\r\nexpires: Sat, 25 Oct 2025 18:18:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 985ba2d7fb0d5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1905,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced","md5":"cdd7719c70ed15338db77cff3ef57fa7","sha1":"18264bebf4b041a361dfdd7b006fc02c0dc7098c","sha256":"b0e28a6910600b74fb56ab91d955990adbe15837727bd9f03ae0f86f9eb88001","sha512":"cd1d8746fd77aad68ae3882ebc5405cdb991ea551a50517d9eae40cb3bebb02364d4391bf70608c26437d2497ca28b3f61bd0b8ee32add04a00b21c9c7e09f3f","ssdeep":"","tlshash":"5941c80a76465d14a74efb69acf642e30b778ac08e50a888adddc51678610f7dc495c3","first_seen":"2025-06-12T11:48:36.947966Z","last_seen":"2025-09-27T14:19:54.537033Z","times_seen":4,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.carolinplegge.shop/superb_ecommerce/css/style.css?ver=1","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.carolinplegge.shop/","date":"2025-09-27T14:19:26.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carolinplegge.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 07:25:35 GMT","end":"Wed, 05 Nov 2025 08:24:10 GMT"},"fingerprint":{"sha1":"8F:52:94:19:75:AF:BC:C7:72:2E:17:7A:3D:9C:2D:17:91:CC:34:94","sha256":"B0:D4:92:44:EC:55:E5:9D:F7:37:FC:43:C4:DD:4A:7F:3B:BB:6E:A3:E1:A6:64:7E:7D:7B:B8:3B:12:EA:42:C8"}}},"request":{"raw":"GET /superb_ecommerce/css/style.css?ver=1 HTTP/1.1\r\nHost: www.carolinplegge.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.carolinplegge.shop/\r\nCookie: PHPSESSID=ma4uj125pgeggm3jslnkm9i1b9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 14:19:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 05 Jun 2025 08:06:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PWIsF2h1yW0caGKYc0UagY1MrgDngYzJEVQOdpUM9y6tOV5tfmAo6WtLQw1%2BGViJyyW%2BajtIoXiUFJ%2FVUvaDvKZOo7%2B7y%2FwNbQ%2BrvQ9pyXPdbH0K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68415002-10f86\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 985ba2d1baac5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69510,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (939)","md5":"29603b822b29659ee75e3359e4c9104b","sha1":"e27fab3d118b0c4ec33467f961fdf0fdf1afb6db","sha256":"a999d82fcb94263faf6218e93c54d2f0f27f63c633dff25563203beb2a27b108","sha512":"08818eeb0ce9c30743773ee4706495b994f48d07ffc46f30ff03c31136628b2c10e1d52768c02f78019b2246058a1c5d2bc7757120b648cef01a17d513aed0f0","ssdeep":"1536:Cz8vOXT0szaSs1itUVwNl22r+0HIE42tUtK860LC5rd4z+de7a89Dc:CIvOXT0szhs1itUVwN42r+0HII8JLC51","tlshash":"e4635495da731940741bc1685faaa794332c9003950fdd6cbfdc73188f8a6e995a3f8c","first_seen":"2025-05-05T14:32:10.097185Z","last_seen":"2025-11-21T03:56:22.667851Z","times_seen":12,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.carolinplegge.shop/uploads/p/25/06/women-wolford-tights-individual-10-tights-cosmetic_x350.jpg","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.carolinplegge.shop/","date":"2025-09-27T14:19:26.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carolinplegge.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 07:25:35 GMT","end":"Wed, 05 Nov 2025 08:24:10 GMT"},"fingerprint":{"sha1":"8F:52:94:19:75:AF:BC:C7:72:2E:17:7A:3D:9C:2D:17:91:CC:34:94","sha256":"B0:D4:92:44:EC:55:E5:9D:F7:37:FC:43:C4:DD:4A:7F:3B:BB:6E:A3:E1:A6:64:7E:7D:7B:B8:3B:12:EA:42:C8"}}},"request":{"raw":"GET /uploads/p/25/06/women-wolford-tights-individual-10-tights-cosmetic_x350.jpg HTTP/1.1\r\nHost: www.carolinplegge.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.carolinplegge.shop/\r\nCookie: PHPSESSID=ma4uj125pgeggm3jslnkm9i1b9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 14:19:26 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eybqetpt3%2FUWbmZDXeVny5YvT528TUBUmZ1PaueSDs%2FRN5AzsdSM5lgpNFBxmslSSC0fI%2BzqVtsvK5aKZWmpCWyjM86MvN26rRvO%2Bh3t9Z6IUNzB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 04 Jun 2025 21:07:33 GMT\r\netag: W/\"6840b595-20e1\"\r\nexpires: Mon, 27 Oct 2025 14:19:26 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 985ba2d1bab75690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8417,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 350x467, components 3","md5":"3a0bad39e2ff0b93ae0a91c68ea27d2c","sha1":"e1b5c4812d81681ae3bf16c7bf20003593406873","sha256":"ecac3b8fef48e5db966c337673981447f0abea74b79e12f086c5392a2d83edf4","sha512":"64bcf8e6547b79af92af836ee080e30ec5164b739f3b15ff30dc6f50c21f2c4dcc310e6eefb3328110e7efa7e74b28615a8af7d87e90fa0b636f3bb716f05bee","ssdeep":"192:GQTq/6b4lHnhQv/JFBERCo55Fvu6cPxq1mNoDl:GyF4Fe/LBEJC81DDl","tlshash":"f102095b5c04a7929b1987e1be036c955b16070cf9c53af91a138bcf3510fb7d88e15c","first_seen":"2025-09-27T14:19:54.539625Z","last_seen":"2025-09-27T14:19:54.539625Z","times_seen":1,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.carolinplegge.shop/uploads/p/25/06/women-wolford-tights-venus-tights-black-black-1_x350.jpg","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.carolinplegge.shop/","date":"2025-09-27T14:19:26.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carolinplegge.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 07:25:35 GMT","end":"Wed, 05 Nov 2025 08:24:10 GMT"},"fingerprint":{"sha1":"8F:52:94:19:75:AF:BC:C7:72:2E:17:7A:3D:9C:2D:17:91:CC:34:94","sha256":"B0:D4:92:44:EC:55:E5:9D:F7:37:FC:43:C4:DD:4A:7F:3B:BB:6E:A3:E1:A6:64:7E:7D:7B:B8:3B:12:EA:42:C8"}}},"request":{"raw":"GET /uploads/p/25/06/women-wolford-tights-venus-tights-black-black-1_x350.jpg HTTP/1.1\r\nHost: www.carolinplegge.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.carolinplegge.shop/\r\nCookie: PHPSESSID=ma4uj125pgeggm3jslnkm9i1b9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 14:19:26 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WAb3td3RqI3%2Bh4v%2BFcF1SnuqxIRh6y5ClDJsTLgyS8MZuI9ZiaE0Ff6g0mxQfkxxTstf8Z2rE1%2BY51vjhn%2Fh%2FuhsASpNQU4q%2FDvo5RuG3ZSQ0am8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 04 Jun 2025 21:29:35 GMT\r\netag: W/\"6840babf-2780\"\r\nexpires: Mon, 27 Oct 2025 14:19:26 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 985ba2d1cab85690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10112,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 350x467, components 3","md5":"e5296d1a358ee77c285f0b5bc308498c","sha1":"a41d1fad5f601769394eac2ded0f56e90f7fc6f5","sha256":"3c8b6beb5dcdd1f9bc8c400f9286e04962c77503ce7f361fdfb88a5fe8ba09d7","sha512":"ba8d358efeb4db70bb25afa2ef976e370044cab7c14a591d2d0ec0df461d67b523f92346f3d7ad6023200801aa549ad1a954104aaacc3198bf4994964321f36f","ssdeep":"192:GQTDBqZfVkhQkc87r/f/vJIEpZlHK8BtWe81+42uE4z2rR5q:GyDcZfVkhvLqSZlq8vWOxOmR4","tlshash":"f922d717cd089ac39a9987fc7e030d7e675f264da9c137fa05324ed6ae248750c4b81a","first_seen":"2025-09-27T14:19:54.541175Z","last_seen":"2025-09-27T14:19:54.541175Z","times_seen":1,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.carolinplegge.shop/uploads/p/25/06/women-wolford-tops-jackets-cordoba-top-long-sleeves-umber_x350.jpg","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.carolinplegge.shop/","date":"2025-09-27T14:19:26.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carolinplegge.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 07:25:35 GMT","end":"Wed, 05 Nov 2025 08:24:10 GMT"},"fingerprint":{"sha1":"8F:52:94:19:75:AF:BC:C7:72:2E:17:7A:3D:9C:2D:17:91:CC:34:94","sha256":"B0:D4:92:44:EC:55:E5:9D:F7:37:FC:43:C4:DD:4A:7F:3B:BB:6E:A3:E1:A6:64:7E:7D:7B:B8:3B:12:EA:42:C8"}}},"request":{"raw":"GET /uploads/p/25/06/women-wolford-tops-jackets-cordoba-top-long-sleeves-umber_x350.jpg HTTP/1.1\r\nHost: www.carolinplegge.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.carolinplegge.shop/\r\nCookie: PHPSESSID=ma4uj125pgeggm3jslnkm9i1b9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 14:19:26 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSZ8JqqF1ERO0QlTd%2BmAbP4VmQJI7Oq7ppR5tHB8dfPiHjv62pJYpo9xKFKSuTk1GfOb6506aqdfRZ7YtjxIxfiC3MVWUpYe62Zk2yqR07VgzpzA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 04 Jun 2025 21:13:56 GMT\r\netag: W/\"6840b714-253c\"\r\nexpires: Mon, 27 Oct 2025 14:19:26 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 985ba2d1bab15690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9532,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 350x467, components 3","md5":"874142fde9d3fbc63a0bf765b4fbacd5","sha1":"fef4b705b3d1d0f925efceeb81cc5dca426f7025","sha256":"936ed7ae666729c4a19238633d29bcdc7dce5dd6278c8d1ef429290704ef303e","sha512":"02ba1d7b4cebb2d84e234d3c40d3714ee24ece16176bbf35c1b801001044255bf2b087bd5e7c1caa6726c5fc40b8df02ccb9c4c5da38f03c3743f05ffcacd70a","ssdeep":"192:GQTlLE8YWi+jXRNACPS1NrFX65Q6aPFVUOMBZ5d/dYGxKLW90j+:GylLt7i+z7PSZX6a6sV4BZ5d/dYGxvn","tlshash":"d012ae63490aa8821b1b56e59d8423d85353f41dffda76b4b0ebedc79001d70d6c8476","first_seen":"2025-09-27T14:19:54.543516Z","last_seen":"2025-09-27T14:19:54.543516Z","times_seen":1,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"carolinplegge.shop/","fqdn":"carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-27T14:19:25.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carolinplegge.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 07:25:35 GMT","end":"Wed, 05 Nov 2025 08:24:10 GMT"},"fingerprint":{"sha1":"8F:52:94:19:75:AF:BC:C7:72:2E:17:7A:3D:9C:2D:17:91:CC:34:94","sha256":"B0:D4:92:44:EC:55:E5:9D:F7:37:FC:43:C4:DD:4A:7F:3B:BB:6E:A3:E1:A6:64:7E:7D:7B:B8:3B:12:EA:42:C8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: carolinplegge.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 27 Sep 2025 14:19:25 GMT\r\ncontent-type: text/html\r\nlocation: https://www.carolinplegge.shop/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mXyNNcPAylx2EVo%2BmHZYfs5AyKmpq3S9qOM6tNUeNWr8bd7F85oNlKYg%2BQBbvulGKqVqv1Hq4qLEGanmiMO8jqG%2FWyGOlxLfXQRj9tPh1l0v3g%3D%3D\"}]}\r\ncf-ray: 985ba2cc0d2e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33049,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T06:47:06.202855Z","times_seen":13363998,"resource_available":true,"data":null}},"time_used":801,"timings":{"blocked":265,"dns":0,"connect":1,"send":0,"wait":271,"receive":0,"ssl":263},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.carolinplegge.shop/uploads/25/06/as.jpg","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.carolinplegge.shop/","date":"2025-09-27T14:19:26.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carolinplegge.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 07:25:35 GMT","end":"Wed, 05 Nov 2025 08:24:10 GMT"},"fingerprint":{"sha1":"8F:52:94:19:75:AF:BC:C7:72:2E:17:7A:3D:9C:2D:17:91:CC:34:94","sha256":"B0:D4:92:44:EC:55:E5:9D:F7:37:FC:43:C4:DD:4A:7F:3B:BB:6E:A3:E1:A6:64:7E:7D:7B:B8:3B:12:EA:42:C8"}}},"request":{"raw":"GET /uploads/25/06/as.jpg HTTP/1.1\r\nHost: www.carolinplegge.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.carolinplegge.shop/\r\nCookie: PHPSESSID=ma4uj125pgeggm3jslnkm9i1b9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 14:19:26 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ozJ80SEEfABvMpApem%2FtlHuMHOK8GusV09llBf0m8HCOgmJb6QhKTTppL9X6GTKf%2BYv4DxHaev7NihPBBB7gqgIaWkHh2mxV%2Fp7udfA1zz3vFMZ6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 05 Jun 2025 08:05:32 GMT\r\netag: W/\"68414fcc-23079\"\r\nexpires: Sun, 26 Oct 2025 23:49:12 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 985ba2d1baaf5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143481,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.1 (Windows), datetime=2025:06:05 16:04:07], baseline, precision 8, 1440x900, components 3","md5":"1fb4fc76e40860eb8dfafe5cc10c0127","sha1":"ea78b8aa1d75875caa824f4754bb9fa0eecd5815","sha256":"d17a5b106e905631f861e63ae034a6e7797e1461f1881809c91a8372e49b03d5","sha512":"5c834763c32d11eb636278afce9e69a65196d49991aaddcc768f32d437503b11e4f92d2c46c5faf268958bc05608451c163d9f0ef5d57987ba48d570df01d8aa","ssdeep":"3072:vCTTX4xAlWU0/i8aXySQLMyAEvXg6VGktOUNBAeT5Js+e1yVIGl:vCTr42lWUAaXQLaE/HGIue/e1tGl","tlshash":"77e3120c3bf56f97f9c896b49a66c263eb219fa41993df02b0cd8867f7246905d08d13","first_seen":"2025-09-27T14:19:54.547112Z","last_seen":"2025-09-27T14:19:54.547112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":388,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.carolinplegge.shop/uploads/p/25/06/men-wolford-pure-brief-set-logo-white_x350.jpg","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.carolinplegge.shop/","date":"2025-09-27T14:19:26.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carolinplegge.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 07:25:35 GMT","end":"Wed, 05 Nov 2025 08:24:10 GMT"},"fingerprint":{"sha1":"8F:52:94:19:75:AF:BC:C7:72:2E:17:7A:3D:9C:2D:17:91:CC:34:94","sha256":"B0:D4:92:44:EC:55:E5:9D:F7:37:FC:43:C4:DD:4A:7F:3B:BB:6E:A3:E1:A6:64:7E:7D:7B:B8:3B:12:EA:42:C8"}}},"request":{"raw":"GET /uploads/p/25/06/men-wolford-pure-brief-set-logo-white_x350.jpg HTTP/1.1\r\nHost: www.carolinplegge.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.carolinplegge.shop/\r\nCookie: PHPSESSID=ma4uj125pgeggm3jslnkm9i1b9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 14:19:26 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FqMRRS6JOWdK5d0TEcPp5nMWF6ljmwle7uY3LwYiTnqO64b4E%2FKQCwZj0iQs3qjXo3InuUlqa3%2FvSw5IqxDQ%2Bptc7lj%2Bgz1iOE2pRLt5TC6qcb%2F9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 04 Jun 2025 21:28:17 GMT\r\netag: W/\"6840ba71-141d\"\r\nexpires: Mon, 27 Oct 2025 14:19:26 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 985ba2d1bab35690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5149,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 350x467, components 3","md5":"c1e6ed8e2cafa30cfbc0931d4c2a525a","sha1":"ed6786f17f6e71f66f9fe733178bd62e294d0be4","sha256":"bc037d3f46fc8b56500a94b503a622a68217422b0a31d950c25c58b504866ccd","sha512":"ce5614cd7aacffce6cb7e0ee85e2fc2437ee90ec3374bae1151fa1d1fc641a2a8be357ef8bb86b2507fc27af22750d86eefb2f65cb8ca11aada1819cd5c17d6f","ssdeep":"96:GahTEKp7Z5qhNwPQrFaTfl6HuTTl0tcz76a/OFa:GQTnCHMqk","tlshash":"c4b1a81b8d094b439635d7e8be071ead6b4a2e1ce9d536fe55234d9b3e30a321c4d02e","first_seen":"2025-09-27T14:19:54.548248Z","last_seen":"2025-09-27T14:19:54.548248Z","times_seen":1,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.carolinplegge.shop/uploads/p/25/06/women-wolford-longsleeve-bodies-paisley-tattoo-string-body-grey-black_x350.jpg","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.carolinplegge.shop/","date":"2025-09-27T14:19:26.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carolinplegge.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 07:25:35 GMT","end":"Wed, 05 Nov 2025 08:24:10 GMT"},"fingerprint":{"sha1":"8F:52:94:19:75:AF:BC:C7:72:2E:17:7A:3D:9C:2D:17:91:CC:34:94","sha256":"B0:D4:92:44:EC:55:E5:9D:F7:37:FC:43:C4:DD:4A:7F:3B:BB:6E:A3:E1:A6:64:7E:7D:7B:B8:3B:12:EA:42:C8"}}},"request":{"raw":"GET /uploads/p/25/06/women-wolford-longsleeve-bodies-paisley-tattoo-string-body-grey-black_x350.jpg HTTP/1.1\r\nHost: www.carolinplegge.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.carolinplegge.shop/\r\nCookie: PHPSESSID=ma4uj125pgeggm3jslnkm9i1b9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 14:19:26 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ty5%2ByBGBMl3rdktYp6XsyOmex8OIlg%2Bn9EAqxEZX%2FAOKlAdJ%2BW8gSp8ArHOKkKNHjxunYvkuqP9td4CqlFSbmq0eZ4HweKNhjkS7xVSsvtQ3zNOl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 04 Jun 2025 21:23:00 GMT\r\netag: W/\"6840b934-2f06\"\r\nexpires: Mon, 27 Oct 2025 14:19:26 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 985ba2d1bab05690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12038,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 350x467, components 3","md5":"beabf73bbaba6997717bbd5b534fc314","sha1":"84832214641ce4b401fc53793b364565aa4aef3b","sha256":"367d72d69b9dd84136a288282d246632af53e9e408ebf7cc943720b320388f84","sha512":"61ceb17bbbbf9d1f8a81f151038ccb74d49399d8b24b87d0d98334f55dd06559292b0fe49db99c36d0b191b3093464e2d4cb3296da8034238250269b4da5a938","ssdeep":"192:GQTn9wdnqsMkH7BS4kv6vT667pnZfAghr8+1KzV8LxkAU2kk9x7rwzIza2Fp:Gy9SnwaS7e5hVgzax/pP9xrwzIe2Fp","tlshash":"9442bf96ae0fe6c1a301e328ae0e6052c29a436df56335b31865caf3ef41c751d39c30","first_seen":"2025-09-27T14:19:54.549586Z","last_seen":"2025-09-27T14:19:54.549586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.carolinplegge.shop/uploads/p/25/06/women-wolford-tights-metallic-jacquard-tights-black-gold_x350.jpg","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.carolinplegge.shop/","date":"2025-09-27T14:19:26.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carolinplegge.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 07:25:35 GMT","end":"Wed, 05 Nov 2025 08:24:10 GMT"},"fingerprint":{"sha1":"8F:52:94:19:75:AF:BC:C7:72:2E:17:7A:3D:9C:2D:17:91:CC:34:94","sha256":"B0:D4:92:44:EC:55:E5:9D:F7:37:FC:43:C4:DD:4A:7F:3B:BB:6E:A3:E1:A6:64:7E:7D:7B:B8:3B:12:EA:42:C8"}}},"request":{"raw":"GET /uploads/p/25/06/women-wolford-tights-metallic-jacquard-tights-black-gold_x350.jpg HTTP/1.1\r\nHost: www.carolinplegge.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.carolinplegge.shop/\r\nCookie: PHPSESSID=ma4uj125pgeggm3jslnkm9i1b9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 14:19:26 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2FEcNYGT9h%2FQ7j6OqWwsiy6CYvnpPeGthG94SpX%2FR4JMvzhABVvZfmLTmcrSjk6Vu1I7X5rFabU4RVDb%2BxEDxRvs2Dv67lVpmv2X7LLp%2BLoeOXYQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 04 Jun 2025 21:12:29 GMT\r\netag: W/\"6840b6bd-2ab9\"\r\nexpires: Mon, 27 Oct 2025 14:19:26 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 985ba2d1bab25690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10937,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 350x467, components 3","md5":"395319128befc028b9dbd68690e6b66c","sha1":"4dd62b5bd4657bf482474ea4126c92dc02db10f1","sha256":"e6dc45bf5df9fb523016fb1bc75f6dae13187f112751ee522d090cf05b134c83","sha512":"fad678891bdf3758f42d41c618e1cd334d22da7fa3ff2221e7bea2e9270d223e32091322871d48432b0be2b2e2ee058d10a0fb26c5a0aa09162e8fed175b0baf","ssdeep":"192:GQT/jGopJK5G9UWe8KzeDvfAHUX73ueNbeswjRPjxjZUdTp64ao:Gy/jD7kaDOU7rkPljaTE4p","tlshash":"0e32bf031c1a2243f3256e9e9b5e89b6a86c2705f764147c6867dfab3d30eb1285c7a1","first_seen":"2025-09-27T14:19:54.550565Z","last_seen":"2025-09-27T14:19:54.550565Z","times_seen":1,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.carolinplegge.shop/favicon.ico","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.carolinplegge.shop/","date":"2025-09-27T14:19:27.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carolinplegge.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 07:25:35 GMT","end":"Wed, 05 Nov 2025 08:24:10 GMT"},"fingerprint":{"sha1":"8F:52:94:19:75:AF:BC:C7:72:2E:17:7A:3D:9C:2D:17:91:CC:34:94","sha256":"B0:D4:92:44:EC:55:E5:9D:F7:37:FC:43:C4:DD:4A:7F:3B:BB:6E:A3:E1:A6:64:7E:7D:7B:B8:3B:12:EA:42:C8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.carolinplegge.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.carolinplegge.shop/\r\nCookie: PHPSESSID=ma4uj125pgeggm3jslnkm9i1b9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 14:19:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: /uploads/25/06/wolford-icon.png\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xzmONrmhpdzQRRaaa693451VyqMCi0hEfoHbnchEMZ2PSosqCpHmNrbLTZ%2B%2BO4jkjEHBzMhHcwI0jJfLOGfrtBLaqe9smb7mCQfo2AIf28byqcPA\"}]}\r\ncf-ray: 985ba2d6caf35690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1905,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T06:47:06.202855Z","times_seen":13363998,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.carolinplegge.shop/","date":"2025-09-27T14:19:26.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Inter:wght@100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.carolinplegge.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 27 Sep 2025 14:19:26 GMT\r\ndate: Sat, 27 Sep 2025 14:19:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2555,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fcf63d91b46adf99bd3db1a56530254","sha1":"62f7d93d0b191e1e8464958268f225f51dd1752d","sha256":"63867a7c4bb197935b85ada1c4bcbc95951598dfb736b24132f0a43e5e5e365c","sha512":"16d25c5cc841006ca8e86ef334efb051054257e6990275a3a0d1e25f9adc6c665b65ff9083dfc9c409d84b69365a26eb9ba875431ca75765743b70902e684d14","ssdeep":"","tlshash":"0451ab92002ba404ab931dc233cf7f3aaece50856085d2b96ffd1dc65cead66436875d","first_seen":"2025-09-10T17:57:06.167004Z","last_seen":"2026-04-05T07:15:43.77597Z","times_seen":24471,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":70,"dns":0,"connect":15,"send":0,"wait":35,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.carolinplegge.shop/css/font-awesome-4.7.0/css/font-awesome.css?ver=1","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.carolinplegge.shop/","date":"2025-09-27T14:19:26.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carolinplegge.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 07:25:35 GMT","end":"Wed, 05 Nov 2025 08:24:10 GMT"},"fingerprint":{"sha1":"8F:52:94:19:75:AF:BC:C7:72:2E:17:7A:3D:9C:2D:17:91:CC:34:94","sha256":"B0:D4:92:44:EC:55:E5:9D:F7:37:FC:43:C4:DD:4A:7F:3B:BB:6E:A3:E1:A6:64:7E:7D:7B:B8:3B:12:EA:42:C8"}}},"request":{"raw":"GET /css/font-awesome-4.7.0/css/font-awesome.css?ver=1 HTTP/1.1\r\nHost: www.carolinplegge.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.carolinplegge.shop/\r\nCookie: PHPSESSID=ma4uj125pgeggm3jslnkm9i1b9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 14:19:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 21 Apr 2025 15:56:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MW67RWiZhbjgBz8QZZSTTwoEx%2BdMMIAqG4PvK3PxJ%2BFHlqDtFNK%2FXwcTGcsgPabi5qrxLtv2mMn3f1Tc1qNdPaLPtcf8VLewzw6UqoLxOuyCizuO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68066aba-9226\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 985ba2d1baab5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37414,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with very long lines (372)","md5":"c495654869785bc3df60216616814ad1","sha1":"0140952c64e3f2b74ef64e050f2fe86eab6624c8","sha256":"36e0a7e08bee65774168528938072c536437669c1b7458ac77976ec788e4439c","sha512":"e40f27c1d30e5ab4b3db47c3b2373381489d50147c9623d853e5b299364fd65998f46e8e73b1e566fd79e97aa7b20354cd3c8c79f15372c147fed9c913ffb106","ssdeep":"768:mmMtI+A4CSIDqvnI+YTBrFPvVrJjhiRAiiEL:mXtI+A4GDUI+Y9rpVljhiIEL","tlshash":"37f241ece5bf18904391e0d16386a370bb3dbb2c8d4a6d5cd2a6798cb1c1255d2c63ed","first_seen":"2023-04-05T05:21:01Z","last_seen":"2026-04-05T06:53:26.105553Z","times_seen":82829,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.carolinplegge.shop/images/search_white.svg","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.carolinplegge.shop/","date":"2025-09-27T14:19:26.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carolinplegge.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 07:25:35 GMT","end":"Wed, 05 Nov 2025 08:24:10 GMT"},"fingerprint":{"sha1":"8F:52:94:19:75:AF:BC:C7:72:2E:17:7A:3D:9C:2D:17:91:CC:34:94","sha256":"B0:D4:92:44:EC:55:E5:9D:F7:37:FC:43:C4:DD:4A:7F:3B:BB:6E:A3:E1:A6:64:7E:7D:7B:B8:3B:12:EA:42:C8"}}},"request":{"raw":"GET /images/search_white.svg HTTP/1.1\r\nHost: www.carolinplegge.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.carolinplegge.shop/superb_ecommerce/css/style.css?ver=1\r\nCookie: PHPSESSID=ma4uj125pgeggm3jslnkm9i1b9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 14:19:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 28 Apr 2025 12:57:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HyI0Mjj6yYL31BiX2mgXmLPrpHPO%2BgHeQMRIGG0jHBhRuBFG5zoztvZm2KeYcWJyIap9bDrd98EqFQcEHZSTHgP6WP%2Fw%2BjmuVN3CNghKgyJ6sChs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"680f7b34-4bb\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 985ba2d47ae15690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1211,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"89788c49e174c2998316161174a195f1","sha1":"8768001f0c09538838e2858de1c622f0960a2dff","sha256":"f95a87e375f7b20a8102e8167f7f2704a9c1c82bfa1e21809c0da4a9e9ef494b","sha512":"964904d0e8689f9a473ab08e17b52c992ff80c0bdfa60445369a6fe401d66f4f0e556413b5b93466f99558b6258361cb89093daa1a34fe7c84dc59175b0f9d01","ssdeep":"","tlshash":"762132c4a669cbb9909f439cca6b63c5320978f6f04bc0acb5ba6409c5500b30d28958","first_seen":"2024-08-22T17:15:55.5916Z","last_seen":"2026-03-27T06:31:55.721112Z","times_seen":2370,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.carolinplegge.shop/uploads/p/25/06/women-wolford-bodysuits-mat-de-luxe-forming-body-white_x350.jpg","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.carolinplegge.shop/","date":"2025-09-27T14:19:26.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carolinplegge.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 07:25:35 GMT","end":"Wed, 05 Nov 2025 08:24:10 GMT"},"fingerprint":{"sha1":"8F:52:94:19:75:AF:BC:C7:72:2E:17:7A:3D:9C:2D:17:91:CC:34:94","sha256":"B0:D4:92:44:EC:55:E5:9D:F7:37:FC:43:C4:DD:4A:7F:3B:BB:6E:A3:E1:A6:64:7E:7D:7B:B8:3B:12:EA:42:C8"}}},"request":{"raw":"GET /uploads/p/25/06/women-wolford-bodysuits-mat-de-luxe-forming-body-white_x350.jpg HTTP/1.1\r\nHost: www.carolinplegge.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.carolinplegge.shop/\r\nCookie: PHPSESSID=ma4uj125pgeggm3jslnkm9i1b9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 14:19:26 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2FXbIO9dRUyAiIcTlGc8XDEWjbtEqDZ%2F3z5ALVKi%2F6shS5SSKne70X62uUX%2BgKgCh%2B3zW0EGEU%2BrhqI0biiELb9IrUuuvGN5Kl54Q6Ca3GgKBmcd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 04 Jun 2025 21:24:07 GMT\r\netag: W/\"6840b977-1cd8\"\r\nexpires: Mon, 27 Oct 2025 14:19:26 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 985ba2d1bab65690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7384,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 350x467, components 3","md5":"d7075e1d7cc04a0694d2ca5160f85857","sha1":"71a3400babe12814cb7784a73c031b54d0ba41e7","sha256":"e6c70e3881308936dabc4910f177af63cce236876986481366988994537408d8","sha512":"cc0a2aafc838bcac1e5fa008aa8202bc875b614c05fff56dabd7753efd72e7860d0208332a6e35d298e3fb0e056b87ee9080a2b17f4667367e405712a8628ce5","ssdeep":"192:GQTdQiAqpPifw2b4+hRE7V++8r4aJUYtkE:Gyyix6b4+DE7rkt5","tlshash":"70e1d6079d488a82e7248ae87d030d9d9e493b0cee8535ff05234edb7834e769c1a06e","first_seen":"2025-09-27T14:19:54.563336Z","last_seen":"2025-09-27T14:19:54.563336Z","times_seen":1,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.carolinplegge.shop/","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-27T14:19:25.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carolinplegge.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 07:25:35 GMT","end":"Wed, 05 Nov 2025 08:24:10 GMT"},"fingerprint":{"sha1":"8F:52:94:19:75:AF:BC:C7:72:2E:17:7A:3D:9C:2D:17:91:CC:34:94","sha256":"B0:D4:92:44:EC:55:E5:9D:F7:37:FC:43:C4:DD:4A:7F:3B:BB:6E:A3:E1:A6:64:7E:7D:7B:B8:3B:12:EA:42:C8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.carolinplegge.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 14:19:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xOBjx3g%2FcguWMnqcnC5vEIv2oMGwfz5TBXmxSvRCuWGfbKs3O4tlhDLErczcS2xKR2GUO5AV%2F2sT4S9gcdNysIQGxokXN4vb6zMRbnAy5yKhLnaHeSc%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: PHPSESSID=ma4uj125pgeggm3jslnkm9i1b9; Path=/\r\ncf-ray: 985ba2ce3a791525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":33049,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (907)","md5":"8b7e60d609b428edb449120b75475f5a","sha1":"d31222aa9e1ba44a345d417dd6cf63de243f19e2","sha256":"b3fe2dd53529f83da4d00a948a2dd0fd8a4664ede2b3d006d606f90c01cdd277","sha512":"40c275ab1ce6df8020eb6d7555d4eb272efad4419e9e6b6f479f040c20ee5da22da46532dbf543cc1723df7a52a7dd8be424b963c5f05885720de5eb671da96a","ssdeep":"768:xDEVUd0tFCBjQChtSO7hl+TerXwSsAQWFE9X4WC:xDOhtFCBjQChtSO762sAQWFE9X4r","tlshash":"bce2751091f929ba106755c67ef4766abee5d00bd24b04887afd87dbdf81c90bc0784e","first_seen":"2025-09-27T14:19:54.564474Z","last_seen":"2025-09-27T14:19:54.564474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.carolinplegge.shop/js/all.js?ver=1","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.carolinplegge.shop/","date":"2025-09-27T14:19:26.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carolinplegge.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 07:25:35 GMT","end":"Wed, 05 Nov 2025 08:24:10 GMT"},"fingerprint":{"sha1":"8F:52:94:19:75:AF:BC:C7:72:2E:17:7A:3D:9C:2D:17:91:CC:34:94","sha256":"B0:D4:92:44:EC:55:E5:9D:F7:37:FC:43:C4:DD:4A:7F:3B:BB:6E:A3:E1:A6:64:7E:7D:7B:B8:3B:12:EA:42:C8"}}},"request":{"raw":"GET /js/all.js?ver=1 HTTP/1.1\r\nHost: www.carolinplegge.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.carolinplegge.shop/\r\nCookie: PHPSESSID=ma4uj125pgeggm3jslnkm9i1b9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 14:19:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 28 Apr 2025 12:57:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZGVoCqQ8xxpEFtOfW9tC4349ZKISlVxUl0m5X95%2FYYTwt8Sc9piyz9eAHd%2BRpt0MsYYuUvmsLMjvCTciFL7BSJwGEkLa7R65xHyAUvwNHTZxbXAl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"680f7b34-e0b8\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 985ba2d1baad5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57528,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d969ea2b9ecd39377d2688699a7b2e28","sha1":"65f5d904cf89c82e6bd4efa3a24bb326c399a8f9","sha256":"526f26c1138df8e3ea782fe0fbd8316c1a9b1514ff1584527496f063bab77074","sha512":"a716a70b06cc1ec83b6d34c6c43227fd2c9adc937b3ab6dc5122506b9a4899f3c34d2ab9f911bc1b0f436176c048486aab9526f192bc28d7fe0cd76a78b543c3","ssdeep":"1536:AU5ARWpII7hpjypU9mmmfkUQ4BI6CysAGq:AU5ARdkUQsH","tlshash":"49430249bafb1075821b606f5f8f2248b638801f4846d95d7c6cc2d89fd0a3416eaff9","first_seen":"2025-05-05T14:32:10.136373Z","last_seen":"2026-04-04T06:33:40.786327Z","times_seen":1852,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.carolinplegge.shop/uploads/25/06/wolford-i.jpg","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.carolinplegge.shop/","date":"2025-09-27T14:19:26.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carolinplegge.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 07:25:35 GMT","end":"Wed, 05 Nov 2025 08:24:10 GMT"},"fingerprint":{"sha1":"8F:52:94:19:75:AF:BC:C7:72:2E:17:7A:3D:9C:2D:17:91:CC:34:94","sha256":"B0:D4:92:44:EC:55:E5:9D:F7:37:FC:43:C4:DD:4A:7F:3B:BB:6E:A3:E1:A6:64:7E:7D:7B:B8:3B:12:EA:42:C8"}}},"request":{"raw":"GET /uploads/25/06/wolford-i.jpg HTTP/1.1\r\nHost: www.carolinplegge.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.carolinplegge.shop/\r\nCookie: PHPSESSID=ma4uj125pgeggm3jslnkm9i1b9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 14:19:26 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mswQyRswHybIzpfPhoKyDQX64DmWDEtoZOigOhK8faTMQdwMu6stG4Y85CnvCfrCV9RO2L%2BqKRolJDkMDNhSzpfItzZRIh8V916nR8N3LPpXHfky\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 05 Jun 2025 08:05:31 GMT\r\netag: W/\"68414fcb-25ac0\"\r\nexpires: Sat, 25 Oct 2025 18:18:28 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 985ba2d1bab45690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154304,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.1 (Windows), datetime=2024:11:12 11:43:18], baseline, precision 8, 1500x468, components 3","md5":"bad2f50bba4d61235b03f6624f3c50d2","sha1":"1cbc31bff7c318dd2906c25a21f2033436a616c9","sha256":"1463170e0d22877e7d1f6083b7d258f520ab883c7e3752159ee8bef57809b6c9","sha512":"fcf331d3c402fa53848fa800e3f78646699ba59b638e374b0ef96a1ffa54d39da3865dec0f2d8ba9aa6db706092c3ecb35a2da1adc93b68a60cf9cf5959d58bd","ssdeep":"3072:phwfL4p+1VZW1JnH1Io8JobBFzFQgOEMr8BPQA6MRfoWL0XJl:phk4pcVk1RH1Io8JmBFyY28R0m1WH","tlshash":"24e302068ed44e07c5c7d934b9e5f8eb4f5296829b235ae1398c5840bff16b2d81b2c3","first_seen":"2025-08-05T13:41:10.141309Z","last_seen":"2025-09-27T14:19:54.566036Z","times_seen":3,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":392,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.carolinplegge.shop/uploads/25/06/wolford.png","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.carolinplegge.shop/","date":"2025-09-27T14:19:26.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carolinplegge.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 07:25:35 GMT","end":"Wed, 05 Nov 2025 08:24:10 GMT"},"fingerprint":{"sha1":"8F:52:94:19:75:AF:BC:C7:72:2E:17:7A:3D:9C:2D:17:91:CC:34:94","sha256":"B0:D4:92:44:EC:55:E5:9D:F7:37:FC:43:C4:DD:4A:7F:3B:BB:6E:A3:E1:A6:64:7E:7D:7B:B8:3B:12:EA:42:C8"}}},"request":{"raw":"GET /uploads/25/06/wolford.png HTTP/1.1\r\nHost: www.carolinplegge.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.carolinplegge.shop/\r\nCookie: PHPSESSID=ma4uj125pgeggm3jslnkm9i1b9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 14:19:26 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4wTyeSnUVpJ6MvPG4Y8EBJuOtmgxo4vOJXJ%2FQCn7IN7Ks4wDv3W7DoQZu1KviF0us2ERWk7jkciOBfMKshaopPjgCPp2KOumIwhAFnZF8wuJD6DQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 05 Jun 2025 08:05:30 GMT\r\netag: W/\"68414fca-117c\"\r\nexpires: Sun, 26 Oct 2025 23:49:12 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 985ba2d1baae5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4476,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 138 x 60, 8-bit/color RGBA, non-interlaced","md5":"a3d8b2ae6008a021bc6cbcfc5313c147","sha1":"29905d9371b5d052f79501b391e5395576680f75","sha256":"be2fadd888044a083eb1e4d537e1057c3c5699170276d59578a959003d98998d","sha512":"7b364a92e9a5eb976538c14f677a468e8ea9b8fdb939fae0a28f352f45e6c0d3b09731d22c0574a545088946a4b4add5719d53752c4c703917833399121d7f00","ssdeep":"96:/no7FmWlknNrkD5Ufk/Y8HCvHbYH0F42w1sQabpTN9OwSHD0s5UrNMJEoFTL8KO:Q7FrknaVPiv7Yf2nMnjzUpMJvPa","tlshash":"48911842d4a11e400d5e8e69ea9492b71a73dfd882e2a045fcce94d39d6127bcc9c8c3","first_seen":"2025-06-12T11:48:36.961366Z","last_seen":"2025-09-27T14:19:54.567427Z","times_seen":2,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.carolinplegge.shop/uploads/p/25/06/women-wolford-tights-fatal-50-tights-black_x150.jpg","fqdn":"www.carolinplegge.shop","domain":"carolinplegge.shop","tld":"shop"},"ip":{"addr":"172.67.156.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.carolinplegge.shop/","date":"2025-09-27T14:19:26.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carolinplegge.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 Aug 2025 07:25:35 GMT","end":"Wed, 05 Nov 2025 08:24:10 GMT"},"fingerprint":{"sha1":"8F:52:94:19:75:AF:BC:C7:72:2E:17:7A:3D:9C:2D:17:91:CC:34:94","sha256":"B0:D4:92:44:EC:55:E5:9D:F7:37:FC:43:C4:DD:4A:7F:3B:BB:6E:A3:E1:A6:64:7E:7D:7B:B8:3B:12:EA:42:C8"}}},"request":{"raw":"GET /uploads/p/25/06/women-wolford-tights-fatal-50-tights-black_x150.jpg HTTP/1.1\r\nHost: www.carolinplegge.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.carolinplegge.shop/\r\nCookie: PHPSESSID=ma4uj125pgeggm3jslnkm9i1b9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 14:19:26 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MpjBRqhOWb5NjSFunXyjPf3Z7VDkLCX5agd%2BgpYEtxaa5JxYm2Ks9Hk1v3%2FqGyuL1jgWako6dzexe8ufT%2FTQDWa67PKW5hF40gOBBzYLcyYGjvuu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 04 Jun 2025 21:07:50 GMT\r\netag: W/\"6840b5a6-df1\"\r\nexpires: Mon, 27 Oct 2025 14:19:26 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 985ba2d1caba5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3569,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 150x200, components 3","md5":"f3f5efa3b515a824967855ba778048db","sha1":"947c201732af00317d056c18a02d6d21fe7c4824","sha256":"66382930ab0d48e74397ceb692ffd84cb7a4df0c7dad947b0a2780659b1822d1","sha512":"67bca887282dc4af88207fdfc78e55e9b71485b134c0d4c591239e4308425b887411ba0e4bf42ab34157da26b59935907dd50c39fd4e28417643709095683f79","ssdeep":"","tlshash":"2c717c6a0e8603051f378bb5f72442e7c08d2a882f6537707cb186beb250df2c40a2a8","first_seen":"2025-09-27T14:19:54.568625Z","last_seen":"2025-09-27T14:19:54.568625Z","times_seen":1,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"www.carolinplegge.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}