{"report_id":"17839ca4-82d8-464d-babc-eaf55e8a70c0","version":6,"status":"done","tags":[],"date":"2026-01-30T02:23:53Z","url":{"schema":"http","addr":"limonscheinez.lima-city.ch","fqdn":"limonscheinez.lima-city.ch","domain":"limonscheinez.lima-city.ch","tld":"lima-city.ch"},"ip":{"addr":"91.216.248.20","port":0,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"limonscheinez.lima-city.ch/","fqdn":"limonscheinez.lima-city.ch","domain":"limonscheinez.lima-city.ch","tld":"lima-city.ch"},"title":"logest","dom":{"size":66544,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16879)","md5":"834245e9b46a06831c2f36ffd7f625a1","sha1":"2589e86b3d96881df49bc111affe543e43ec6b9e","sha256":"530424bfa48215c925e5884020160726700a5aaee58d181b66270ef2757ca164","sha512":"989f748e3d0a780bbcfb1cceb2079deee824a70ab1b006484db6ef3d6b5d36dfcb0b0324d59c4ffdca221af82cad69440bd9e57646864becf335651b20197889","ssdeep":"1536:YjCclkP5ypez1nT8rdxZ3bXemlUVuXwRmh3qvd0r:YjCclkP0ddxZ3bXemlUVugRmh3qvd0r","tlshash":"e95396a057b448f5797f933b5e44a3185127e902ca0977e5f0f3e294758cea60ae3b0b","dom_hash":"domhashe0f98f326435a8a51c86228485ab6fc9","first_seen":"2026-01-30T00:39:49.721332Z","last_seen":"2026-01-30T02:23:53.790446Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"limonscheinez.lima-city.ch","fqdn":"limonscheinez.lima-city.ch","domain":"limonscheinez.lima-city.ch","tld":"lima-city.ch"},"ip":{"addr":"91.216.248.20","port":0,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-06T02:23:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"limonscheinez.lima-city.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"limonscheinez.lima-city.ch","ip":{"addr":"91.216.248.23","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-29T15:21:05.380613Z","last_seen":"2026-01-29T15:21:06.40247Z","alert_count":7,"request_count":7,"received_data":198968,"sent_data":3739,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP:8.3.24","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"limonscheinez.lima-city.ch/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=8964710565a1d258501f","fqdn":"limonscheinez.lima-city.ch","domain":"limonscheinez.lima-city.ch","tld":"lima-city.ch"},"ip":{"addr":"91.216.248.23","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"importedModule","is_inline":false,"md5":"2a658b82d711091555f0b2d305461f32","sha1":"27229b23e7800ac16da73fff9a602de24d21da9c","sha256":"d52199627d73f2f06550baf26bc5cd75d3e73fdf3a9cc3e4cd7145b4525c8972","sha512":"0ea95325b6c36fd2a5a530c80d85636fa990b9d1326b3c6c4bc1f0ae7074f0c52efb4321871362e3c826e6e5ee0782e7f71861e8de436d478eed0645ced6e077","ssdeep":"768:/eW4693OQsx4lWM2vTJ19FuB57/tonYlrEdO4uMJhYlxu4DMJJiYp0ARmKmIVnVd:/eQ93pGM2v91a7VIuqxsbO1nsPpLL9TG","tlshash":"0303c8a8b065f03047ea14a6907b091bf3356618304ec0e0f769e8e778b915f65a7f3e","size":41076,"data":"","first_seen":"2025-12-03T05:59:44.83451Z","last_seen":"2026-08-11T13:37:09.719339Z","times_seen":3660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"limonscheinez.lima-city.ch/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"limonscheinez.lima-city.ch","domain":"limonscheinez.lima-city.ch","tld":"lima-city.ch"},"ip":{"addr":"91.216.248.23","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-14T00:01:08.650246Z","times_seen":311157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"limonscheinez.lima-city.ch/wp-block-template-skip-link-js-after","fqdn":"limonscheinez.lima-city.ch","domain":"limonscheinez.lima-city.ch","tld":"lima-city.ch"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9867f6a8f28b949ce3ae969e0e41c485","sha1":"14e52f548a49f95c365e077842550b8831938d86","sha256":"472d9336f2ee8e712810e6a5576bcd1ffc61c32af56d0f3730ea53f31804c0f4","sha512":"01cce15499a58f2b88ae2a3f11d9b01d2a5f23d9ac6a6fa7102437b4771c4c6a9c828a57708e35436d597ca0485107b619d957610c22d387d024d94fae2fb5dc","ssdeep":"","tlshash":"2d2198c4f21506b404651a39c0344bc9e2ba2898f6db2ca7cc0c8c1cb17256f4676e7f","size":1406,"data":"","first_seen":"2025-12-09T11:08:21.979021Z","last_seen":"2026-05-11T02:10:15.48557Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"limonscheinez.lima-city.ch/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"limonscheinez.lima-city.ch","domain":"limonscheinez.lima-city.ch","tld":"lima-city.ch"},"ip":{"addr":"91.216.248.23","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","size":3401,"data":"","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-08-13T23:39:22.741995Z","times_seen":11717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"limonscheinez.lima-city.ch/wp-includes/js/wp-emoji-loader.min.js","fqdn":"limonscheinez.lima-city.ch","domain":"limonscheinez.lima-city.ch","tld":"lima-city.ch"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c584acf9dbbedefda9cac55256616f63","sha1":"fd85b6c3c7e6e0f4ed928a8c87b6a511ba47be3c","sha256":"077054fb002ac03100e42f316085f67f68eb5c08f8dcf7fda9308b899d957da9","sha512":"37b1fc7906b4e86b55f19c1af0a482c4437c45b611c96c1f9ffb7cad45ddbf8c178110d1710d2af25213db8b27c84b9fa28cadda3f1fd27c745751cf17efcc8a","ssdeep":"","tlshash":"32618696e77638dbb2f900f2697e0d47e7614435d6c8d438c9bda3141cb5893c274b46","size":3327,"data":"","first_seen":"2026-01-30T00:39:49.72655Z","last_seen":"2026-01-30T02:23:53.797179Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"limonscheinez.lima-city.ch/","fqdn":"limonscheinez.lima-city.ch","domain":"limonscheinez.lima-city.ch","tld":"lima-city.ch"},"ip":{"addr":"91.216.248.23","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T02:23:31.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.ch","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 02:04:42 GMT","end":"Sat, 28 Feb 2026 02:04:41 GMT"},"fingerprint":{"sha1":"F7:78:E6:DF:36:EE:11:58:2A:8F:D6:72:08:05:F6:83:D2:D5:6F:B0","sha256":"93:FD:AA:51:D7:10:A8:D0:B9:46:D2:17:AE:D6:9F:97:97:F6:A7:F7:98:0F:7D:66:05:2E:63:B5:67:8B:FD:46"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: limonscheinez.lima-city.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 30 Jan 2026 02:23:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-lima-id: ga1Vjw0RVORGgKtxfa\r\nset-cookie: _lcp=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nx-powered-by: PHP/8.3.24\r\nlink: \u003chttps://limonscheinez.lima-city.ch/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP:8.3.24","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":66329,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16879)","md5":"f8aba242e14ddd1bfd6a5b2beb8c8cea","sha1":"6d6f07358703f5d558fb5a01e1787f2aa7e62951","sha256":"cdb6d4161aa52dbbb7607cf08eda62039c8a20704218f72a48856782cc223de0","sha512":"b5b6afa0b58c49b6b48736437cfdac78d5787e29aaf60fa55070c01d7ae77344e8b9b5e26561dcb4906666210a62725f733830b6de5fce5c1ab37aad5d9cb448","ssdeep":"1536:h80clkt5ypez1nT8fdFZhp64wvSAIXumVMDqvd0v:h80clkt0pdFZhp64wvSAIemVMDqvd0v","tlshash":"1953a7a057b448f5797f833b5e44a2185527e912ca0977e5f0f3e294748cea60ae3b0f","first_seen":"2026-01-30T00:39:49.722408Z","last_seen":"2026-01-30T02:23:53.791609Z","times_seen":2,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":97,"dns":44,"connect":19,"send":0,"wait":114,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"limonscheinez.lima-city.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonscheinez.lima-city.ch/wp-content/themes/twentytwentyfive/assets/fonts/manrope/Manrope-VariableFont_wght.woff2","fqdn":"limonscheinez.lima-city.ch","domain":"limonscheinez.lima-city.ch","tld":"lima-city.ch"},"ip":{"addr":"91.216.248.23","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://limonscheinez.lima-city.ch/","date":"2026-01-30T02:23:32.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.ch","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 02:04:42 GMT","end":"Sat, 28 Feb 2026 02:04:41 GMT"},"fingerprint":{"sha1":"F7:78:E6:DF:36:EE:11:58:2A:8F:D6:72:08:05:F6:83:D2:D5:6F:B0","sha256":"93:FD:AA:51:D7:10:A8:D0:B9:46:D2:17:AE:D6:9F:97:97:F6:A7:F7:98:0F:7D:66:05:2E:63:B5:67:8B:FD:46"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfive/assets/fonts/manrope/Manrope-VariableFont_wght.woff2 HTTP/1.1\r\nHost: limonscheinez.lima-city.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://limonscheinez.lima-city.ch/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 30 Jan 2026 02:23:32 GMT\r\ncontent-length: 53600\r\nx-lima-id: ga6bt26T1DtWTVMJtM\r\nlast-modified: Thu, 29 Jan 2026 12:04:03 GMT\r\netag: \"d160-64985a71c5a6c\"\r\naccept-ranges: bytes\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":53600,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 53600, version 1.0","md5":"a8ebc7eb54efacfda66d0a2531058ecd","sha1":"5b56dbe3d3eabe178719988f4fee76d9d4ad7079","sha256":"ce340d48531930f3f2c8b7c47d149f82c9f4413548dd216e0f4d9af94a87c374","sha512":"bde7ef9fa476ae2bf7220afadc1285dec21f1a51718f3633a82cd4d08ac0adafd02acf01db82b3c263ab8a87e2cb18a03830f302d664f4441629ec24678bf2ac","ssdeep":"1536:GcCtX6JRTj6XLzm1OSRKt9Vo3IGC9pT/UTQ+z/y:qX6DWXPmwSRIVPGC9pTREy","tlshash":"203302d1f44038206c75e3fbddecfb9434ea81aaf53945d384a658bc0f8056addb0264","first_seen":"2023-11-30T06:19:19Z","last_seen":"2026-08-14T00:38:45.810367Z","times_seen":12569,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":32,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"limonscheinez.lima-city.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonscheinez.lima-city.ch/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"limonscheinez.lima-city.ch","domain":"limonscheinez.lima-city.ch","tld":"lima-city.ch"},"ip":{"addr":"91.216.248.23","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://limonscheinez.lima-city.ch/","date":"2026-01-30T02:23:32.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.ch","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 02:04:42 GMT","end":"Sat, 28 Feb 2026 02:04:41 GMT"},"fingerprint":{"sha1":"F7:78:E6:DF:36:EE:11:58:2A:8F:D6:72:08:05:F6:83:D2:D5:6F:B0","sha256":"93:FD:AA:51:D7:10:A8:D0:B9:46:D2:17:AE:D6:9F:97:97:F6:A7:F7:98:0F:7D:66:05:2E:63:B5:67:8B:FD:46"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210 HTTP/1.1\r\nHost: limonscheinez.lima-city.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://limonscheinez.lima-city.ch/\r\nCookie: _lcp=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 30 Jan 2026 02:23:32 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1169\r\nx-lima-id: gaoQl68tGISFiipo6r\r\nset-cookie: _lcp2=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly\r\nlast-modified: Thu, 29 Jan 2026 12:04:03 GMT\r\netag: \"d49-64985a7197c03-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Fri, 06 Feb 2026 02:23:32 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3401,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3401), with no line terminators","md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-08-13T23:39:22.741995Z","times_seen":11717,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"limonscheinez.lima-city.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonscheinez.lima-city.ch/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=8964710565a1d258501f","fqdn":"limonscheinez.lima-city.ch","domain":"limonscheinez.lima-city.ch","tld":"lima-city.ch"},"ip":{"addr":"91.216.248.23","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://limonscheinez.lima-city.ch/","date":"2026-01-30T02:23:32.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.ch","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 02:04:42 GMT","end":"Sat, 28 Feb 2026 02:04:41 GMT"},"fingerprint":{"sha1":"F7:78:E6:DF:36:EE:11:58:2A:8F:D6:72:08:05:F6:83:D2:D5:6F:B0","sha256":"93:FD:AA:51:D7:10:A8:D0:B9:46:D2:17:AE:D6:9F:97:97:F6:A7:F7:98:0F:7D:66:05:2E:63:B5:67:8B:FD:46"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=8964710565a1d258501f HTTP/1.1\r\nHost: limonscheinez.lima-city.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://limonscheinez.lima-city.ch/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210\r\nCookie: _lcp=a; _lcp2=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 30 Jan 2026 02:23:32 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 14955\r\nx-lima-id: gaDRwv4IUcPCFehM2d\r\nlast-modified: Thu, 29 Jan 2026 12:04:03 GMT\r\netag: \"a074-64985a7197c03-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Fri, 06 Feb 2026 02:23:32 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":41076,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41076), with no line terminators","md5":"2a658b82d711091555f0b2d305461f32","sha1":"27229b23e7800ac16da73fff9a602de24d21da9c","sha256":"d52199627d73f2f06550baf26bc5cd75d3e73fdf3a9cc3e4cd7145b4525c8972","sha512":"0ea95325b6c36fd2a5a530c80d85636fa990b9d1326b3c6c4bc1f0ae7074f0c52efb4321871362e3c826e6e5ee0782e7f71861e8de436d478eed0645ced6e077","ssdeep":"768:/eW4693OQsx4lWM2vTJ19FuB57/tonYlrEdO4uMJhYlxu4DMJJiYp0ARmKmIVnVd:/eQ93pGM2v91a7VIuqxsbO1nsPpLL9TG","tlshash":"0303c8a8b065f03047ea14a6907b091bf3356618304ec0e0f769e8e778b915f65a7f3e","first_seen":"2025-12-03T05:59:44.83451Z","last_seen":"2026-08-11T13:37:09.719339Z","times_seen":3660,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"limonscheinez.lima-city.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonscheinez.lima-city.ch/favicon.ico","fqdn":"limonscheinez.lima-city.ch","domain":"limonscheinez.lima-city.ch","tld":"lima-city.ch"},"ip":{"addr":"91.216.248.23","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://limonscheinez.lima-city.ch/","date":"2026-01-30T02:23:32.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.ch","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 02:04:42 GMT","end":"Sat, 28 Feb 2026 02:04:41 GMT"},"fingerprint":{"sha1":"F7:78:E6:DF:36:EE:11:58:2A:8F:D6:72:08:05:F6:83:D2:D5:6F:B0","sha256":"93:FD:AA:51:D7:10:A8:D0:B9:46:D2:17:AE:D6:9F:97:97:F6:A7:F7:98:0F:7D:66:05:2E:63:B5:67:8B:FD:46"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: limonscheinez.lima-city.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://limonscheinez.lima-city.ch/\r\nCookie: _lcp=a; _lcp2=a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Fri, 30 Jan 2026 02:23:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nlocation: https://limonscheinez.lima-city.ch/wp-includes/images/w-logo-blue-white-bg.png\r\nx-lima-id: gaCoEmCFIz9ACe09wf\r\nx-powered-by: PHP/8.3.24\r\nlink: \u003chttps://limonscheinez.lima-city.ch/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.24","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T00:51:56.928895Z","times_seen":17878665,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"limonscheinez.lima-city.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonscheinez.lima-city.ch/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"limonscheinez.lima-city.ch","domain":"limonscheinez.lima-city.ch","tld":"lima-city.ch"},"ip":{"addr":"91.216.248.23","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://limonscheinez.lima-city.ch/","date":"2026-01-30T02:23:32.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.ch","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 02:04:42 GMT","end":"Sat, 28 Feb 2026 02:04:41 GMT"},"fingerprint":{"sha1":"F7:78:E6:DF:36:EE:11:58:2A:8F:D6:72:08:05:F6:83:D2:D5:6F:B0","sha256":"93:FD:AA:51:D7:10:A8:D0:B9:46:D2:17:AE:D6:9F:97:97:F6:A7:F7:98:0F:7D:66:05:2E:63:B5:67:8B:FD:46"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: limonscheinez.lima-city.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://limonscheinez.lima-city.ch/\r\nCookie: _lcp=a; _lcp2=a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 30 Jan 2026 02:23:32 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 5375\r\nx-lima-id: gaMISstPD1OOAGbDrD\r\nlast-modified: Thu, 29 Jan 2026 12:04:03 GMT\r\netag: \"58ea-64985a71a08a5-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Fri, 06 Feb 2026 02:23:32 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-14T00:01:08.650246Z","times_seen":311157,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"limonscheinez.lima-city.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonscheinez.lima-city.ch/wp-includes/images/w-logo-blue-white-bg.png","fqdn":"limonscheinez.lima-city.ch","domain":"limonscheinez.lima-city.ch","tld":"lima-city.ch"},"ip":{"addr":"91.216.248.23","port":443,"asn":47447,"as":"23M GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://limonscheinez.lima-city.ch/","date":"2026-01-30T02:23:32.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lima-city.ch","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 02:04:42 GMT","end":"Sat, 28 Feb 2026 02:04:41 GMT"},"fingerprint":{"sha1":"F7:78:E6:DF:36:EE:11:58:2A:8F:D6:72:08:05:F6:83:D2:D5:6F:B0","sha256":"93:FD:AA:51:D7:10:A8:D0:B9:46:D2:17:AE:D6:9F:97:97:F6:A7:F7:98:0F:7D:66:05:2E:63:B5:67:8B:FD:46"}}},"request":{"raw":"GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1\r\nHost: limonscheinez.lima-city.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://limonscheinez.lima-city.ch/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _lcp=a; _lcp2=a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 30 Jan 2026 02:23:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 4119\r\nx-lima-id: gaJCF7O4UovY67uyDc\r\nlast-modified: Thu, 29 Jan 2026 12:04:03 GMT\r\netag: \"1017-64985a71a4726\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 01 Mar 2026 02:23:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"000bf649cc8f6bf27cfb04d1bcdcd3c7","sha1":"d73d2f6d74ec6cdcbae07955592962e77d8ae814","sha256":"6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0","sha512":"73d2ea5ffc572c1ae73f37f8f0ff25e945afee8e077b6ee42ce969e575cdc2d8444f90848ea1cb4d1c9ee4bd725aee2b4576afc25f17d7295a90e1cbfe6edfd5","ssdeep":"96:h3bdWfcmTY+aRF1pXWZL2+42HGhIUc8KeLEd:hgXTY+as02mOB8XLEd","tlshash":"00814b63df38c566e66a2b189ff6bca56b290fd50ca1194c0eecb025632c06d1065089","first_seen":"2023-04-08T12:31:37Z","last_seen":"2026-08-14T00:01:08.644977Z","times_seen":73406,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"limonscheinez.lima-city.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}