{"report_id":"18c34408-eb20-40b4-93e6-56c9ee672ab8","version":0,"status":"done","tags":[],"date":"2026-09-03T19:36:43Z","url":{"schema":"http","addr":"ergoterapiacaribu.ch/","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"title":"Centro di Ergoterapia Caribù - Biasca","dom":{"size":118198,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (29500)","md5":"4476395561eb16bebb869b2cff8441e3","sha1":"4e35f4e3f8e8a875d332a6fb8b79989566fa811b","sha256":"5d89e447a62ef7669e3ef770b9e38152ab396b4c2705e41e0dc4e557526809b1","sha512":"043e19eebd0ab283ddb84ef739ece78653ca9a221c36ce263bde75e1413490b703b957658cdb17de3e2210d9c7b22099daf45d33838967f9bb58ad976a6afede","ssdeep":"1536:2gm9yp4NFlC0Vc6emDsVNx3GPGZrCKOzeGXUQ1k:2gmYCJC0VhDsVNQGZrCKOzeGkQ1k","tlshash":"acc3e9f1b4c42465501b613d8186e95ce137eba0cb020bbef5fd51698f86da2b8f19f8","dom_hash":"domhash637c3a0317b86198b6d665a89eb2dc2d","first_seen":"2026-09-03T19:36:52.98602Z","last_seen":"2026-09-03T19:36:52.98602Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ergoterapiacaribu.ch/","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-08T19:36:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ergoterapiacaribu.ch","ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-07T11:14:31.790173Z","last_seen":"2026-09-03T18:52:09.204674Z","alert_count":92,"request_count":23,"received_data":8609463,"sent_data":14642,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Yoast SEO:28.2","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Site Kit:1.185.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"WordPress:7.0.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Google Sign-in","description":"Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.","website":"https://developers.google.com/identity/sign-in/web","common_platform_enumeration":"","icon":"Google.svg","categories":["Authentication"]},{"name":"Slider Revolution:6.5.15","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"172.253.148.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2026-08-31T09:39:50.126442Z","alert_count":0,"request_count":2,"received_data":273678,"sent_data":958,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":6430,"sent_data":519,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-30T22:35:21.728174Z","alert_count":0,"request_count":2,"received_data":825274,"sent_data":965,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":3,"received_data":144047,"sent_data":1767,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"60a0770406f20a1b84580a6ad420ac1a","sha1":"0ff4325e79115ceee3e4296101e69c395be51159","sha256":"1c27e7024252db86345b43868cefcad9269a10545d5099d3ab376be8a0132f13","sha512":"e87083c77968e58f841539cd398dc879d442361ab000d0b5a219cd9661eb3385d848d974c19062eaf3a8bac8a442cfef13485a9927ad246c233fd6cc3e5c9760","ssdeep":"","tlshash":"a1e0abca7b9c1834ae6da23a473d4d6c313b312cb0450836cefcc825600429b0821768","size":432,"data":"","first_seen":"2026-09-03T18:52:13.54746Z","last_seen":"2026-09-03T19:36:53.007077Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc6a0fa7152159e48d38e4d993f4c97d","sha1":"c9a88fa9cc00cedbc0d454a7875cb2503b7b9e24","sha256":"5cad5dcc261bc6949e544662a54863753a9b7850c764e731da87e9845dbb0bbb","sha512":"ab7dceb71a0dea20e800084165aa7efebe92951a04a917571df25c3426ec5316fe185d660deb6f0ea6c71c45396deab72043aaf6190f743d71ef78f67a41fe40","ssdeep":"","tlshash":"0f419c82ab5c80e8882636699d395349a67eccb3030d0972bc4d2c5dec58d27c3d79be","size":2220,"data":"","first_seen":"2023-03-07T01:02:41Z","last_seen":"2026-09-03T19:36:53.007692Z","times_seen":36792,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"b35212012c8b204a1293ff78981adbfd","sha1":"1df14b753b9c5a384cad94fb90261f61131a9e5c","sha256":"b94f73e7b34a5045d854913a49a5baf8dd6e9c7e35951d95f42e7e4c2245da91","sha512":"501367ceeede788d28ab87192d223289cb93aaacf89e8c17f0cb1ff5c5ca53c39aa4999238335321fa3377234a44c28717b2b9e4e3f984d86e89c319370f5a3c","ssdeep":"","tlshash":"b9b0127d210461390e8b105d761140803c603010b007bc43645ddcc7c420ca05402804","size":97,"data":"","first_seen":"2023-03-07T15:36:54Z","last_seen":"2026-09-03T22:59:09.040389Z","times_seen":6561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"6c8954dae6f028b42109e654377251c0","sha1":"98a5e349d2eed6a286742374f78ced92a0899b0f","sha256":"3f45e8de8d8de479def3be6d1e585fcce369ea5f067f249490cc04f36c328444","sha512":"05c5c8e58a90411e62aa0ab5939ee560249b19e096debdae2dc2e5ad1833b580d764e6a5cb5d2e8b33ea0b808119d1dd7c3db6a026e77c47a44d722078e09a80","ssdeep":"","tlshash":"d6c09b8c225a5c7156e72b409b7fbf04f541331494e57933491a63445d21e1bd794854","size":149,"data":"","first_seen":"2026-09-03T18:52:13.550073Z","last_seen":"2026-09-03T19:36:53.008643Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"87c90cfbdec2e267876ddf03e5f45d6b","sha1":"ef12700e140005052017979941dc577cb418fc19","sha256":"24065b36980dfc417c139449e455ad4b1c33e93c3d9ee1145ac7408a78a0d140","sha512":"910a58c4f5f2e128e6e702436155ecbd50814eb919b204338bdbc7b4351f6bf092343bc536f3fb35bd6d3714bba0e81beab1b5d99140c7014303b068b078068c","ssdeep":"","tlshash":"b0f0e20a0c91045d047e3834e28b776ce8d276f3860640f882ae5eea38b119390de4c5","size":475,"data":"","first_seen":"2026-09-03T18:52:13.551052Z","last_seen":"2026-09-03T19:36:53.009484Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ec370ca0eaf3069dce13df24243d863","sha1":"64c1919bbb18a6d851d1b7772f830320b8ab5cc1","sha256":"6a31a3a39783d09cc53dd9e9baeb4a4fa49be602eef90f6bbb9f78af02688064","sha512":"c24d4cfa5facd73ea7c242f69d6591d785bdbdca73bfc6aa7afe963bf09d4350a4daf0eeeb7ccd482b02d807663cf5d1c6763f0e2e468d8fda9f11213627d49d","ssdeep":"","tlshash":"6290040100513554711530d00134c3dd557df075dc4dd335754f570040c0405c53c401","size":41,"data":"","first_seen":"2023-03-07T01:02:03Z","last_seen":"2026-09-03T22:59:09.045069Z","times_seen":23724,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a67476cdd6dfae7afe41ad08ef0dc5e","sha1":"8a829750cddbf13323079bc6d08a1100cb9a176f","sha256":"75983dae7fb3754430bd4322cadb22760d112a6d14ac8c34fec9936a358fa6b4","sha512":"c1e9748b801ddb274c17ef9215fe896f54e328db465794e01cf79d03361a945700ab4954d12eca8d4a0aeb53887730c083ea6c96e60dbbab4c6285474bf88b58","ssdeep":"","tlshash":"02e002aa19a8099e413c780deb9a3250f4d762e6829914a99f0c09de2970543d1fc4a1","size":325,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-09-03T22:37:17.768083Z","times_seen":6817,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"b9077617d9fe1deb718e7648800c4d72","sha1":"481fae9c02c6c0b4bdc5e404bc7a97e16ffc3a21","sha256":"9434984064e8cea5c3ad4af20a21a9b95d1c62ddc0541fe471e4757692167668","sha512":"87f1523c63ca9dfc31b6ed515bae3e453377f57155423c7e78a88c7a4de5d0a62dd333c0c74f02b67cf28240ccf50abeedf602c2a96ac50f355a1ea4a79616bc","ssdeep":"","tlshash":"6d3102600149323140ea95ce95ead688763709ede7028425607e8e2c3f1cd9565eaff9","size":1621,"data":"","first_seen":"2023-03-07T12:09:23Z","last_seen":"2026-09-03T19:36:53.010958Z","times_seen":935,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"24655bbe6f0df60c75c94bb614ea3d24","sha1":"751125a208cd3747c4d0848ad081c3a18562605a","sha256":"1b75c4142af5b7d79f9a6975d2719f17d03e490a4cf8293276c3d492a47cda0c","sha512":"c609092f6fef08caba1605ecd31b442c198e75d32c580ba6600e9446cfcf7c2be7c48257587d560746f21657c8fe784d2a203ef1a8765a5ee1812624b2f18217","ssdeep":"","tlshash":"95f00e2d0d46403f61bd11646628c4e4f8a46f3412076054d9ad40aff090a4d8fa39fc","size":489,"data":"","first_seen":"2023-03-07T14:55:06Z","last_seen":"2026-09-03T22:37:17.772458Z","times_seen":4162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c73641ca249ac50468c1dbe890f0472","sha1":"a903294d9848852fa3cda0f09153948438c9cf0f","sha256":"65e030999313949c164db2ea5fd251aca95de370aca7c12252e5579f28deebde","sha512":"f2b701ff817e3c660dcd42efd850a728bfd8d4a570d012db07f10d109280139d3927c2cf4a56e58ff8f24cb42b590bbc148a4bfae02f1e8a7f9f4bad500fad16","ssdeep":"","tlshash":"b241ccc54e9c24cf443b791ea20e72ecf46de9f25d1e00f6f26d384a2460513839e8a9","size":1894,"data":"","first_seen":"2026-09-03T18:52:13.558464Z","last_seen":"2026-09-03T19:36:53.011869Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.15","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"066a9b9002b3169aea77c1e8ce88bcc9","sha1":"fa9c1343d254cc21e1aca1d0e0fc04828b7d8d7b","sha256":"1619041e2f274c7f79e24049e0710c53b99804c7ba4aec758dba1eb6a7166bd9","sha512":"68ff84e0f24f69ce6447286848f8e36601d789cc11f384b13b7db37be75b79a3e0ec95fc29e050fd925345c90aae6829988dbffdc90125dfc96722a3514cd68c","ssdeep":"1536:xrex7yX+Iz6ZKQpn8qwuQTBfvk6RtmSkgHJpZ7t0Zif/8m/xwYE/uVEmgX6wvBp4:lz6twBfvk4t55CifEm/Y+E1XXBNJq5","tlshash":"63c34cdd7251b432129626a5452f0a0ff23b9d19740b452cf368e4c87d389a990fffba","size":128668,"data":"","first_seen":"2023-03-07T01:02:41Z","last_seen":"2026-09-03T19:36:53.00419Z","times_seen":1813,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/uploads/fusion-scripts/33f2d59a30ff5baaa2535048f98123f4.min.js?ver=3.6.1","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6078a8c3ed84731e54f9677e47f13f9","sha1":"4dbf58803559ce085a000b484e43e5d485e1164e","sha256":"e3dc813783af9c0c743d1b97721ac26871745392aa83996b8c4b23bc9164929e","sha512":"7bfa5872ddd46fe54684af41c2056647b5abb81e4d4266a5819917b06813057e3d19ef1e5d7d1ab466bf21771cfbcb81fa55d51e2b47371155a34687968908dc","ssdeep":"3072:0cQc5yhknKUP5O2yvPVTj1w5T3lquVHh+03TZd4HU03eYtutU4K:0nc56RCk2yvPSTkG+03TQHU03btutS","tlshash":"94444b99b20030f541fb11aae43fa31932379a69b8068114b17dd5b92d78e8d6273fed","size":268991,"data":"","first_seen":"2025-10-07T11:15:08.530967Z","last_seen":"2026-09-03T19:36:52.990356Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-M560J7VV6T","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc432c95f343a9baf9160f4122f57b1a","sha1":"f471f8bf218220a75f341e50b694e4875b6906a3","sha256":"20a21c9ee8b5ab450ffe0753bc0056d3a1a99151a980a8a734853a04b9143553","sha512":"19f97e35a42c38d6b5cb57a955fc742aa9f6e89354d6c2e89343601c119d35e2adc4e325904e775859f85bfd2347e77ce5485d289a1141c0759ed0e48cd9fc92","ssdeep":"6144:O7UtzqVA98+m0967BbyBcuG/TEEq3Co03khmnoW6R1CCmc:OAru44v3kOovT","tlshash":"54a429cd73c674229396f578903f018ba67b28a2b44cc89af289dce42d3465a5177f7c","size":492782,"data":"","first_seen":"2026-09-03T18:52:13.514492Z","last_seen":"2026-09-03T19:36:52.987539Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-03T22:47:35.063832Z","times_seen":1045222,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/plugins/turbosmtp/public/js/turbosmtp-public.js?ver=4.9.8","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"49cea0a781874a962879c2caca9bc322","sha1":"72c1650de2b93ef320d2db873fbb473fe360269c","sha256":"57a50c99a31ef4e89e86664e96f6dfbdde163a2eb96e88b3b492c49aa4be2f37","sha512":"7ebf5da4637794cdab0d199e8b0550e9230a1550804a4ce7fc723a8881e16d12327b9c40bceecff54ece29dde71bf41e63e8510adf0827c4cd13c2392e6250a6","ssdeep":"","tlshash":"63011ecefbc22622c0337ab85def739873ba902581d66ec42850013c562193f8067cdc","size":838,"data":"","first_seen":"2023-03-07T01:03:06Z","last_seen":"2026-09-03T20:25:30.855413Z","times_seen":22599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/client","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.253.148.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1789d5a5c1c4631cb66078031576a91","sha1":"433c45d69173147a265683a4dc8ec700fc4847ba","sha256":"6c8590b09dda05b9a5d97941178a909742b2ce5db417edecc7cf113e417c56b1","sha512":"5bb0e4872aa1b7e9585b1f5db1bde9c98975ff139e990e618e8c83453872142af7bb5d273c3bf2cdaacf15e240198afa95b6e6c647ed3d8d74d944b2aa61c627","ssdeep":"6144:sddWggR7hxy5XsIJFTS/0o5Sfwnkc+8MPaCD9eLkFU:sdVssQ/0o5isHdMPaCD9eYU","tlshash":"e9444adcb6e270359222f8b5c43f410ab076a679f4498cacfa94c5f5acb0d890167f79","size":270869,"data":"","first_seen":"2026-08-27T02:07:04.341983Z","last_seen":"2026-09-03T22:20:09.96684Z","times_seen":868,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"Function","is_inline":false,"md5":"5c399557f73fcf0024f42259cf94ee17","sha1":"d2f46cbd088e9b289e63cc23e2377462c6459e3f","sha256":"254e737260e5ff4f6043abc4ab52ee1f9ea6e9eab066b5c7ac1665c4cf75692b","sha512":"45d3f9da1f4948d1f01993e19e0f42c54d7a30187978deddee02d4be94d4567f0045bd1192393f108570bded3f1805f233a5a41dfb9bb164f30086f598a3cc41","ssdeep":"","tlshash":"9e9004f574d311004d57317404571cdc1134c4701c544d744070f4d10c75074551745c","size":46,"data":"","first_seen":"2023-04-11T22:36:29Z","last_seen":"2026-09-03T22:40:00.758372Z","times_seen":29848,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WXWNTV93","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc37f4f4a3c2427abfbb2445d7db8421","sha1":"d0e09c19286c032df22239bb05fe0e91feddfd11","sha256":"02668399085e85ef3f75cd989d175f345ee1ac7ae990c09963bf8f56bc672b9e","sha512":"3bd5f8c6f2c3e0158ee6bece1e9742eb3b9794b33a400fdbe437f9cc7488afce3c5cc68fca6c64001483619c25f4efa0490c75fa5212154927525e852fca0d7c","ssdeep":"3072:D/MR3UU9xBzqVPG8HU0W7mNnAE+bOk86xRF2V9KsCqIfct2WwG/TEEq3Co/Ik6kC:utzqVO80mJWhkCBcuG/TEEq3CoRdZoac","tlshash":"376409ccb3d6b46283a3b574503f014bb23a79a2b84cc894f286e9d42d7466a5177f7c","size":331238,"data":"","first_seen":"2026-09-03T18:52:13.501307Z","last_seen":"2026-09-03T19:36:52.998287Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/plugins/google-site-kit/dist/assets/js/sign-in-with-google-15a07dd57b5f79886b45.js","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6d3acc5c18d9e6f2e2d5b6f6fb512de","sha1":"11b8e2d6f82e22c2b267f41a9664986fd5aeae55","sha256":"ff4c0af5166b742904ad6a46e6c2854eae05cfb692de7bb04456226fb1a383eb","sha512":"521e33f908ea3ec959a505a081ae6abc1f522e29a093c144881bc604ec375bd063c29aa614852874e32383233fafbc2565f58a74b344ca61ac54803b2b19e437","ssdeep":"","tlshash":"054184c270e114fe51dd38af6431435930760698fd8ef665ac3d895a2eb8e460672ecf","size":2272,"data":"","first_seen":"2026-07-14T22:32:26.809072Z","last_seen":"2026-09-03T21:46:49.032235Z","times_seen":905,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.15","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c60ddda25c8fb5d11d145d8a012c3ea","sha1":"f283d07939cac81eebb572128e3f8b2db79f8002","sha256":"b8b9a9ff0a9f08569fa27b147ed48bb8cc37ef85d7abb6547ea32066865a61a0","sha512":"e4ed331b932984779c5a2dece4cf441d7d4be3ade8a5d560fe73d951ea728628aeb336443e7a6f93391781d1795de69f9a9c3e1a2ca5f20273e05ac322440816","ssdeep":"6144:ESyVoh1kBwH4NrCXH2l1/UMGWWqT/s2L+PBFyFovbQb36DS2Qifj:ZeOjH4NTGWw2L+PBFyFov0uDJt","tlshash":"cb843de99531386900fb4397d05a451473b1e96aa3078490b2bbe2695c5ce8e02ffffd","size":385644,"data":"","first_seen":"2023-03-07T01:02:41Z","last_seen":"2026-09-03T19:36:53.006554Z","times_seen":1811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-M560J7VV6T","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:08.981Z","timestamp":1788464168981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-M560J7VV6T HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 03 Sep 2026 19:36:09 GMT\r\nexpires: Thu, 03 Sep 2026 19:36:09 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 166549\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":492782,"size_decoded":167153,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"cc432c95f343a9baf9160f4122f57b1a","sha1":"f471f8bf218220a75f341e50b694e4875b6906a3","sha256":"20a21c9ee8b5ab450ffe0753bc0056d3a1a99151a980a8a734853a04b9143553","sha512":"19f97e35a42c38d6b5cb57a955fc742aa9f6e89354d6c2e89343601c119d35e2adc4e325904e775859f85bfd2347e77ce5485d289a1141c0759ed0e48cd9fc92","ssdeep":"6144:O7UtzqVA98+m0967BbyBcuG/TEEq3Co03khmnoW6R1CCmc:OAru44v3kOovT","tlshash":"54a429cd73c674229396f578903f018ba67b28a2b44cc89af289dce42d3465a5177f7c","first_seen":"2026-09-03T18:52:13.514492Z","last_seen":"2026-09-03T19:36:52.987539Z","times_seen":2,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":5,"connect":16,"send":0,"wait":43,"receive":61,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXxKVElMYYaJe8bpLHnCwDKhdTEG46kmUZQCX598fQbGYTYAA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:09.688Z","timestamp":1788464169688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXxKVElMYYaJe8bpLHnCwDKhdTEG46kmUZQCX598fQbGYTYAA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ergoterapiacaribu.ch\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50184\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:34:22 GMT\r\nexpires: Thu, 02 Sep 2027 10:34:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 118907\r\nlast-modified: Mon, 08 Sep 2025 18:07:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50184,"size_decoded":50997,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50184, version 1.0","md5":"ed273b4064f8cd44562c4f31db1ccaf5","sha1":"1a837d5ed61678aacc09e678b7e7e4f7651639cb","sha256":"4363757d2695c7633f98472855849f7c30528eba869d7968ee35b58c87cf14c1","sha512":"130c0e975f086697518bb981f47d7a685e61f8f802e69e339c592e393ecc1f9badd7adaa3e3fde0079967f5fef542c2db75bd0e33fa124ee905f7719c332fc62","ssdeep":"1536:lXf6SAHdD+b4dgF4UHMHzNgMOu853QHK/:l+p+bSgSUHiRR87","tlshash":"f73302c14a583c12bbfd9efdfe1b0db8a875e65c53ac2d6e810051b15148fb1fe2a451","first_seen":"2025-04-15T19:32:23.953814Z","last_seen":"2026-09-03T19:36:52.988723Z","times_seen":181,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/uploads/2022/07/ERGOTERAPIA-CARIBU-SLIDER-HOME-1.jpg","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:16.884Z","timestamp":1788464176884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ergoterapiacaribu.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:40:45 GMT","end":"Sat, 31 Oct 2026 23:40:44 GMT"},"fingerprint":{"sha1":"D7:58:1B:FB:39:C1:F0:58:9E:05:72:09:9C:3B:AC:66:22:D0:8C:74","sha256":"FE:4B:C4:1C:58:63:30:E4:01:E8:D2:2E:B1:C1:03:A2:2B:0F:67:F2:65:28:9C:44:91:28:03:C4:FD:1E:13:66"}}},"request":{"raw":"GET /wp-content/uploads/2022/07/ERGOTERAPIA-CARIBU-SLIDER-HOME-1.jpg HTTP/1.1\r\nHost: ergoterapiacaribu.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nCookie: g_state={\"i_l\":1,\"i_ll\":1788464169376,\"i_b\":\"0QPB5qF+Lg5KWkuuQmr86FfwTUzW6HQozX9UUWlMG8Y\",\"i_e\":{\"enable_itp_optimization\":24},\"i_et\":1788464169376}; _ga_M560J7VV6T=GS2.1.s1788464169$o1$g0$t1788464169$j60$l0$h0; _ga=GA1.1.647044366.1788464170\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:36:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 909259\r\nlast-modified: Wed, 26 Jun 2024 10:01:35 GMT\r\netag: \"667be6ff-ddfcb\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":909259,"size_decoded":909512,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x750, components 3","md5":"1d84007def157ed93fd2d003083abc1f","sha1":"b4b586e6312898143a2eb5811efea90f2997c079","sha256":"03e95aa4eae0399e5944e3bf52bc5947c76b866338af6765f77cb468fe3f09e3","sha512":"a14bb53dfaf5331095dde444bce4e2c0022027b52f3d2b52f8fa5c885a4537b3e87ed4e9fc8562df98d752f485c338a105e20fc0e5df5f823a4353a7624dc497","ssdeep":"12288:mpCP5ANLbvfeSckvBV5fgK4EarvL5dj+cej3xzc2l/VFDNpnZ5MLpBOWqFgsNoVz:+wOl15YvEM3+rC2lDZUpB+FGRU9XE","tlshash":"3f15337d5ce63c49692695acdcbe0c27997b13157ff1a2b89dfe092ce181c222e81d43","first_seen":"2025-10-07T11:15:08.504898Z","last_seen":"2026-09-03T19:36:52.989489Z","times_seen":4,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/uploads/fusion-scripts/33f2d59a30ff5baaa2535048f98123f4.min.js?ver=3.6.1","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:08.994Z","timestamp":1788464168994,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ergoterapiacaribu.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:40:45 GMT","end":"Sat, 31 Oct 2026 23:40:44 GMT"},"fingerprint":{"sha1":"D7:58:1B:FB:39:C1:F0:58:9E:05:72:09:9C:3B:AC:66:22:D0:8C:74","sha256":"FE:4B:C4:1C:58:63:30:E4:01:E8:D2:2E:B1:C1:03:A2:2B:0F:67:F2:65:28:9C:44:91:28:03:C4:FD:1E:13:66"}}},"request":{"raw":"GET /wp-content/uploads/fusion-scripts/33f2d59a30ff5baaa2535048f98123f4.min.js?ver=3.6.1 HTTP/1.1\r\nHost: ergoterapiacaribu.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:36:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Sep 2026 00:35:24 GMT\r\netag: W/\"6a961dcc-41abf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":268991,"size_decoded":69120,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22474)","md5":"e6078a8c3ed84731e54f9677e47f13f9","sha1":"4dbf58803559ce085a000b484e43e5d485e1164e","sha256":"e3dc813783af9c0c743d1b97721ac26871745392aa83996b8c4b23bc9164929e","sha512":"7bfa5872ddd46fe54684af41c2056647b5abb81e4d4266a5819917b06813057e3d19ef1e5d7d1ab466bf21771cfbcb81fa55d51e2b47371155a34687968908dc","ssdeep":"3072:0cQc5yhknKUP5O2yvPVTj1w5T3lquVHh+03TZd4HU03eYtutU4K:0nc56RCk2yvPSTkG+03TQHU03btutS","tlshash":"94444b99b20030f541fb11aae43fa31932379a69b8068114b17dd5b92d78e8d6273fed","first_seen":"2025-10-07T11:15:08.530967Z","last_seen":"2026-09-03T19:36:52.990356Z","times_seen":4,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/uploads/2022/07/ERGOTERAPIA-LOGO-HEADER-22.png","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:09.006Z","timestamp":1788464169006,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ergoterapiacaribu.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:40:45 GMT","end":"Sat, 31 Oct 2026 23:40:44 GMT"},"fingerprint":{"sha1":"D7:58:1B:FB:39:C1:F0:58:9E:05:72:09:9C:3B:AC:66:22:D0:8C:74","sha256":"FE:4B:C4:1C:58:63:30:E4:01:E8:D2:2E:B1:C1:03:A2:2B:0F:67:F2:65:28:9C:44:91:28:03:C4:FD:1E:13:66"}}},"request":{"raw":"GET /wp-content/uploads/2022/07/ERGOTERAPIA-LOGO-HEADER-22.png HTTP/1.1\r\nHost: ergoterapiacaribu.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:36:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 25657\r\nlast-modified: Wed, 26 Jun 2024 10:01:45 GMT\r\netag: \"667be709-6439\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25657,"size_decoded":25907,"mime_type":"image/png","magic":"PNG image data, 294 x 126, 8-bit/color RGBA, non-interlaced","md5":"8db80a4017fba4e599d64f6447c3ecff","sha1":"a1b7b38be256f424148f291a3c1a5681d2a50715","sha256":"e79fb6cf51ac3fa01bd47e937a73bb271da0a13f3f729c1b9c4be42a176d4ede","sha512":"ff4b60d7d8f7a5fa74304ed30eea5f9feb341f8b85cf3e3ab17816ca7a4ae82f51bd21180fe283def970a275de624a1ba79044b712f3c9071907733cb832b83a","ssdeep":"384:VZUAk99e5EPPHy50QHSLqe5vLVUUtd+aOfQme9DssR6sjjeGLlf7YelYKrL6:Hk9w5EPuzoVztcfnem+X9LNH+","tlshash":"89b2e1dd8fe11e4159b54a215a8746bb2b84eff78d712e150e209d51cfe02fca6e5402","first_seen":"2025-10-07T11:15:08.527148Z","last_seen":"2026-09-03T19:36:52.99115Z","times_seen":4,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/style","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.253.148.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:09.378Z","timestamp":1788464169378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /gsi/style HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nexpires: Thu, 03 Sep 2026 19:36:09 GMT\r\ndate: Thu, 03 Sep 2026 19:36:09 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_dd7de8473bddc59c6b748810a67a39b1\"\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: script-src 'nonce-sWokwpJBxgIvO8Ay_OK0kQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http\r\nreport-to: {\"group\":\"coop_dd7de8473bddc59c6b748810a67a39b1\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":696,"size_decoded":1373,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (696), with no line terminators","md5":"ee570cebd6ae40b9567844b080aee1e9","sha1":"2b7b0ffcfe8aca40ced147fb7ce107010392d6b9","sha256":"d49e8f04be7ccbb69e87ae474ee50f6903b780451989e66d35ffc247a80510fe","sha512":"836c832111c285f7cb692c4eb62e2bca615017b6ab4af6920674f17df0ae1da040f7171208d5d312c3c43ed8ed7e49b653e7fce0948f24076d0548f7c8e8f25a","ssdeep":"","tlshash":"430197321aa2602eecb3ab3bf04a9d8c023aa117eeb705ccb59cca15c38d95874a5041","first_seen":"2025-10-22T21:08:41.081019Z","last_seen":"2026-09-03T22:44:52.862185Z","times_seen":85737,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/uploads/2022/02/ERGOTERAPIA-CARIBU-FAV.png","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:09.495Z","timestamp":1788464169495,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ergoterapiacaribu.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:40:45 GMT","end":"Sat, 31 Oct 2026 23:40:44 GMT"},"fingerprint":{"sha1":"D7:58:1B:FB:39:C1:F0:58:9E:05:72:09:9C:3B:AC:66:22:D0:8C:74","sha256":"FE:4B:C4:1C:58:63:30:E4:01:E8:D2:2E:B1:C1:03:A2:2B:0F:67:F2:65:28:9C:44:91:28:03:C4:FD:1E:13:66"}}},"request":{"raw":"GET /wp-content/uploads/2022/02/ERGOTERAPIA-CARIBU-FAV.png HTTP/1.1\r\nHost: ergoterapiacaribu.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nCookie: g_state={\"i_l\":1,\"i_ll\":1788464169376,\"i_b\":\"0QPB5qF+Lg5KWkuuQmr86FfwTUzW6HQozX9UUWlMG8Y\",\"i_e\":{\"enable_itp_optimization\":24},\"i_et\":1788464169376}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:36:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 20867\r\nlast-modified: Wed, 26 Jun 2024 10:01:13 GMT\r\netag: \"667be6e9-5183\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20867,"size_decoded":21117,"mime_type":"image/png","magic":"PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced","md5":"88070538dfc61223b46f2633b4c45f86","sha1":"91e2de8dff440360866716507fbeec19740af4df","sha256":"1475ed718e4e28b9ca706996b455ce82895519de971c6f8323f9b371f3f73f85","sha512":"18ffc3bb38c9d51a857aae8b3d71735a7add403d609623c95dc314650235dc257587553f4dda959a2e724d14abd7230dd72e8ef5656713e1f5215c81d6dd5297","ssdeep":"384:l+Jf16+fa17kXSc2nyXTlxeEr8EuAoE5EN+Y86tyYGDCNEcEfcO:l+Tfkln0BJr8TAv5c+bMHY7","tlshash":"9792e1407760b638b6cd56b452dafacdc8130888638af4b3ee7914251079ad4db58faa","first_seen":"2025-10-07T11:15:08.507006Z","last_seen":"2026-09-03T19:36:52.99245Z","times_seen":4,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/uploads/2022/07/ERGOTERAPIA-CARIBU-SLIDER-HOME-3.jpg","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:09.831Z","timestamp":1788464169831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ergoterapiacaribu.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:40:45 GMT","end":"Sat, 31 Oct 2026 23:40:44 GMT"},"fingerprint":{"sha1":"D7:58:1B:FB:39:C1:F0:58:9E:05:72:09:9C:3B:AC:66:22:D0:8C:74","sha256":"FE:4B:C4:1C:58:63:30:E4:01:E8:D2:2E:B1:C1:03:A2:2B:0F:67:F2:65:28:9C:44:91:28:03:C4:FD:1E:13:66"}}},"request":{"raw":"GET /wp-content/uploads/2022/07/ERGOTERAPIA-CARIBU-SLIDER-HOME-3.jpg HTTP/1.1\r\nHost: ergoterapiacaribu.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nCookie: g_state={\"i_l\":1,\"i_ll\":1788464169376,\"i_b\":\"0QPB5qF+Lg5KWkuuQmr86FfwTUzW6HQozX9UUWlMG8Y\",\"i_e\":{\"enable_itp_optimization\":24},\"i_et\":1788464169376}; _ga_M560J7VV6T=GS2.1.s1788464169$o1$g0$t1788464169$j60$l0$h0; _ga=GA1.1.647044366.1788464170\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:36:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 844253\r\nlast-modified: Wed, 26 Jun 2024 10:01:36 GMT\r\netag: \"667be700-ce1dd\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":844253,"size_decoded":844506,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x750, components 3","md5":"f7720019555d278ccc6c7b5171ce8fef","sha1":"48309b8d57f9bfa50fbbfb0793bb2ea72b59ec27","sha256":"3c0fbff0e1b2f5bc2715302cf82a7261adeced9cd2d376e0920c48ca62f50817","sha512":"e07bb4ceba6848352ecafd864c2779247e70f5132e5d8a87b9f75f93670995f99a64b27df38881380c97a759b93533f9922f0b10d6e84800d5b07c4184d30f37","ssdeep":"24576:3YvY4zmfdGFT7z8P5AQUOK9D/f3xbypC2jwlhvP/:B4CfdioP5AQUj9DBbiJchv","tlshash":"34053382e8e292f0295e694870a17c5bf702627422c3e3a0553f9ee697fa537577c3c4","first_seen":"2025-10-07T11:15:08.501582Z","last_seen":"2026-09-03T19:36:52.993177Z","times_seen":4,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/uploads/fusion-styles/d174f0ef18b0e66aa784eed69ffdd310.min.css?ver=3.6.1","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:08.786Z","timestamp":1788464168786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ergoterapiacaribu.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:40:45 GMT","end":"Sat, 31 Oct 2026 23:40:44 GMT"},"fingerprint":{"sha1":"D7:58:1B:FB:39:C1:F0:58:9E:05:72:09:9C:3B:AC:66:22:D0:8C:74","sha256":"FE:4B:C4:1C:58:63:30:E4:01:E8:D2:2E:B1:C1:03:A2:2B:0F:67:F2:65:28:9C:44:91:28:03:C4:FD:1E:13:66"}}},"request":{"raw":"GET /wp-content/uploads/fusion-styles/d174f0ef18b0e66aa784eed69ffdd310.min.css?ver=3.6.1 HTTP/1.1\r\nHost: ergoterapiacaribu.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:36:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Sep 2026 04:02:42 GMT\r\netag: W/\"6a964e62-a2abb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":666299,"size_decoded":74163,"mime_type":"text/css","magic":"ASCII text, with very long lines (53277)","md5":"d174f0ef18b0e66aa784eed69ffdd310","sha1":"323036fbbc136863525c08e0665574e45c02d25e","sha256":"806cbfb55e4929ea247729f5aba9d4cf08445c355fffc356a92e4eec84226113","sha512":"5c8a5319779a964911229fbdea5d38bc49cc5e4263e7da7537287df06783cbb0ba89c379576dc96c3a7508f4123f4bc93067fbd08738f7c0b5b92005fccc40bc","ssdeep":"6144:6uw6JnJdvRAmKxh5CNhr8HHq4feSudks0C3Ekln85RLts/4SrTCVhIai5WVLOEgu:T3dv+vxh5CNhwHHteTCXSVSPi4","tlshash":"98e4a6d4949030d42323d22ea6c6f96c1637afe0f7124fadf0bf91084bca551e6966f9","first_seen":"2025-10-07T11:15:08.509206Z","last_seen":"2026-09-03T19:36:52.993854Z","times_seen":4,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/uploads/revslider/video-media/ERGOTERAPIA-CARIBU-RIABILITAZIONE-MANO-SLIDER_2.jpeg","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:09.694Z","timestamp":1788464169694,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ergoterapiacaribu.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:40:45 GMT","end":"Sat, 31 Oct 2026 23:40:44 GMT"},"fingerprint":{"sha1":"D7:58:1B:FB:39:C1:F0:58:9E:05:72:09:9C:3B:AC:66:22:D0:8C:74","sha256":"FE:4B:C4:1C:58:63:30:E4:01:E8:D2:2E:B1:C1:03:A2:2B:0F:67:F2:65:28:9C:44:91:28:03:C4:FD:1E:13:66"}}},"request":{"raw":"GET /wp-content/uploads/revslider/video-media/ERGOTERAPIA-CARIBU-RIABILITAZIONE-MANO-SLIDER_2.jpeg HTTP/1.1\r\nHost: ergoterapiacaribu.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nCookie: g_state={\"i_l\":1,\"i_ll\":1788464169376,\"i_b\":\"0QPB5qF+Lg5KWkuuQmr86FfwTUzW6HQozX9UUWlMG8Y\",\"i_e\":{\"enable_itp_optimization\":24},\"i_et\":1788464169376}; _ga_M560J7VV6T=GS2.1.s1788464169$o1$g0$t1788464169$j60$l0$h0; _ga=GA1.1.647044366.1788464170\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:36:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 72500\r\nlast-modified: Mon, 31 Mar 2025 08:36:25 GMT\r\netag: \"67ea5409-11b34\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72500,"size_decoded":72752,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x564, components 3","md5":"6dbbe8653d717030fc186353f3903907","sha1":"44c892c30a4f44fbea2027f6dec5143c338d2377","sha256":"9d9125b99d100a8ed5756f50fc6000a0ed7618cc70ef16ead19faf7a427467b2","sha512":"e99c147e7b24f9df3a2dd42164e5b282a24af1f7add1c68051d9059b8f647e3b6c70d05cac449f0766d7e23190dbbd787701285031dd6457709045274c960dba","ssdeep":"1536:SBXojSyK5ZeWwOTyv23RGFXFLLU7YOLt4IwUo//Zw:SBKS1eWwOTyQYMYOR4IwUoXa","tlshash":"37630276fb4051b4cb2805f633cd9b1cd7b6ed526cb59d3888e0e846a18647cbf70592","first_seen":"2025-10-07T11:15:08.499657Z","last_seen":"2026-09-03T19:36:52.99466Z","times_seen":4,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.15","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:08.983Z","timestamp":1788464168983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ergoterapiacaribu.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:40:45 GMT","end":"Sat, 31 Oct 2026 23:40:44 GMT"},"fingerprint":{"sha1":"D7:58:1B:FB:39:C1:F0:58:9E:05:72:09:9C:3B:AC:66:22:D0:8C:74","sha256":"FE:4B:C4:1C:58:63:30:E4:01:E8:D2:2E:B1:C1:03:A2:2B:0F:67:F2:65:28:9C:44:91:28:03:C4:FD:1E:13:66"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.15 HTTP/1.1\r\nHost: ergoterapiacaribu.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:36:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Jun 2024 10:04:52 GMT\r\netag: W/\"667be7c4-e168\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57704,"size_decoded":11908,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (12602)","md5":"11188e3c0006d83216e161ae1d59c86e","sha1":"158c7818f4d65b85bd613b35f81a5ff62972522b","sha256":"6540abd4143b1bce02006ebb345dd9a4c6bb18e5580c529361b6e3e1b7b8522c","sha512":"9390e637dd537c242bb3664379763c0e36a13e2be08d3dd93955c2dac92203bc36a250be7a1338e3bdb4886b554ed288179420d6ebba5acbfd3a18ac40012df8","ssdeep":"1536:CHg6e08NdtPdmE/Z818mdmUBNmMghSk5h5rEUUrIUkx0+8rkUIpLM+IrAI9dHvQz:zftPdm57lu","tlshash":"3743e97198d11da8721bc680e6cc4bd8262dcd23ae530cadf656311dc3de5ca517abce","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-09-03T19:36:52.995345Z","times_seen":1984,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYY.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:09.118Z","timestamp":1788464169118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYY.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ergoterapiacaribu.ch\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45712\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:14 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 119095\r\nlast-modified: Mon, 08 Sep 2025 18:10:49 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45712,"size_decoded":46525,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45712, version 1.0","md5":"b2c9031d9fd6493ccda94908cdba4abd","sha1":"d8b4e62dbb826591e45b6b7245edbca76b4f48a4","sha256":"e2291e842cf5af167122a22881a740c7f2dda7716f1e8cd76680264f4a859470","sha512":"b2a0c2a42b5d755ec7bb3be02d8969f9847a85ec309f35d52ebc3c98ac5db261f88a6b70003295ad0a2e467e37b600694b2b8c8a5201036c3d0853b34515da5d","ssdeep":"768:7Alk3Vzs14DNE+WtOrSGDz68e9zamVMwSxn0uFqc8NyQ+Kxh/D6:f3BC4pEpOuB8k+wSR0XfyjW9e","tlshash":"e623f2ca8c4eed26d13d663429f168431e59604ce598963df2d88e2fb959f95cc3024f","first_seen":"2025-03-04T12:26:57.950887Z","last_seen":"2026-09-03T19:36:52.99599Z","times_seen":1738,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":3,"connect":32,"send":0,"wait":19,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/uploads/2022/07/ERGOTERAPIA-CARIBU-SLIDER-HOME-5.jpg","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:09.829Z","timestamp":1788464169829,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ergoterapiacaribu.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:40:45 GMT","end":"Sat, 31 Oct 2026 23:40:44 GMT"},"fingerprint":{"sha1":"D7:58:1B:FB:39:C1:F0:58:9E:05:72:09:9C:3B:AC:66:22:D0:8C:74","sha256":"FE:4B:C4:1C:58:63:30:E4:01:E8:D2:2E:B1:C1:03:A2:2B:0F:67:F2:65:28:9C:44:91:28:03:C4:FD:1E:13:66"}}},"request":{"raw":"GET /wp-content/uploads/2022/07/ERGOTERAPIA-CARIBU-SLIDER-HOME-5.jpg HTTP/1.1\r\nHost: ergoterapiacaribu.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nCookie: g_state={\"i_l\":1,\"i_ll\":1788464169376,\"i_b\":\"0QPB5qF+Lg5KWkuuQmr86FfwTUzW6HQozX9UUWlMG8Y\",\"i_e\":{\"enable_itp_optimization\":24},\"i_et\":1788464169376}; _ga_M560J7VV6T=GS2.1.s1788464169$o1$g0$t1788464169$j60$l0$h0; _ga=GA1.1.647044366.1788464170\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:36:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 814883\r\nlast-modified: Wed, 26 Jun 2024 10:01:39 GMT\r\netag: \"667be703-c6f23\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":814883,"size_decoded":815136,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x565, components 3","md5":"bbf22f6bc583a621088ffaaaa97dc3a5","sha1":"e67fe8da6547e940e210eb67348474365bd2f304","sha256":"7f3bdc8ff920cf29c0394b4c69e0af3c8c15b70315cd1cfbc512f927448966b1","sha512":"1fc44c562ae695f2ca86e3a3d12bddcb759e538bd8cfce090a7893116141b88ccbcd3ea7d0910db57a842be6781e6aaef66d48401aeaad5efab3dc23405e9ab4","ssdeep":"24576:SlM7c5WoEHfmi6tZ67CVbspqpZEqsPHQR:SeI0osfoUq+qioR","tlshash":"780533cbe23b4b92c1b3f4882631508d9abb49fce5a22112eef5e8e4714501876d5cf7","first_seen":"2025-10-07T11:15:08.532917Z","last_seen":"2026-09-03T19:36:52.996489Z","times_seen":4,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/plugins/turbosmtp/public/js/turbosmtp-public.js?ver=4.9.8","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:08.979Z","timestamp":1788464168979,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ergoterapiacaribu.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:40:45 GMT","end":"Sat, 31 Oct 2026 23:40:44 GMT"},"fingerprint":{"sha1":"D7:58:1B:FB:39:C1:F0:58:9E:05:72:09:9C:3B:AC:66:22:D0:8C:74","sha256":"FE:4B:C4:1C:58:63:30:E4:01:E8:D2:2E:B1:C1:03:A2:2B:0F:67:F2:65:28:9C:44:91:28:03:C4:FD:1E:13:66"}}},"request":{"raw":"GET /wp-content/plugins/turbosmtp/public/js/turbosmtp-public.js?ver=4.9.8 HTTP/1.1\r\nHost: ergoterapiacaribu.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:36:09 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 479\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 12 Aug 2026 08:25:28 GMT\r\netag: \"346-658d55478748e-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":838,"size_decoded":819,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"49cea0a781874a962879c2caca9bc322","sha1":"72c1650de2b93ef320d2db873fbb473fe360269c","sha256":"57a50c99a31ef4e89e86664e96f6dfbdde163a2eb96e88b3b492c49aa4be2f37","sha512":"7ebf5da4637794cdab0d199e8b0550e9230a1550804a4ce7fc723a8881e16d12327b9c40bceecff54ece29dde71bf41e63e8510adf0827c4cd13c2392e6250a6","ssdeep":"","tlshash":"63011ecefbc22622c0337ab85def739873ba902581d66ec42850013c562193f8067cdc","first_seen":"2023-03-07T01:03:06Z","last_seen":"2026-09-03T20:25:30.855413Z","times_seen":22599,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff?5510888","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:08.990Z","timestamp":1788464168990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ergoterapiacaribu.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:40:45 GMT","end":"Sat, 31 Oct 2026 23:40:44 GMT"},"fingerprint":{"sha1":"D7:58:1B:FB:39:C1:F0:58:9E:05:72:09:9C:3B:AC:66:22:D0:8C:74","sha256":"FE:4B:C4:1C:58:63:30:E4:01:E8:D2:2E:B1:C1:03:A2:2B:0F:67:F2:65:28:9C:44:91:28:03:C4:FD:1E:13:66"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff?5510888 HTTP/1.1\r\nHost: ergoterapiacaribu.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ergoterapiacaribu.ch/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:36:09 GMT\r\ncontent-type: font/woff\r\ncontent-length: 7536\r\nlast-modified: Wed, 26 Jun 2024 10:06:38 GMT\r\netag: \"667be82e-1d70\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7536,"size_decoded":7785,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 7536, version 1.0","md5":"04eb8fc57f27498e5ae37523e3bfb2c7","sha1":"d942ae11706c3f7e511e3c49b0e4574d7ad199c4","sha256":"f7b9c3065e55fa3b9e320093612e7b30dcb14355a44ec461247b495a3e729686","sha512":"fa6508c8a1a822794036174b0b9dbc6e91b5afc1fd340381b868ede6d928dd0f3e66b5a91308d2c0c4c4c64b27dab7761a904c0b6e6b3c0e3e736e5d6342f365","ssdeep":"192:340F/mM4Oa0wA2jPOf2X62xqpjjjaT64iSNizw:34sxBwCujqpj/aT6nSYzw","tlshash":"20f18e14fec0f56dfd8f52702780e6f6b2646de260560dc52d48e65c14e291ae27d47c","first_seen":"2023-04-05T13:50:09Z","last_seen":"2026-09-03T21:52:20.607245Z","times_seen":32760,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WXWNTV93","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:09.065Z","timestamp":1788464169065,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtm.js?id=GTM-WXWNTV93 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 03 Sep 2026 19:36:09 GMT\r\nexpires: Thu, 03 Sep 2026 19:36:09 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 03 Sep 2026 18:02:15 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 117112\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":331238,"size_decoded":117762,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4944)","md5":"fc37f4f4a3c2427abfbb2445d7db8421","sha1":"d0e09c19286c032df22239bb05fe0e91feddfd11","sha256":"02668399085e85ef3f75cd989d175f345ee1ac7ae990c09963bf8f56bc672b9e","sha512":"3bd5f8c6f2c3e0158ee6bece1e9742eb3b9794b33a400fdbe437f9cc7488afce3c5cc68fca6c64001483619c25f4efa0490c75fa5212154927525e852fca0d7c","ssdeep":"3072:D/MR3UU9xBzqVPG8HU0W7mNnAE+bOk86xRF2V9KsCqIfct2WwG/TEEq3Co/Ik6kC:utzqVO80mJWhkCBcuG/TEEq3CoRdZoac","tlshash":"376409ccb3d6b46283a3b574503f014bb23a79a2b84cc894f286e9d42d7466a5177f7c","first_seen":"2026-09-03T18:52:13.501307Z","last_seen":"2026-09-03T19:36:52.998287Z","times_seen":2,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/plugins/turbosmtp/public/css/turbosmtp-public.css?ver=4.9.8","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:08.785Z","timestamp":1788464168785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ergoterapiacaribu.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:40:45 GMT","end":"Sat, 31 Oct 2026 23:40:44 GMT"},"fingerprint":{"sha1":"D7:58:1B:FB:39:C1:F0:58:9E:05:72:09:9C:3B:AC:66:22:D0:8C:74","sha256":"FE:4B:C4:1C:58:63:30:E4:01:E8:D2:2E:B1:C1:03:A2:2B:0F:67:F2:65:28:9C:44:91:28:03:C4:FD:1E:13:66"}}},"request":{"raw":"GET /wp-content/plugins/turbosmtp/public/css/turbosmtp-public.css?ver=4.9.8 HTTP/1.1\r\nHost: ergoterapiacaribu.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:36:08 GMT\r\ncontent-type: text/css\r\ncontent-length: 106\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 12 Aug 2026 08:25:28 GMT\r\netag: \"62-658d55478748e-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98,"size_decoded":431,"mime_type":"text/css","magic":"ASCII text","md5":"e6094661d8923e95b233019ebff7c8f0","sha1":"cfd836d385d475baffee45d85cfeb9bb36e70d9e","sha256":"547dda3c14b284819be511be1e410da94a5efc6ccc4a9afe1c75394f9333191a","sha512":"b5684920345ccc14419cec135d43521bdc9b77618befa0096e11e33414dba09225ffe8e19ef10f3d75a74a086cfa40be2ebf3a4310fa6395e3e2d407a7451995","ssdeep":"","tlshash":"5eb0120b56b51c0700051d30bb0b80ce213d291e43b65004284711fcfc16d781316c9f","first_seen":"2023-04-05T14:27:18Z","last_seen":"2026-09-03T19:36:52.99893Z","times_seen":26839,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:08.787Z","timestamp":1788464168787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ergoterapiacaribu.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:40:45 GMT","end":"Sat, 31 Oct 2026 23:40:44 GMT"},"fingerprint":{"sha1":"D7:58:1B:FB:39:C1:F0:58:9E:05:72:09:9C:3B:AC:66:22:D0:8C:74","sha256":"FE:4B:C4:1C:58:63:30:E4:01:E8:D2:2E:B1:C1:03:A2:2B:0F:67:F2:65:28:9C:44:91:28:03:C4:FD:1E:13:66"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: ergoterapiacaribu.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:36:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 26 Jun 2024 11:01:44 GMT\r\netag: W/\"667bf518-15601\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":29840,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-03T22:47:35.063832Z","times_seen":1045222,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/client","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.253.148.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:08.986Z","timestamp":1788464168986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:51 GMT","end":"Mon, 02 Nov 2026 08:39:50 GMT"},"fingerprint":{"sha1":"FC:B8:DC:ED:6F:0B:18:09:F8:63:FD:24:B5:43:5B:82:24:12:8D:CE","sha256":"AE:2E:F5:9B:87:A8:3F:F9:28:7F:20:01:D3:0B:0D:96:0C:5D:E4:B6:0C:7C:14:E6:F7:92:2C:95:FF:78:7D:0E"}}},"request":{"raw":"GET /gsi/client HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nexpires: Thu, 03 Sep 2026 19:36:09 GMT\r\ndate: Thu, 03 Sep 2026 19:36:09 GMT\r\ncache-control: private, max-age=1800\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-BTd3N_MhZDiK7bSn6PmcEg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http\r\nreport-to: {\"group\":\"coop_dd7de8473bddc59c6b748810a67a39b1\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_dd7de8473bddc59c6b748810a67a39b1\"\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":270869,"size_decoded":101305,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2663)","md5":"d1789d5a5c1c4631cb66078031576a91","sha1":"433c45d69173147a265683a4dc8ec700fc4847ba","sha256":"6c8590b09dda05b9a5d97941178a909742b2ce5db417edecc7cf113e417c56b1","sha512":"5bb0e4872aa1b7e9585b1f5db1bde9c98975ff139e990e618e8c83453872142af7bb5d273c3bf2cdaacf15e240198afa95b6e6c647ed3d8d74d944b2aa61c627","ssdeep":"6144:sddWggR7hxy5XsIJFTS/0o5Sfwnkc+8MPaCD9eLkFU:sdVssQ/0o5isHdMPaCD9eYU","tlshash":"e9444adcb6e270359222f8b5c43f410ab076a679f4498cacfa94c5f5acb0d890167f79","first_seen":"2026-08-27T02:07:04.341983Z","last_seen":"2026-09-03T22:20:09.96684Z","times_seen":868,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":245,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/plugins/revslider/public/assets/assets/dummy.png","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:09.007Z","timestamp":1788464169007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ergoterapiacaribu.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:40:45 GMT","end":"Sat, 31 Oct 2026 23:40:44 GMT"},"fingerprint":{"sha1":"D7:58:1B:FB:39:C1:F0:58:9E:05:72:09:9C:3B:AC:66:22:D0:8C:74","sha256":"FE:4B:C4:1C:58:63:30:E4:01:E8:D2:2E:B1:C1:03:A2:2B:0F:67:F2:65:28:9C:44:91:28:03:C4:FD:1E:13:66"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/assets/dummy.png HTTP/1.1\r\nHost: ergoterapiacaribu.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:36:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 68\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 26 Jun 2024 10:04:51 GMT\r\netag: \"44-61bc8252beb9a\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":68,"size_decoded":341,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced","md5":"2a637d3d825673c0e3462fa4ed9a1c5c","sha1":"81668d396da22832d75a986407ff10035e0d5899","sha256":"69539b5b3777cffda28a66d7f2aa9b17c91ee1ec8fd50c00c442af91753a60f7","sha512":"dc7c40381b3d22919e32c1b700ccb77b1b0aea2690642d01c1ac802561e135c01d5a4d2a0ea18efc0ec3362e8c549814a10a23563f1f56bd62aee0ced7e2bd99","ssdeep":"","tlshash":"8da002f2a3d1dd3cc68d4173c5340b10fd3141af492516190447f4276d627e6498cba6","first_seen":"2023-04-05T13:50:09Z","last_seen":"2026-09-03T22:37:17.705676Z","times_seen":59372,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYY.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:09.119Z","timestamp":1788464169119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYY.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ergoterapiacaribu.ch\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45712\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:14 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 119095\r\nlast-modified: Mon, 08 Sep 2025 18:10:49 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45712,"size_decoded":46525,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45712, version 1.0","md5":"b2c9031d9fd6493ccda94908cdba4abd","sha1":"d8b4e62dbb826591e45b6b7245edbca76b4f48a4","sha256":"e2291e842cf5af167122a22881a740c7f2dda7716f1e8cd76680264f4a859470","sha512":"b2a0c2a42b5d755ec7bb3be02d8969f9847a85ec309f35d52ebc3c98ac5db261f88a6b70003295ad0a2e467e37b600694b2b8c8a5201036c3d0853b34515da5d","ssdeep":"768:7Alk3Vzs14DNE+WtOrSGDz68e9zamVMwSxn0uFqc8NyQ+Kxh/D6:f3BC4pEpOuB8k+wSR0XfyjW9e","tlshash":"e623f2ca8c4eed26d13d663429f168431e59604ce598963df2d88e2fb959f95cc3024f","first_seen":"2025-03-04T12:26:57.950887Z","last_seen":"2026-09-03T19:36:52.99599Z","times_seen":1738,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":22,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:09.123Z","timestamp":1788464169123,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ergoterapiacaribu.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:40:45 GMT","end":"Sat, 31 Oct 2026 23:40:44 GMT"},"fingerprint":{"sha1":"D7:58:1B:FB:39:C1:F0:58:9E:05:72:09:9C:3B:AC:66:22:D0:8C:74","sha256":"FE:4B:C4:1C:58:63:30:E4:01:E8:D2:2E:B1:C1:03:A2:2B:0F:67:F2:65:28:9C:44:91:28:03:C4:FD:1E:13:66"}}},"request":{"raw":"GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: ergoterapiacaribu.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/wp-content/uploads/fusion-styles/d174f0ef18b0e66aa784eed69ffdd310.min.css?ver=3.6.1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:36:09 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 78212\r\nlast-modified: Wed, 26 Jun 2024 10:09:57 GMT\r\netag: \"667be8f5-13184\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78212,"size_decoded":78464,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78212, version 331.-31261","md5":"8c4f474a3aaa695346196b1f33fab616","sha1":"abc1ae262d760e104a5a5cb68614ac119fd0db18","sha256":"ef2369c82b6ec19bcf4fe76799d94edc43604e164c0f73978059536159845441","sha512":"8cebde83c69bf5cc28f64263efce6ac0179eb74e716461a2bd9f8a1aa24e9a1ec971f7d5487e9d4adcc4a970f241ca3d5f356a19abd57dda8dbcb5f1eb64ab09","ssdeep":"1536:MGgygaAeCFuk9I0yvQkAcaCfK+DBfT5UftBd5OCNY21r/CrDhy4DDh+xu:XglnpFz9KQkAhCfBxT5Uf7d59xiDEs","tlshash":"277312b4fa369bcfa19c7cd0418ff22bde4078296b9f550111cdfd606a12a747369d18","first_seen":"2023-04-06T21:42:42Z","last_seen":"2026-09-03T22:40:00.72577Z","times_seen":21500,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/uploads/2025/03/ERGOTERAPIA-CARIBU-RIABILITAZIONE-MANO-SLIDER.mp4","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:09.703Z","timestamp":1788464169703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ergoterapiacaribu.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:40:45 GMT","end":"Sat, 31 Oct 2026 23:40:44 GMT"},"fingerprint":{"sha1":"D7:58:1B:FB:39:C1:F0:58:9E:05:72:09:9C:3B:AC:66:22:D0:8C:74","sha256":"FE:4B:C4:1C:58:63:30:E4:01:E8:D2:2E:B1:C1:03:A2:2B:0F:67:F2:65:28:9C:44:91:28:03:C4:FD:1E:13:66"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/ERGOTERAPIA-CARIBU-RIABILITAZIONE-MANO-SLIDER.mp4 HTTP/1.1\r\nHost: ergoterapiacaribu.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nCookie: g_state={\"i_l\":1,\"i_ll\":1788464169376,\"i_b\":\"0QPB5qF+Lg5KWkuuQmr86FfwTUzW6HQozX9UUWlMG8Y\",\"i_e\":{\"enable_itp_optimization\":24},\"i_et\":1788464169376}; _ga_M560J7VV6T=GS2.1.s1788464169$o1$g0$t1788464169$j60$l0$h0; _ga=GA1.1.647044366.1788464170\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:36:09 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 2052615\r\nlast-modified: Mon, 31 Mar 2025 08:36:23 GMT\r\netag: \"67ea5407-1f5207\"\r\nx-powered-by: PleskLin\r\ncontent-range: bytes 0-2052614/2052615\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2052615,"size_decoded":2052887,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"ed721c5665d400c8ed299d8c46f597d2","sha1":"55eb794b675328f7e833a443ba80a4b64019aaf0","sha256":"916cd61dbd19d37d69d9b21152a9fc2d2d177a19c73a477d664d08abbcfd2ffe","sha512":"25c691127128b5f59a4a5245aa8ff04631764f2ee7434edbef20699f332334f50f3ef010ef990cf5d017347768ba644c02d6d02c1f7b642503033783ef47325a","ssdeep":"24576:YhA90C7VsP1pky0x9kdPnxsF/Tq7+ro8YJZzNLBMZSaIF0PC:Yw0YSPX0xO9KF/itZRLnr","tlshash":"012523b3872056c7e92b223436035b781a75e2a8a343e79773ff48d45f48601db651ee","first_seen":"2025-10-07T11:15:08.513166Z","last_seen":"2026-09-03T19:36:53.00125Z","times_seen":4,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-03T19:36:06.943Z","timestamp":1788464166943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ergoterapiacaribu.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:40:45 GMT","end":"Sat, 31 Oct 2026 23:40:44 GMT"},"fingerprint":{"sha1":"D7:58:1B:FB:39:C1:F0:58:9E:05:72:09:9C:3B:AC:66:22:D0:8C:74","sha256":"FE:4B:C4:1C:58:63:30:E4:01:E8:D2:2E:B1:C1:03:A2:2B:0F:67:F2:65:28:9C:44:91:28:03:C4:FD:1E:13:66"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ergoterapiacaribu.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:36:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 17625\r\nlink: \u003chttps://ergoterapiacaribu.ch/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://ergoterapiacaribu.ch/wp-json/wp/v2/pages/2090\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://ergoterapiacaribu.ch/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PHP/8.2.29, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Yoast SEO:28.2","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Site Kit:1.185.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"WordPress:7.0.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Google Sign-in","description":"Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.","website":"https://developers.google.com/identity/sign-in/web","common_platform_enumeration":"","icon":"Google.svg","categories":["Authentication"]},{"name":"Slider Revolution:6.5.15","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":101779,"size_decoded":18092,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (38372), with CRLF, LF line terminators","md5":"d714a3a486853a12f7d0a1b5677dc192","sha1":"efe52a24a8d0fabc8f47329cd734a0bcd10c803c","sha256":"9034ca00cc6fc573068fe26c9513e92ce972e74b74649e90cd5f8844fa013ee4","sha512":"e33560c9c7847a31277e5d5a11e2867ecc38e2fe0010c1d29c63f81ba269d7bdfb93f7ad24646ea6833e9849b1928ea8e544e042f5466db3e4cb86095aca117f","ssdeep":"768:mScVZdypJyn3oltdgAoVx/y6eegDGABeYxeebeBaTsMGMxY2OJn6yBuUzSH6cFGh:y9ypYn4ltb6e33zGZrCKtzCIpO1k","tlshash":"bda3d9e1b4c414a5601b612d8187ea5ce237efa0c7420bbef5fd51594f87da2a8f09f8","first_seen":"2026-09-03T18:52:13.545925Z","last_seen":"2026-09-03T19:36:53.001966Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1700,"timings":{"blocked":-1,"dns":48,"connect":30,"send":0,"wait":1527,"receive":30,"ssl":64},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/plugins/google-site-kit/dist/assets/js/sign-in-with-google-15a07dd57b5f79886b45.js","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:08.987Z","timestamp":1788464168987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ergoterapiacaribu.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:40:45 GMT","end":"Sat, 31 Oct 2026 23:40:44 GMT"},"fingerprint":{"sha1":"D7:58:1B:FB:39:C1:F0:58:9E:05:72:09:9C:3B:AC:66:22:D0:8C:74","sha256":"FE:4B:C4:1C:58:63:30:E4:01:E8:D2:2E:B1:C1:03:A2:2B:0F:67:F2:65:28:9C:44:91:28:03:C4:FD:1E:13:66"}}},"request":{"raw":"GET /wp-content/plugins/google-site-kit/dist/assets/js/sign-in-with-google-15a07dd57b5f79886b45.js HTTP/1.1\r\nHost: ergoterapiacaribu.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:36:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2026 08:24:46 GMT\r\netag: W/\"6a7c2dce-8e0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2272,"size_decoded":1277,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2272), with no line terminators","md5":"c6d3acc5c18d9e6f2e2d5b6f6fb512de","sha1":"11b8e2d6f82e22c2b267f41a9664986fd5aeae55","sha256":"ff4c0af5166b742904ad6a46e6c2854eae05cfb692de7bb04456226fb1a383eb","sha512":"521e33f908ea3ec959a505a081ae6abc1f522e29a093c144881bc604ec375bd063c29aa614852874e32383233fafbc2565f58a74b344ca61ac54803b2b19e437","ssdeep":"","tlshash":"054184c270e114fe51dd38af6431435930760698fd8ef665ac3d895a2eb8e460672ecf","first_seen":"2026-07-14T22:32:26.809072Z","last_seen":"2026-09-03T21:46:49.032235Z","times_seen":905,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:08.988Z","timestamp":1788464168988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Roboto:400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 03 Sep 2026 19:36:09 GMT\r\ndate: Thu, 03 Sep 2026 19:36:09 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5746,"size_decoded":2202,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"dfa65fcd6017ba2c1cf093c705e2c975","sha1":"305ddf2fa610a798dcb5c26c4cefae17edb092de","sha256":"55765d8b683a0ce25e43363f56ebd29632716d24c60cecf5dea499f86e124b68","sha512":"5abd0edeab527f3aec1620eda46530d18723204d76c835b4c23dbcb5fd913c4a37ae099ecf7a176c461da4fe6793d088456427d1d0fa46ed1c4e6e56020cab36","ssdeep":"96:1OEbaNslOEbaN3FZKOEbaNTOEbaNoTOEbaNEy+aZjzBrgOEbaNfubqGIFuV4yOEd:2NsmNRNkNokNEqbN2bqGIwV4BNCNCwNX","tlshash":"66c10e91041704409b834cd227ce7f35fe1f92116145d0b9ebfc9b6b9debda6426835e","first_seen":"2026-02-19T23:10:15.778009Z","last_seen":"2026-09-03T22:45:06.515516Z","times_seen":18631,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":6,"connect":15,"send":0,"wait":35,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.15","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:08.991Z","timestamp":1788464168991,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ergoterapiacaribu.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:40:45 GMT","end":"Sat, 31 Oct 2026 23:40:44 GMT"},"fingerprint":{"sha1":"D7:58:1B:FB:39:C1:F0:58:9E:05:72:09:9C:3B:AC:66:22:D0:8C:74","sha256":"FE:4B:C4:1C:58:63:30:E4:01:E8:D2:2E:B1:C1:03:A2:2B:0F:67:F2:65:28:9C:44:91:28:03:C4:FD:1E:13:66"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.15 HTTP/1.1\r\nHost: ergoterapiacaribu.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:36:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 26 Jun 2024 10:04:52 GMT\r\netag: W/\"667be7c4-1f69c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":128668,"size_decoded":47236,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (45108)","md5":"066a9b9002b3169aea77c1e8ce88bcc9","sha1":"fa9c1343d254cc21e1aca1d0e0fc04828b7d8d7b","sha256":"1619041e2f274c7f79e24049e0710c53b99804c7ba4aec758dba1eb6a7166bd9","sha512":"68ff84e0f24f69ce6447286848f8e36601d789cc11f384b13b7db37be75b79a3e0ec95fc29e050fd925345c90aae6829988dbffdc90125dfc96722a3514cd68c","ssdeep":"1536:xrex7yX+Iz6ZKQpn8qwuQTBfvk6RtmSkgHJpZ7t0Zif/8m/xwYE/uVEmgX6wvBp4:lz6twBfvk4t55CifEm/Y+E1XXBNJq5","tlshash":"63c34cdd7251b432129626a5452f0a0ff23b9d19740b452cf368e4c87d389a990fffba","first_seen":"2023-03-07T01:02:41Z","last_seen":"2026-09-03T19:36:53.00419Z","times_seen":1813,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/awb-icons.woff","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:09.446Z","timestamp":1788464169446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ergoterapiacaribu.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:40:45 GMT","end":"Sat, 31 Oct 2026 23:40:44 GMT"},"fingerprint":{"sha1":"D7:58:1B:FB:39:C1:F0:58:9E:05:72:09:9C:3B:AC:66:22:D0:8C:74","sha256":"FE:4B:C4:1C:58:63:30:E4:01:E8:D2:2E:B1:C1:03:A2:2B:0F:67:F2:65:28:9C:44:91:28:03:C4:FD:1E:13:66"}}},"request":{"raw":"GET /wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/awb-icons.woff HTTP/1.1\r\nHost: ergoterapiacaribu.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/wp-content/uploads/fusion-styles/d174f0ef18b0e66aa784eed69ffdd310.min.css?ver=3.6.1\r\nCookie: g_state={\"i_l\":1,\"i_ll\":1788464169376,\"i_b\":\"0QPB5qF+Lg5KWkuuQmr86FfwTUzW6HQozX9UUWlMG8Y\",\"i_e\":{\"enable_itp_optimization\":24},\"i_et\":1788464169376}\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:36:09 GMT\r\ncontent-type: font/woff\r\ncontent-length: 19164\r\nlast-modified: Wed, 26 Jun 2024 10:09:22 GMT\r\netag: \"667be8d2-4adc\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":19164,"size_decoded":19414,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 19164, version 1.0","md5":"22174373c3c70b2b4dd4ce5b6e99be86","sha1":"a03cceb872a4b09cc5c4300f3a5394aa9ead38b2","sha256":"fcbb0a6bc275d69c281c0f174ff76928e5ea3e15c9ff945cba114ae7e502930b","sha512":"f0a851011e193f729a3e8d1824a5a436ed5650786066d99e61aca753e921db47d82d5de000a779ee7d1dfcfe2d7c3839db3e6561a36c84af93f413ac2ca0d48b","ssdeep":"384:1G+Ji3FSs/tKDEaAkVOsZPgIxjZ5BKGb1J7YBjLYy/XfpcEXv05:1G+5sVK4aBV3ZY8ZfKW1JkZ53fs5","tlshash":"5a822917cbe6cf4fe811e3748d4263215fe6ea10c639e3e1758a5d4894a88e44c2dbda","first_seen":"2023-05-03T08:23:47Z","last_seen":"2026-09-03T19:36:53.004908Z","times_seen":800,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/uploads/2022/09/ERGOTERAPIA-CARIBU-BIASCA-FOOTER.jpg","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:09.500Z","timestamp":1788464169500,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ergoterapiacaribu.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:40:45 GMT","end":"Sat, 31 Oct 2026 23:40:44 GMT"},"fingerprint":{"sha1":"D7:58:1B:FB:39:C1:F0:58:9E:05:72:09:9C:3B:AC:66:22:D0:8C:74","sha256":"FE:4B:C4:1C:58:63:30:E4:01:E8:D2:2E:B1:C1:03:A2:2B:0F:67:F2:65:28:9C:44:91:28:03:C4:FD:1E:13:66"}}},"request":{"raw":"GET /wp-content/uploads/2022/09/ERGOTERAPIA-CARIBU-BIASCA-FOOTER.jpg HTTP/1.1\r\nHost: ergoterapiacaribu.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nCookie: g_state={\"i_l\":1,\"i_ll\":1788464169376,\"i_b\":\"0QPB5qF+Lg5KWkuuQmr86FfwTUzW6HQozX9UUWlMG8Y\",\"i_e\":{\"enable_itp_optimization\":24},\"i_et\":1788464169376}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:36:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 867745\r\nlast-modified: Wed, 26 Jun 2024 10:01:50 GMT\r\netag: \"667be70e-d3da1\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":867745,"size_decoded":867998,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 900x798, components 3","md5":"ed5bde173bb9f36149862ecf2241ba58","sha1":"ae45c0f2331e3f81b984ade56842bdb90245e855","sha256":"471cec27e11e17e1ac0671b361a9b56e9d1b45770a98dede2b869c118520e402","sha512":"cd0b42cee2ef9dff847b81b7c9a02a84b1d251c3d0278a772571476cbc7d3a121aaa326cea56edf7b178b26864ae884fc3c7210abce0c4260d87d6423ecfebd4","ssdeep":"24576:vgfy2P1G4XIvU2da7HiOn7Dh+fWzeJAN79xrKNKnfWqZuXaI:YxkFdmL7DhGxAN79xGo+qZuXl","tlshash":"8e0533a200832e390948cc2ef755ade5360bbf8a97766937cd391470d9dca75b3c0e96","first_seen":"2025-10-07T11:15:08.5253Z","last_seen":"2026-09-03T19:36:53.005507Z","times_seen":4,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/uploads/2022/07/ERGOTERAPIA-CARIBU-SLIDER-HOME-2.jpg","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:13.354Z","timestamp":1788464173354,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ergoterapiacaribu.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:40:45 GMT","end":"Sat, 31 Oct 2026 23:40:44 GMT"},"fingerprint":{"sha1":"D7:58:1B:FB:39:C1:F0:58:9E:05:72:09:9C:3B:AC:66:22:D0:8C:74","sha256":"FE:4B:C4:1C:58:63:30:E4:01:E8:D2:2E:B1:C1:03:A2:2B:0F:67:F2:65:28:9C:44:91:28:03:C4:FD:1E:13:66"}}},"request":{"raw":"GET /wp-content/uploads/2022/07/ERGOTERAPIA-CARIBU-SLIDER-HOME-2.jpg HTTP/1.1\r\nHost: ergoterapiacaribu.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nCookie: g_state={\"i_l\":1,\"i_ll\":1788464169376,\"i_b\":\"0QPB5qF+Lg5KWkuuQmr86FfwTUzW6HQozX9UUWlMG8Y\",\"i_e\":{\"enable_itp_optimization\":24},\"i_et\":1788464169376}; _ga_M560J7VV6T=GS2.1.s1788464169$o1$g0$t1788464169$j60$l0$h0; _ga=GA1.1.647044366.1788464170\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:36:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1190741\r\nlast-modified: Wed, 26 Jun 2024 10:01:35 GMT\r\netag: \"667be6ff-122b55\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1190741,"size_decoded":1190996,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x750, components 3","md5":"fc3411dd5a0e449108967d3ea20a3c74","sha1":"8eac310d66e17bd51e5c2a808ec01ec59bffd011","sha256":"15f1cf71f55abdb31a16d2c53e4fb8cdeeb4fdce21cfc797745285e3c6806b79","sha512":"f8119778ad003cdff303a1282f887c7fef8f570e84771b67217e2a1ffe5ef1e94e830726339b9298ad38d4d26696a75b1779f9b629b39f5354e3228263bae62c","ssdeep":"24576:O8jJA58KDniGx0vcHLzT+TvHrmfKdF+WEiBDhGg:OyXGx0vcHnT+TPruKdLEib","tlshash":"2a2533790a3228fbc8adf19598f1ebcd252c58e90b8cda05b657300513dea6671cdcdb","first_seen":"2025-10-07T11:15:08.503238Z","last_seen":"2026-09-03T19:36:53.005992Z","times_seen":4,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ergoterapiacaribu.ch/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.15","fqdn":"ergoterapiacaribu.ch","domain":"ergoterapiacaribu.ch","tld":"ch"},"ip":{"addr":"152.228.141.62","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ergoterapiacaribu.ch/","date":"2026-09-03T19:36:08.993Z","timestamp":1788464168993,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ergoterapiacaribu.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:40:45 GMT","end":"Sat, 31 Oct 2026 23:40:44 GMT"},"fingerprint":{"sha1":"D7:58:1B:FB:39:C1:F0:58:9E:05:72:09:9C:3B:AC:66:22:D0:8C:74","sha256":"FE:4B:C4:1C:58:63:30:E4:01:E8:D2:2E:B1:C1:03:A2:2B:0F:67:F2:65:28:9C:44:91:28:03:C4:FD:1E:13:66"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.15 HTTP/1.1\r\nHost: ergoterapiacaribu.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ergoterapiacaribu.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:36:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 26 Jun 2024 10:04:52 GMT\r\netag: W/\"667be7c4-5e26c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":385644,"size_decoded":93084,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64288)","md5":"2c60ddda25c8fb5d11d145d8a012c3ea","sha1":"f283d07939cac81eebb572128e3f8b2db79f8002","sha256":"b8b9a9ff0a9f08569fa27b147ed48bb8cc37ef85d7abb6547ea32066865a61a0","sha512":"e4ed331b932984779c5a2dece4cf441d7d4be3ade8a5d560fe73d951ea728628aeb336443e7a6f93391781d1795de69f9a9c3e1a2ca5f20273e05ac322440816","ssdeep":"6144:ESyVoh1kBwH4NrCXH2l1/UMGWWqT/s2L+PBFyFovbQb36DS2Qifj:ZeOjH4NTGWw2L+PBFyFov0uDJt","tlshash":"cb843de99531386900fb4397d05a451473b1e96aa3078490b2bbe2695c5ce8e02ffffd","first_seen":"2023-03-07T01:02:41Z","last_seen":"2026-09-03T19:36:53.006554Z","times_seen":1811,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ergoterapiacaribu.ch","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ergoterapiacaribu.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}