{"report_id":"47b0746e-3ac1-4ff6-950c-1c466dadd890","version":6,"status":"done","tags":[],"date":"2026-05-27T00:12:01Z","url":{"schema":"http","addr":"farmaciadellesostanze.com","fqdn":"farmaciadellesostanze.com","domain":"farmaciadellesostanze.com","tld":"com"},"ip":{"addr":"172.67.213.74","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"farmaciadellesostanze.com/","fqdn":"farmaciadellesostanze.com","domain":"farmaciadellesostanze.com","tld":"com"},"title":"Site is undergoing maintenance","dom":{"size":5608,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1007)","md5":"a797bc0fb37f4dac1cbcfdd7d3e5ad32","sha1":"19b60dd08cf98da494527dbe94adf1249ddcc6ce","sha256":"3bc1a02372ec76e017aa91caf7d15266d66d90f25fb397da838c5efc8c6116b6","sha512":"bab4de1acbc0c0e858e55d90b9fc331f4e00c22e6de98b22075c67a23566cfe34f8eec78ccd5b3898010ac98918687131403650eac5a7f04f9b282bcc849aaae","ssdeep":"96:8v13aMJfXJgnO36VvLb9C20kN9K1wyHHJOgUEvYXdGZq8GRtnGZExmlKfxi8fOiK:Ef5gna6VvLbuG9YTE3duGRtw8gMpduFB","tlshash":"c7c18632cd2d9c221067c6d4f145b76d90aa8537d3028a9e32fd815eafe3fe502a364d","dom_hash":"domhash67eca847f6a03371ffcd78d4ec43c57e","first_seen":"2026-05-26T19:37:27.72228Z","last_seen":"2026-05-27T00:12:02.209987Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"farmaciadellesostanze.com","fqdn":"farmaciadellesostanze.com","domain":"farmaciadellesostanze.com","tld":"com"},"ip":{"addr":"172.67.213.74","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-01T00:12:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"farmaciadellesostanze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"farmaciadellesostanze.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-24","domain_rank":0,"first_seen":"2026-04-28T15:25:42.406753Z","last_seen":"2026-05-26T17:13:34.700352Z","alert_count":9,"request_count":9,"received_data":306866,"sent_data":4500,"comment":"","tags":null,"fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"fonts.bunny.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"1999-11-22","domain_rank":56787,"first_seen":"2022-03-21T07:38:02Z","last_seen":"2026-05-25T07:40:10.34797Z","alert_count":0,"request_count":2,"received_data":26779,"sent_data":1071,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"farmaciadellesostanze.com/wp-content/plugins/maintenance/load/js/jquery.frontend.js?ver=1775773670","fqdn":"farmaciadellesostanze.com","domain":"farmaciadellesostanze.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"112c47ca670be7279689c0d5ecbefd20","sha1":"30b902ad5710b7050ed561bd6ce7ea8755461591","sha256":"2bc30f2470769a137e994cd92fa1ccf10e6f662b4ffae1397342344a913d2133","sha512":"8bf0f9df329df8c3607b9a6cf7c15732f5e9768b9e816a95f696c6ba6321fbe646b41110fdccf6fd0190bb76c47fed01014d5bf47c055852cb50afcfca6f4df1","ssdeep":"","tlshash":"dc41a92aa5280498c8776a24fefb1728f4676033b9468314f56d00a53fb22d32674ffc","size":1984,"data":"","first_seen":"2023-03-07T12:02:59Z","last_seen":"2026-08-14T04:31:05.21686Z","times_seen":1378,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"farmaciadellesostanze.com/_frontend-js-extra","fqdn":"farmaciadellesostanze.com","domain":"farmaciadellesostanze.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"138a1ccc2d89cda37c681850a26b8b51","sha1":"75a874350fcbfbc57d89252b8448f7d95d611a15","sha256":"3f010d67015d2c92bb4fdc9a323f583a67761185480c92a987bd655c9824a0b4","sha512":"17933333b51f0878bb2c940a7bd2bc8029e33eee262d0a3877b6680792658fd943be9869473d068fd64abc7fb3b6d6a9bb1fe53ec0517fdd95cab9eee8dc697d","ssdeep":"","tlshash":"a5e02651cdde20e145a7cdf4f24b326dc2c209fae1901486618dd08a0ef0dd542e2f4c","size":382,"data":"","first_seen":"2026-04-28T15:25:46.559805Z","last_seen":"2026-05-27T00:12:02.217983Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"farmaciadellesostanze.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"farmaciadellesostanze.com","domain":"farmaciadellesostanze.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-16T07:28:36.85022Z","times_seen":1021178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"farmaciadellesostanze.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"farmaciadellesostanze.com","domain":"farmaciadellesostanze.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-16T07:28:36.803616Z","times_seen":935143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"farmaciadellesostanze.com/","fqdn":"farmaciadellesostanze.com","domain":"farmaciadellesostanze.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-27T00:11:38.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farmaciadellesostanze.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 21:01:15 GMT","end":"Wed, 22 Jul 2026 21:59:31 GMT"},"fingerprint":{"sha1":"F2:5B:69:57:26:DE:D8:CE:9F:97:B6:40:9A:D0:95:4D:F8:7A:C7:B4","sha256":"4F:55:AA:51:72:E1:8B:7E:41:BE:2A:59:BC:95:1E:07:10:7A:80:FA:71:93:F9:FC:3A:F0:0A:1F:7C:45:55:8A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: farmaciadellesostanze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:11:39 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.3.30\r\nlink: \u003chttps://farmaciadellesostanze.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://farmaciadellesostanze.com/wp-json/wp/v2/pages/1246\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://farmaciadellesostanze.com/\u003e; rel=shortlink\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pLlL3ELEGy6tIYgWmoXdB0RwUtdyhnlfOEVhhMMy8h1tzP9B5Q1U5qtAABpSd1FgrjtUsAov4zxzJGWRcFkkForBrdaaTD5%2FeVV9FxTEgOT2CZLu87BsvItLbtZzDVWFgAY5X00lC4ZJapgD\"}]}\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: d4846033f945f7e17a388ce835c0a906-phx-edge8\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.446\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: a020cdad1ff5569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":5548,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1023)","md5":"1f078e2efbf2cf6ab71a47e39cb243c7","sha1":"c5c5ef0bd9c25ad79c5ae8abd3c41461d96f26d3","sha256":"91907e9c8d6b90f4db33b9d99e430bff680f33bd68291bbf11e021f1b11f288e","sha512":"39c6cd6648b1e78c29cdfb3f862feb380e070987b585e8a682b43572c6e7a4b76dd7b4180ab277237adeff34694e8a318b529c3df44b48c8cdce8addff12b293","ssdeep":"96:5v+gaWJfAJgvO36VvLb9C20kN9mwKHJOg8vYXPGXq8GreqnG/ExmlKfxi8fOi8Qa:Nfegva6VvLbuG9mgCPkGreaK8gMpduFl","tlshash":"25b196228d1e8c220057cae4e145b66dd4ab8537d3028a9a72fd845dafe3fd502a364d","first_seen":"2026-05-26T19:37:27.746507Z","last_seen":"2026-05-27T00:12:02.211595Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1024,"timings":{"blocked":37,"dns":17,"connect":1,"send":0,"wait":950,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"farmaciadellesostanze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"farmaciadellesostanze.com/wp-content/plugins/maintenance/load/css/style.css?ver=1775773670","fqdn":"farmaciadellesostanze.com","domain":"farmaciadellesostanze.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://farmaciadellesostanze.com/","date":"2026-05-27T00:11:39.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farmaciadellesostanze.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 21:01:15 GMT","end":"Wed, 22 Jul 2026 21:59:31 GMT"},"fingerprint":{"sha1":"F2:5B:69:57:26:DE:D8:CE:9F:97:B6:40:9A:D0:95:4D:F8:7A:C7:B4","sha256":"4F:55:AA:51:72:E1:8B:7E:41:BE:2A:59:BC:95:1E:07:10:7A:80:FA:71:93:F9:FC:3A:F0:0A:1F:7C:45:55:8A"}}},"request":{"raw":"GET /wp-content/plugins/maintenance/load/css/style.css?ver=1775773670 HTTP/1.1\r\nHost: farmaciadellesostanze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://farmaciadellesostanze.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:11:39 GMT\r\ncontent-type: text/css\r\ncontent-length: 3171\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 02 Jun 2026 17:13:12 GMT\r\nlast-modified: Thu, 09 Apr 2026 22:27:50 GMT\r\netag: \"4043-69d827e6-72ea50c9bbfebdf1;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: fc79c34811dfa09e66ac09662dcc5ec5-phx-edge8\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.445\r\naccept-ranges: bytes\r\nage: 25106\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v7Ykf9fH6KOW18AgcM52I%2BBCfxnqde1HCF5kkJDPJgDnaaSIJgkq%2BACLNGHptsUajIhfG13vCbqF7SLhSLplLpKpxXDupfoKC1Oiinbp43yiVuhm%2FZHiNOl1Q9pvBdei4f0%2BcQZ%2FGHAS4tD5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020cdb3ea743181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16451,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"abcfbc8bae6b06e1cca40f90e2b26237","sha1":"8da91c32131f99d350d0c844860cfe5be6680e12","sha256":"a6c91b63d3826a39e373c5079ac094082dc612e23638bbd9a0e74faa24ceca9e","sha512":"c56e1c2c6d94419cac7caa7ab8dfa34b347100c10fefb5a0f613ba3029732bbf2aa7a4ebcd43ce817affbe9eed9ff5019b50bd1856dfd0ccf9afccbf36210726","ssdeep":"384:i32ttvH4KLWy6kJLJh+mmilZu2Je4Pr0NutBSL9m/X8zewqHzA9/Ut:i32ttvH4eWy6kJLJh0ilZu2Jeir0N+BB","tlshash":"60723e295e06214e531bdba8b7f40b248f3841326b0788ff71e5656ec3c9778166a7ce","first_seen":"2025-08-03T22:25:14.903589Z","last_seen":"2026-08-11T03:26:18.202741Z","times_seen":719,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"farmaciadellesostanze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"farmaciadellesostanze.com/wp-content/plugins/maintenance/load/css/fonts.css?ver=1775773670","fqdn":"farmaciadellesostanze.com","domain":"farmaciadellesostanze.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://farmaciadellesostanze.com/","date":"2026-05-27T00:11:39.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farmaciadellesostanze.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 21:01:15 GMT","end":"Wed, 22 Jul 2026 21:59:31 GMT"},"fingerprint":{"sha1":"F2:5B:69:57:26:DE:D8:CE:9F:97:B6:40:9A:D0:95:4D:F8:7A:C7:B4","sha256":"4F:55:AA:51:72:E1:8B:7E:41:BE:2A:59:BC:95:1E:07:10:7A:80:FA:71:93:F9:FC:3A:F0:0A:1F:7C:45:55:8A"}}},"request":{"raw":"GET /wp-content/plugins/maintenance/load/css/fonts.css?ver=1775773670 HTTP/1.1\r\nHost: farmaciadellesostanze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://farmaciadellesostanze.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:11:39 GMT\r\ncontent-type: text/css\r\ncontent-length: 9774\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 02 Jun 2026 17:13:12 GMT\r\nlast-modified: Thu, 09 Apr 2026 22:27:50 GMT\r\netag: \"bd5c-69d827e6-88a24fbb27a4e9f6;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 8bdb4e3083554ec77e0dc6c66e7a8b29-phx-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.436\r\naccept-ranges: bytes\r\nage: 25106\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xbWmh%2BOJ4Xal4vMuQNDkielz4r%2FLUkTNRiOTmtaQgs%2FUZKxcnhX%2Fk7eV7YhpWvPbc1R7aaSSg9TFPxBJlY4QbgEp%2FPVOOyli0MK7BOmliJvGJbSbkkZQmW55dVRlHrXe7og6LLpS1pwlslln\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020cdb3fa763181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48476,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837), with CRLF line terminators","md5":"5fb4f4b0f6c0e07ec079e22119ba445b","sha1":"bd4aa9a088c718762be492b0dc8a9cd59cf11c17","sha256":"a91c36795c5ca61c5d432a09e2158cc841e178ea3037431d620ab25c68617cd8","sha512":"a94aeaa4795b6294700ee6c1d1ed413dc635bd441affcbfe347515fca7e311f9ee3dc173aaf5322dddf10b98b4d9d925836c610f9053e917af81d8da20f36a86","ssdeep":"768:/wlr+Klk3Yi+fwYUf2l8yQ/e9vDPwb1cw7o18M:/wlrniSUf2l7f9vDPlyo","tlshash":"bb2364e4e54d05d66732c48bffc1b36872a5fb3ce5851d68f12f290c29c226522c6bb9","first_seen":"2023-04-07T13:40:15Z","last_seen":"2026-08-14T04:31:05.215423Z","times_seen":1407,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"farmaciadellesostanze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/css?family=Open%20Sans:300,300italic,regular,italic,600,600italic,700,700italic,800,800italic:Latin","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://farmaciadellesostanze.com/","date":"2026-05-27T00:11:39.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 05:03:15 GMT","end":"Mon, 27 Jul 2026 05:03:14 GMT"},"fingerprint":{"sha1":"D4:56:1A:41:00:4F:0A:47:4C:EA:48:5B:5A:8B:9C:E5:08:D4:6A:7E","sha256":"F6:07:26:D6:FC:B4:22:07:45:96:FE:8C:D9:50:F5:7F:73:60:3F:8B:BE:F7:19:45:33:E2:BE:6C:AE:8C:BB:4B"}}},"request":{"raw":"GET /css?family=Open%20Sans:300,300italic,regular,italic,600,600italic,700,700italic,800,800italic:Latin HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://farmaciadellesostanze.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:11:39 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/21/2026 18:04:04\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 80fb8595f0fa79976e6546d63b2629b2\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":6336,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1445)","md5":"fcb98820f67d11281c51cf82d75201bc","sha1":"1bef3e3e13ea32dfbfc0595be15756a9566eb7a9","sha256":"45c1649dae3c4cba7e3829c7a852d4dc607f1b727ed1955ed7c82b5be0debba5","sha512":"cdecea9864f31bee40b6a9faaac8812d3cfc05f45891088412f0f90cd132861b828586b36dc9b0195ecbaffa7349c537b2455ba4f5af76380846c1c0d42bd511","ssdeep":"192:HWUwFUwPJAWUYUAWUmUc3EWUjUDWUbUMfOHRjAWUNUGWUWUEWUEUaDpRWUBFUB+G:2/PJajfgRjQBeH","tlshash":"5dd1ed7541162800d79328a323df5c234e0ed123b395e096af289dc08fa5679e7f67be","first_seen":"2025-01-04T15:16:57.24982Z","last_seen":"2026-08-14T04:31:05.220474Z","times_seen":1270,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":41,"dns":45,"connect":1,"send":0,"wait":2,"receive":0,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"farmaciadellesostanze.com/wp-content/uploads/2025/12/mt-sample-background.jpg","fqdn":"farmaciadellesostanze.com","domain":"farmaciadellesostanze.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://farmaciadellesostanze.com/","date":"2026-05-27T00:11:39.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farmaciadellesostanze.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 21:01:15 GMT","end":"Wed, 22 Jul 2026 21:59:31 GMT"},"fingerprint":{"sha1":"F2:5B:69:57:26:DE:D8:CE:9F:97:B6:40:9A:D0:95:4D:F8:7A:C7:B4","sha256":"4F:55:AA:51:72:E1:8B:7E:41:BE:2A:59:BC:95:1E:07:10:7A:80:FA:71:93:F9:FC:3A:F0:0A:1F:7C:45:55:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/mt-sample-background.jpg HTTP/1.1\r\nHost: farmaciadellesostanze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://farmaciadellesostanze.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:11:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 87768\r\ncache-control: public, max-age=604800\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 4d32b720c8a19f42216934829ad1b516-phx-edge9\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 1.182\r\naccept-ranges: bytes\r\nage: 25105\r\nlast-modified: Tue, 26 May 2026 17:13:13 GMT\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SNZuTh8pYur%2FZ0fRiazetBQ9FZTlWcOm7E6xRXAfWKoKHIn7gmtTNzJLCGBQdoQIPIyf%2B2rN4zzjcwZ5SwDtXb4g8TLlxDiy0N1IDGdCCrXsG7J2e5wN1z5TNbwqoUhBw3WpB3sKda%2F74mdI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020cdb3fa7a3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87768,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4d6a60087e74ea1af2ab715a0dcdaf65","sha1":"593b2dd1718e48d8e2b1649cff670ffdec2a1c53","sha256":"82b04d2dfbd72041df20dfd79dacaec786705a6720dbfb84d0b5225ab9ac3764","sha512":"0a361e0d0e08107d9c0445b516d4d6df09cf8279237edd00ab1abf1255592f1e1db416466dd35a25e231ff72d9cc1ff5b6f3e9fbeda9f5d996ed3e0cd698b6a3","ssdeep":"1536:Y8Tj0f1P1CkW1/igHE1Qct2AKmNyK/HLOX0ZrrQa08byVf/Mqd9nMXaeJp36pIET:YZ1L6E1v2AKKyK/H7rQa08byF/jd9Ibu","tlshash":"df831238d107209f004fa466865e4c3b499fb48f9d10855b256c5ebfb1eab5d04ee8bf","first_seen":"2026-04-04T06:10:46.896654Z","last_seen":"2026-07-09T06:56:45.720776Z","times_seen":22,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"farmaciadellesostanze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/open-sans/files/open-sans-latin-400-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://farmaciadellesostanze.com/","date":"2026-05-27T00:11:39.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 05:03:15 GMT","end":"Mon, 27 Jul 2026 05:03:14 GMT"},"fingerprint":{"sha1":"D4:56:1A:41:00:4F:0A:47:4C:EA:48:5B:5A:8B:9C:E5:08:D4:6A:7E","sha256":"F6:07:26:D6:FC:B4:22:07:45:96:FE:8C:D9:50:F5:7F:73:60:3F:8B:BE:F7:19:45:33:E2:BE:6C:AE:8C:BB:4B"}}},"request":{"raw":"GET /open-sans/files/open-sans-latin-400-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://farmaciadellesostanze.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:11:39 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18640\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"69ffa99b-48d0\"\r\nlast-modified: Sat, 09 May 2026 21:39:39 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.52\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/11/2026 09:26:20\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 38792612b872a247876af0cfda7433df\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18640,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18640, version 1.0","md5":"289ab8c3689e58c84c061039efc15d3a","sha1":"9432c99c4915ea17dea97eec0bbd0f2fa6ff0943","sha256":"0e44026ad31376af1b56593cd4acb4f353f8e8789c51759e18f64578e4ef296a","sha512":"4c0ea3fe4daefcd63f7337e7a8e86d169c0f4ce3543b12a69f9980a5bb598987521138454ad4df4474a1edb0fef0c38cfd2de312cb355c9c2665ea3445586787","ssdeep":"384:UubNl0SziXg7u9lPk6A/BViMAf2zAeyrmYAUXKb+cu5E0GW6o6:dbj0S2XjRk6A+MAf2UeGIUEbM4WZ6","tlshash":"9182d1454a3d7753f235a6425daef8cac2b5d42d56978c103be2541a3dff28e33109d8","first_seen":"2025-09-17T00:02:10.421759Z","last_seen":"2026-08-16T07:20:02.442832Z","times_seen":45051,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":7,"dns":1,"connect":1,"send":0,"wait":2,"receive":1,"ssl":4},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"farmaciadellesostanze.com/favicon.ico","fqdn":"farmaciadellesostanze.com","domain":"farmaciadellesostanze.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://farmaciadellesostanze.com/","date":"2026-05-27T00:11:39.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farmaciadellesostanze.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 21:01:15 GMT","end":"Wed, 22 Jul 2026 21:59:31 GMT"},"fingerprint":{"sha1":"F2:5B:69:57:26:DE:D8:CE:9F:97:B6:40:9A:D0:95:4D:F8:7A:C7:B4","sha256":"4F:55:AA:51:72:E1:8B:7E:41:BE:2A:59:BC:95:1E:07:10:7A:80:FA:71:93:F9:FC:3A:F0:0A:1F:7C:45:55:8A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: farmaciadellesostanze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://farmaciadellesostanze.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 27 May 2026 00:11:40 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 15 Feb 2026 06:50:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-security-policy: upgrade-insecure-requests\r\nplatform: hostinger\r\npanel: hpanel\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 78998a0642e803e443e1ccaa54410eff-phx-edge8\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L5hJaZR55uktl6AU5uFOYXpukWoTr%2BhxRjTvboCuElhHiqj7iQkkQBfUL3D2WgfvzDTp5JMQLavh0TJ%2FuncHlnvg%2BrfRv8fFkmO8Xr%2BTGez9sLSINVYaiZnav2oDM0HPIcpQtj0xCiVvqw26\"}]}\r\ncontent-encoding: br\r\ncf-ray: a020cdb56c843181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4511,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (371)","md5":"b16e9097fc7d3af8ebfcfce7aba0a42d","sha1":"2af3c8408b8445fe81d9a7c8d7cc8e8a05bf80f5","sha256":"e7db95c97a5d45787cc3e40cbcb93b748fefc65bc14e162c746e37f979861729","sha512":"53a7a2c276fbc5159231c162eb863504448515f1a078832b81f1bffeedb1c82932810b66748fd4111d1b8fb866622a5cc63e79e497227b611c90886ba45d3f3b","ssdeep":"96:tr+ulojsBwJG8YqVcqHL/GSrrLc1VhrJuzeK:tyoasBwJG8nVjaSeVhrJgeK","tlshash":"0891f88f25f381452603c99037f9b61499554007f685eca8bdee9228cfc4b8a41e3bdc","first_seen":"2025-04-22T08:45:29.599713Z","last_seen":"2026-08-16T07:28:51.624154Z","times_seen":39273,"resource_available":true,"data":null}},"time_used":931,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":931,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"farmaciadellesostanze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"farmaciadellesostanze.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"farmaciadellesostanze.com","domain":"farmaciadellesostanze.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://farmaciadellesostanze.com/","date":"2026-05-27T00:11:39.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farmaciadellesostanze.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 21:01:15 GMT","end":"Wed, 22 Jul 2026 21:59:31 GMT"},"fingerprint":{"sha1":"F2:5B:69:57:26:DE:D8:CE:9F:97:B6:40:9A:D0:95:4D:F8:7A:C7:B4","sha256":"4F:55:AA:51:72:E1:8B:7E:41:BE:2A:59:BC:95:1E:07:10:7A:80:FA:71:93:F9:FC:3A:F0:0A:1F:7C:45:55:8A"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: farmaciadellesostanze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://farmaciadellesostanze.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:11:39 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 29531\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 29 May 2026 05:31:51 GMT\r\nlast-modified: Wed, 24 Dec 2025 23:56:45 GMT\r\netag: \"15601-694c7dbd-55874b9046a2e637;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 25106\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 3c7853cc85494f543f745cb9a4f32024-phx-edge6\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xXFU4%2FPfSMnLPEJjMzFotZe2%2Blt2R17VbOsVhSTVR%2Fta%2FYpxIftwXl11ySAFoUu9R%2BBuWmctqXDT%2BAbTUHYE4kmLmsTOIZSWgJSsa0HYGufqg%2BOASKyBQ0F7%2FpRDWHoRYzYluMOpiKMzRMaY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020cdb3fa7f3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-16T07:28:36.85022Z","times_seen":1021178,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"farmaciadellesostanze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"farmaciadellesostanze.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"farmaciadellesostanze.com","domain":"farmaciadellesostanze.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://farmaciadellesostanze.com/","date":"2026-05-27T00:11:39.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farmaciadellesostanze.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 21:01:15 GMT","end":"Wed, 22 Jul 2026 21:59:31 GMT"},"fingerprint":{"sha1":"F2:5B:69:57:26:DE:D8:CE:9F:97:B6:40:9A:D0:95:4D:F8:7A:C7:B4","sha256":"4F:55:AA:51:72:E1:8B:7E:41:BE:2A:59:BC:95:1E:07:10:7A:80:FA:71:93:F9:FC:3A:F0:0A:1F:7C:45:55:8A"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: farmaciadellesostanze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://farmaciadellesostanze.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:11:39 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 4671\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 02 Jun 2026 17:13:12 GMT\r\nlast-modified: Wed, 24 Dec 2025 23:56:45 GMT\r\netag: \"3509-694c7dbd-9d673c6e48ea968;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: d9f3eb7ea887d1daf8e06eb93764a945-phx-edge6\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.442\r\naccept-ranges: bytes\r\nage: 25106\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yP8ymmsy3Rfxqq8zMAorMNMGh0nYYjx3CjoSN9ai%2FJUFKhldoqYhvWDArEs7v93PSRKmE4JUwAfdfXeDqIcq4Q0Rh3OpD%2FBfUgdZUEpr5AsT5lqRdJ2u5QXIZ2FrIgVYeZZEHTyyynXLyj6h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020cdb40a883181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-16T07:28:36.803616Z","times_seen":935143,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"farmaciadellesostanze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"farmaciadellesostanze.com/wp-content/plugins/maintenance/load/js/jquery.frontend.js?ver=1775773670","fqdn":"farmaciadellesostanze.com","domain":"farmaciadellesostanze.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://farmaciadellesostanze.com/","date":"2026-05-27T00:11:39.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farmaciadellesostanze.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 21:01:15 GMT","end":"Wed, 22 Jul 2026 21:59:31 GMT"},"fingerprint":{"sha1":"F2:5B:69:57:26:DE:D8:CE:9F:97:B6:40:9A:D0:95:4D:F8:7A:C7:B4","sha256":"4F:55:AA:51:72:E1:8B:7E:41:BE:2A:59:BC:95:1E:07:10:7A:80:FA:71:93:F9:FC:3A:F0:0A:1F:7C:45:55:8A"}}},"request":{"raw":"GET /wp-content/plugins/maintenance/load/js/jquery.frontend.js?ver=1775773670 HTTP/1.1\r\nHost: farmaciadellesostanze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://farmaciadellesostanze.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:11:39 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 546\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 01 Jun 2026 10:12:46 GMT\r\nlast-modified: Thu, 09 Apr 2026 22:27:50 GMT\r\netag: \"7c0-69d827e6-80045eaa58a6792f;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 25106\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 8aa33e7fda12f5a0888c1b1f44d66760-phx-edge6\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OYp4IGNmlMElium8Boj4vVzVvdGDrXQ1A8Tm9tdWpxFb2uLw3SvzPf7LelYaaa3bqlbPpePQtTBjh89RrtvnHWEgU%2B6ac60wqzA%2BKlisYj7nBUpJUSa91DRH9Lu91gZ7idCNQwV1nHXit%2FeP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020cdb40a8a3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":1984,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"112c47ca670be7279689c0d5ecbefd20","sha1":"30b902ad5710b7050ed561bd6ce7ea8755461591","sha256":"2bc30f2470769a137e994cd92fa1ccf10e6f662b4ffae1397342344a913d2133","sha512":"8bf0f9df329df8c3607b9a6cf7c15732f5e9768b9e816a95f696c6ba6321fbe646b41110fdccf6fd0190bb76c47fed01014d5bf47c055852cb50afcfca6f4df1","ssdeep":"","tlshash":"dc41a92aa5280498c8776a24fefb1728f4676033b9468314f56d00a53fb22d32674ffc","first_seen":"2023-03-07T12:02:59Z","last_seen":"2026-08-14T04:31:05.21686Z","times_seen":1378,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"farmaciadellesostanze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"farmaciadellesostanze.com/wp-content/plugins/maintenance/load/fonts/foundation-icons.woff","fqdn":"farmaciadellesostanze.com","domain":"farmaciadellesostanze.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://farmaciadellesostanze.com/","date":"2026-05-27T00:11:39.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"farmaciadellesostanze.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 21:01:15 GMT","end":"Wed, 22 Jul 2026 21:59:31 GMT"},"fingerprint":{"sha1":"F2:5B:69:57:26:DE:D8:CE:9F:97:B6:40:9A:D0:95:4D:F8:7A:C7:B4","sha256":"4F:55:AA:51:72:E1:8B:7E:41:BE:2A:59:BC:95:1E:07:10:7A:80:FA:71:93:F9:FC:3A:F0:0A:1F:7C:45:55:8A"}}},"request":{"raw":"GET /wp-content/plugins/maintenance/load/fonts/foundation-icons.woff HTTP/1.1\r\nHost: farmaciadellesostanze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://farmaciadellesostanze.com/wp-content/plugins/maintenance/load/css/fonts.css?ver=1775773670\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 00:11:40 GMT\r\ncontent-type: application/font-woff\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 09 Apr 2026 22:27:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 4c2cafb5ed57b78abc31aa7f689aff49-phx-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.438\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q4FMUI0zKrAI%2Fxb5n76iMs%2Fdr%2B15I076eOJKaMoi8sW%2FDK7W%2BiKnVfqo5qPnlvdjGsngyiuUsZ9oK4cODzrXwxBUaLI%2FFIuqtXlCmx%2BPJmgHKEk8bF7XjMTjZI7SKldtmIH%2BDp42Yb1q1ZbO\"}]}\r\netag: W/\"7d14-69d827e6-beea06061b71cc25;;;\"\r\ncf-ray: a020cdb4ab533181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":32020,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 32020, version 0.0","md5":"a188c2f768ce5033d3f5d47be7280e25","sha1":"112fb0e498037f2fea036adb8105e47638159eaa","sha256":"8c44c3feedae5331a281278ea3ba91d2255928a2f3010d316d6fbb9052e0c2ec","sha512":"92e59d107edd22f88b5d754c27c2ed3834f8d667664ba5d02e675e13c2654608be4957211ba38a900e130923130b8a7a41c6cd95660da7806fc8865e2462732c","ssdeep":"768:ZeCMB4D5hQRxRkQBtiAN7LrIM0/B5md7YtRZgkyPJxbI6GGS:ZeC04DARxRjoA1fcB5KoRVeJe","tlshash":"3ae2e17385a236c9f095e1b20de346359e99f0e4c455208338bbaf48819bf3e57e6d01","first_seen":"2023-04-06T10:08:02Z","last_seen":"2026-08-16T00:21:36.145907Z","times_seen":4069,"resource_available":false,"data":null}},"time_used":938,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":937,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"farmaciadellesostanze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
