{"report_id":"58097619-2b89-4186-b3c8-2f8853820908","version":0,"status":"done","tags":[],"date":"2026-09-04T14:29:11Z","url":{"schema":"https","addr":"aponense.it/","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":0,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"final":{"url":{"schema":"https","addr":"aponense.it/","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"title":"aponense – lo scrigno delle mie opere letterarie… ma non solo","dom":{"size":104836,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23821)","md5":"0a3df2360f74c75ce2b2101263bf651b","sha1":"5f7319032605ed275a688c0123d4ac8a44256316","sha256":"268e2644cdf6c2a9e52412ac74aeeb7c34b0e89ed4c952775ae74d7e8bbb9486","sha512":"cd570c156f7947f8e49c7e7a188081846a2988c1789addd03d920bc82b8ac1de74d5700c5cdb9c214efa46a5f5192aae2e7a92776a52ca582471fa432171d45b","ssdeep":"1536:UDwfsOYypwYMIuDcd5Q2OZwD0MNlbCFVgehNYNXKNH8X03quZ8bBemlUVuXwSmU6:Uzk+T/Z8bBemlUVugSmUpaAtKAGf5p","tlshash":"f6a3b635527459fa3ebb879da84fb3256148f9018f86a3f6f0a9c19858c8d7704f270e","dom_hash":"domhashededff460ae5c371720fe1632ee49b0d","first_seen":"2026-09-04T14:29:14.394938Z","last_seen":"2026-09-04T14:29:14.394938Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"aponense.it/","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":0,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-09T14:29:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-09-04","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"aponense.it/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"aponense.it","ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"domain_registered":"2025-11-23","domain_rank":0,"first_seen":"2026-06-05T19:54:52.920577Z","last_seen":"2026-09-04T14:25:33.156381Z","alert_count":67,"request_count":22,"received_data":1059538,"sent_data":15516,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"images.unsplash.com","ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-05-29","domain_rank":86676,"first_seen":"2015-08-06T06:03:25Z","last_seen":"2026-09-02T20:51:56.297327Z","alert_count":0,"request_count":1,"received_data":39268,"sent_data":732,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"aponense.it/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-11T15:18:02.360193Z","times_seen":963916,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-content/themes/extendable/assets/js/header.js?ver=2.1.7","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":false,"md5":"79c5237bf56c4247df7090c31171eee5","sha1":"c384730d987565e9867776e1a91f8e739c56560a","sha256":"0aee93f2d7c2015a32a397953665e7ae2d643347bbaaf24d65c68855ac302cb8","sha512":"9ab7ff35effb8d9c06b518e55f8640b994263d4cfff911a61bd303138c217897adc2c89ccb7f37d73f892269cae45b41be5f89fe65f4e6278dc5c2760bb589c8","ssdeep":"","tlshash":"d781d724a36c323e12fab19ae419a7d7773c0243b54309db9a4d989d21d44b8c2e1fd7","size":3960,"data":"","first_seen":"2026-05-28T01:27:32.104167Z","last_seen":"2026-09-10T09:28:48.318371Z","times_seen":617,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/extendable-navigation_customizations-js-extra","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":false,"md5":"68e2bd698a7fd24515e79705fe74c549","sha1":"e330173659ae80f734f8b76b5b68a1831ecb5cff","sha256":"a97549bed675ad48222ce78317b9b664101d58e9c25901d17014f451e62d903f","sha512":"ca5e3c85f534243362393de8641759059583ee70a3ce67c0a88f66dcd4da4be1e11030b228efef66786383a575c7672c8de6ce91a5dff486e8ac4b1ded0341b2","ssdeep":"","tlshash":"55f02b90c4f81f900812cc31066445638081c941c48309d4c7cc41801020c406b68f41","size":532,"data":"","first_seen":"2026-09-04T14:25:34.465613Z","last_seen":"2026-09-04T14:29:14.411991Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-11T15:31:04.970508Z","times_seen":53358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-content/themes/extendable/assets/js/navigation-customization.js","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":false,"md5":"11eb9e73319f02ea7fe96f4892551e7c","sha1":"fb46f57727081fdf509132cb3fe99a1f782a1a89","sha256":"d991eb7f3f0b5d5b3c6545e61aa5bd936ca77bedcb4a52cd1c698b0a24bb789b","sha512":"af92cf9c824674c2979019fd9a596b5302dfcf0b2cbd46b943b3a9e8ca7cee98564cdcdc2ef016049166a903490d20f32875fca31a9c1f21357cc7c150f98289","ssdeep":"","tlshash":"2971212c56b31176056302afe7e7a1d0b960540bf906c4897fdec3483fc0a24ea62bda","size":3668,"data":"","first_seen":"2026-05-26T17:13:17.004516Z","last_seen":"2026-09-10T09:28:48.293197Z","times_seen":629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0866401d2e6bf0b38495c9f278cf96a","sha1":"78a648d27819f61c8b8678d64632d2c35ac6801f","sha256":"726ac59577c8aeeec94c61bfb7791a709e401b5d871d35c39a65cd948f6124e3","sha512":"7889b5b5b511b2d7af4752fb4d4ae4edcf96b18351224867e39c5dbff54fb6fadf3e18a40bfa35cd803d34426e95623768e64a132282f1813525a7d1844f101f","ssdeep":"768:oqEYJ8Mc56JH6u0HpQPu3iU7bwUCD2XZjVV300FKKh:YYJC0cHWujsIl39KKh","tlshash":"37031af8b2a8703183ef50b5503f040bf3366968588d8068ba65d4eb68f454a51f7fbd","size":40106,"data":"","first_seen":"2026-05-21T20:58:39.683163Z","last_seen":"2026-09-11T14:35:27.90429Z","times_seen":11117,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-09-04","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"aponense.it/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=1bf28ded04f9f188bdcb","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa40dd851aca7b8c45de7991f13a8683","sha1":"4b9cb946ef66b3cc547f971b7915f023dd84da37","sha256":"fbe11af6f29f55ae480e2058aad3ac400315d2792c3b14346f016b70cebf3bb3","sha512":"51ea7694116308ed78b1a417f96ad0c41e842f8a94dd9640f3456c60ae53eea18fb908405c059675b56278986671c42d37f5d9049db2159558c10e73e1f50100","ssdeep":"","tlshash":"39517179726575b6cefe4788f330d538b3619dc1040a1442bd1806dfaaaeea1c1e1f6a","size":3033,"data":"","first_seen":"2026-07-31T14:57:46.364913Z","last_seen":"2026-09-11T14:35:27.965944Z","times_seen":960,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-content/plugins/3d-flipbook-dflip-lite/assets/js/dflip.min.js?ver=2.4.37","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8d27a085d19300582bcbd8f8583fb99","sha1":"1f1ddf93610aa512360863cbe15e8cab7830c8af","sha256":"8e7512a970323f6c0c0f4c2cc5867dec83f0a95dc8d6a2c1c9530daf71781535","sha512":"764c41d382a8223c4c9b319c7ccea17d3aa07b35e6eefbcd1e16efe8cb4b9c4c566e7c08a61f1b920bb4aedb5948e469c1f801956e6d25e460dc7d8a955d4ff4","ssdeep":"3072:NNO4wqO9V2UEoP+jKD6eOXGe4G+IFzUUdPCp:NNODqOT2USjaOXGrPozUUdP6","tlshash":"eb34098d71b27070c9d750aeb41b260a7232746d948ac09cb53cece55ea9d8e31e7f39","size":246402,"data":"","first_seen":"2026-08-12T10:17:21.327201Z","last_seen":"2026-09-11T14:00:16.768774Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":true,"md5":"83bb370c0957a7aac1a4a734fba56fb5","sha1":"bcaa8ecf70e294436e2f50d97d2ed3571d8cf334","sha256":"4aea24aaa760ab6b4bfb94b11e3fce5c200b33e9dbe30805bece18487301e966","sha512":"c92db4556e1e224cf032df21fe5d05d23db496c97949995a337698d08d60de7b57b3c146da7925872bdf8eec696fc61498d54704a2b28187b99732f0d1dd8b53","ssdeep":"","tlshash":"87b09b9545f81f941852dd61066545629055c941c45709d4d7d845841520d516b69f41","size":122,"data":"","first_seen":"2026-09-04T14:25:34.471501Z","last_seen":"2026-09-04T14:29:14.412898Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d1ed6bf8b9fc08d1eda87ac8d2c3b86","sha1":"51b0b18d19d4a7bbea903a70456d8ad195e0a04d","sha256":"ab0d2198400f7794ebd5be9f76caf08afd2f0edc55e176c509470b8c244ba8d7","sha512":"8493deb327dd2fbe8482775245459dcf80f1efe30eb332547c1ffd11230caee208ba19ce58ef0f96e683a15834bce455d9b84aa856b7d3183ff30ccef1e7c9e6","ssdeep":"","tlshash":"4e210c5f74043e6fcb8a93fcb2cf3e0131bd019584c10248e8ad8e5e1ab4b192282d27","size":1421,"data":"","first_seen":"2026-09-04T14:25:34.473792Z","last_seen":"2026-09-04T14:29:14.413664Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-includes/js/wp-emoji-loader.min.js","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2eba72da76635683faa7fd0d5f6f029","sha1":"59d00c9cdc245ee9599972db4112d2954abcef88","sha256":"100c3252e50e0067f86fa765da06a2fb8806f50fac1faa182e75fe13848b5565","sha512":"58f2cce8a520612e4ea1408872f676fc45a88fba3f3c807434873091bfa7c94ab4ca6355699851ba84fa3a49bf5754849fd0156aa4722f48af050d7070cb6406","ssdeep":"","tlshash":"18619659eb7538db33fa01f2653a4d47eb614436e784d038c9ae631418b1893c375a16","size":3472,"data":"","first_seen":"2026-09-04T14:25:34.468607Z","last_seen":"2026-09-04T14:29:14.414465Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-11T15:18:02.36595Z","times_seen":1053831,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://aponense.it/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"aponense.it/wp-content/plugins/post-views-counter/css/frontend.css?ver=1.7.15","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aponense.it/","date":"2026-09-04T14:28:41.607Z","timestamp":1788532121607,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aponense.it","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 11:34:26 GMT","end":"Tue, 20 Oct 2026 11:34:25 GMT"},"fingerprint":{"sha1":"62:FD:6E:D2:CD:6B:99:C4:EF:E7:3A:2E:8C:68:78:ED:BF:1A:0E:1E","sha256":"7C:BB:56:FE:6D:38:1D:3F:28:CB:F8:70:83:9E:B4:19:7C:A2:9E:DA:2C:8B:DA:B2:95:E5:CD:D7:FD:61:FF:AE"}}},"request":{"raw":"GET /wp-content/plugins/post-views-counter/css/frontend.css?ver=1.7.15 HTTP/1.1\r\nHost: aponense.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aponense.it/\r\nCookie: pvc_visits[0]=%7B%22version%22%3A1%2C%22session_id%22%3A%2214ec9eef-7ab7-4e82-8d9b-28dd5b9a0031%22%2C%22started_at%22%3A1788532121%2C%22expires_at%22%3A1788618521%2C%22visited%22%3A%7B%22post%22%3A%5B14%5D%7D%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 14:28:41 GMT\r\ncontent-type: text/css\r\ncontent-length: 472\r\nlast-modified: Thu, 27 Aug 2026 16:31:44 GMT\r\netag: \"4dc-65a09df1e83b9-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 04 Oct 2026 14:28:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1244,"size_decoded":823,"mime_type":"text/css","magic":"ASCII text, with very long lines (1243)","md5":"00e7d1e94ac8e5ba6bb2dc8ea3708235","sha1":"ffa8696c2d2f4a2ae51cf7d33afeecd37ca09b6a","sha256":"2740b30675719b2b34779a1e2b0a2b017e9c26949c63c65881bc9dcf381f7c6f","sha512":"4e1cbd956b3310c1207ec64110f5f97960bd99a99f4d982e064a23537a5515acbe8a1ef75dd58ea2da565712dd8f77cb160175f59d6dbab15660291b5654e5e1","ssdeep":"","tlshash":"c121633e8124b408b33e870b25cd658958297a4370a21e4dffd2b912b7266ce3218785","first_seen":"2026-08-11T18:33:51.251973Z","last_seen":"2026-09-11T08:31:11.366438Z","times_seen":165,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-content/plugins/3d-flipbook-dflip-lite/assets/css/dflip.min.css?ver=2.4.37","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aponense.it/","date":"2026-09-04T14:28:41.611Z","timestamp":1788532121611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aponense.it","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 11:34:26 GMT","end":"Tue, 20 Oct 2026 11:34:25 GMT"},"fingerprint":{"sha1":"62:FD:6E:D2:CD:6B:99:C4:EF:E7:3A:2E:8C:68:78:ED:BF:1A:0E:1E","sha256":"7C:BB:56:FE:6D:38:1D:3F:28:CB:F8:70:83:9E:B4:19:7C:A2:9E:DA:2C:8B:DA:B2:95:E5:CD:D7:FD:61:FF:AE"}}},"request":{"raw":"GET /wp-content/plugins/3d-flipbook-dflip-lite/assets/css/dflip.min.css?ver=2.4.37 HTTP/1.1\r\nHost: aponense.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aponense.it/\r\nCookie: pvc_visits[0]=%7B%22version%22%3A1%2C%22session_id%22%3A%2214ec9eef-7ab7-4e82-8d9b-28dd5b9a0031%22%2C%22started_at%22%3A1788532121%2C%22expires_at%22%3A1788618521%2C%22visited%22%3A%7B%22post%22%3A%5B14%5D%7D%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 14:28:41 GMT\r\ncontent-type: text/css\r\ncontent-length: 13108\r\nlast-modified: Thu, 27 Aug 2026 16:31:25 GMT\r\netag: \"d025-65a09ddf92ad2-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 04 Oct 2026 14:28:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53285,"size_decoded":13462,"mime_type":"text/css","magic":"ASCII text, with very long lines (53285), with no line terminators","md5":"fa96665168c4284a8b7562c56aad7611","sha1":"c4b2226535f3f4565c00f3b2ec822dea826eec11","sha256":"46cd164c5d37bb3feaa6b064b0d358688d8a104fbe95fa36d9c56c4426631e77","sha512":"370f2f49026a2e49a83d992bac0d7c32080eb64bfda53211db5118dc4a9ce4c6092cc6144a9e20161d293164f4facacc4b0c0e46f00fa328936c269347cc9321","ssdeep":"1536:vt/VvaVdYnULzZxqeLQe8f2+KTXrl35AQVPUC:vqVdYAZxqeLQe8f2+s5AQVPUC","tlshash":"1933c7b5a0552098b23bc23997d0976c2e39c1d3fa531efef318a1698bc64db019dbc5","first_seen":"2026-03-04T01:45:42.965772Z","last_seen":"2026-09-11T14:02:49.148695Z","times_seen":2692,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-content/themes/extendable/assets/js/navigation-customization.js","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aponense.it/","date":"2026-09-04T14:28:41.799Z","timestamp":1788532121799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aponense.it","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 11:34:26 GMT","end":"Tue, 20 Oct 2026 11:34:25 GMT"},"fingerprint":{"sha1":"62:FD:6E:D2:CD:6B:99:C4:EF:E7:3A:2E:8C:68:78:ED:BF:1A:0E:1E","sha256":"7C:BB:56:FE:6D:38:1D:3F:28:CB:F8:70:83:9E:B4:19:7C:A2:9E:DA:2C:8B:DA:B2:95:E5:CD:D7:FD:61:FF:AE"}}},"request":{"raw":"GET /wp-content/themes/extendable/assets/js/navigation-customization.js HTTP/1.1\r\nHost: aponense.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aponense.it/\r\nCookie: pvc_visits[0]=%7B%22version%22%3A1%2C%22session_id%22%3A%2214ec9eef-7ab7-4e82-8d9b-28dd5b9a0031%22%2C%22started_at%22%3A1788532121%2C%22expires_at%22%3A1788618521%2C%22visited%22%3A%7B%22post%22%3A%5B14%5D%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 14:28:41 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1239\r\nlast-modified: Wed, 22 Jul 2026 23:10:27 GMT\r\netag: \"e54-6573b3ec150bd-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 04 Oct 2026 14:28:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3668,"size_decoded":1598,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"11eb9e73319f02ea7fe96f4892551e7c","sha1":"fb46f57727081fdf509132cb3fe99a1f782a1a89","sha256":"d991eb7f3f0b5d5b3c6545e61aa5bd936ca77bedcb4a52cd1c698b0a24bb789b","sha512":"af92cf9c824674c2979019fd9a596b5302dfcf0b2cbd46b943b3a9e8ca7cee98564cdcdc2ef016049166a903490d20f32875fca31a9c1f21357cc7c150f98289","ssdeep":"","tlshash":"2971212c56b31176056302afe7e7a1d0b960540bf906c4897fdec3483fc0a24ea62bda","first_seen":"2026-05-26T17:13:17.004516Z","last_seen":"2026-09-10T09:28:48.293197Z","times_seen":629,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1455390582262-044cdead277a?ixid=M3w0MzUxNjF8MHwxfHNlYXJjaHwxfHx3cml0aW5nfGVufDB8fHx8MTc2MzU0Mzc1MHww\u0026ixlib=rb-4.1.0\u0026orientation=landscape?fit=crop\u0026crop=entropy%2Cfaces\u0026auto=format%2Ccompress\u0026w=1280","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aponense.it/","date":"2026-09-04T14:28:41.821Z","timestamp":1788532121821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R46 DV TLS CA 2026 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Jul 2026 16:16:25 GMT","end":"Sun, 14 Feb 2027 15:16:25 GMT"},"fingerprint":{"sha1":"F2:05:7E:AF:21:81:93:03:7B:A5:F9:F3:FD:CC:C9:24:49:3A:76:2C","sha256":"7F:6E:F5:E1:25:3F:25:87:8A:95:6F:06:BD:D7:52:15:BC:14:B2:83:78:51:94:51:FE:73:CD:C0:D3:C4:C9:68"}}},"request":{"raw":"GET /photo-1455390582262-044cdead277a?ixid=M3w0MzUxNjF8MHwxfHNlYXJjaHwxfHx3cml0aW5nfGVufDB8fHx8MTc2MzU0Mzc1MHww\u0026ixlib=rb-4.1.0\u0026orientation=landscape?fit=crop\u0026crop=entropy%2Cfaces\u0026auto=format%2Ccompress\u0026w=1280 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aponense.it/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 85c83e52ce11990ff886cb378775032878d1280c\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 21 Aug 2026 05:54:36 GMT\r\nserver: imgix\r\ndate: Fri, 04 Sep 2026 14:28:41 GMT\r\nage: 1240445\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230043-FRA, cache-bma-essb1270034-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 38637\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38637,"size_decoded":39268,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"60f18113a294e3a928086271262317dc","sha1":"b457035767d8f083283855bd61f0577cfb7a9a1d","sha256":"a68be669a7f17cf90b93fe7f56adb8639c23d065a3a0fd25fdb7866a2162cf63","sha512":"16f585cd7fe451ea30f580f87b97b4ca92a151eb395f314559f2d28cbe5d4ef7c5b693fd424ce79c9ec8c2a5b70ef07b2dd867b377cacaf2888dd2d65f145683","ssdeep":"768:QheGzVw9KjrViUPOpw+o7DjRNtz/PFburhc2JmcZl5ql:Q8UVw9K19PONm7N/turGVcfg","tlshash":"2f03f119248633fbe8ed39f51808a2bdc446cebf0ffda64abbf911440512bb09914376","first_seen":"2026-09-04T14:25:34.439592Z","last_seen":"2026-09-04T14:29:14.397927Z","times_seen":2,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":77,"connect":9,"send":0,"wait":13,"receive":47,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=1bf28ded04f9f188bdcb","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aponense.it/","date":"2026-09-04T14:28:41.864Z","timestamp":1788532121864,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aponense.it","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 11:34:26 GMT","end":"Tue, 20 Oct 2026 11:34:25 GMT"},"fingerprint":{"sha1":"62:FD:6E:D2:CD:6B:99:C4:EF:E7:3A:2E:8C:68:78:ED:BF:1A:0E:1E","sha256":"7C:BB:56:FE:6D:38:1D:3F:28:CB:F8:70:83:9E:B4:19:7C:A2:9E:DA:2C:8B:DA:B2:95:E5:CD:D7:FD:61:FF:AE"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=1bf28ded04f9f188bdcb HTTP/1.1\r\nHost: aponense.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aponense.it/\r\nCookie: pvc_visits[0]=%7B%22version%22%3A1%2C%22session_id%22%3A%2214ec9eef-7ab7-4e82-8d9b-28dd5b9a0031%22%2C%22started_at%22%3A1788532121%2C%22expires_at%22%3A1788618521%2C%22visited%22%3A%7B%22post%22%3A%5B14%5D%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 14:28:41 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1122\r\nlast-modified: Wed, 26 Aug 2026 14:28:56 GMT\r\netag: \"bd9-659f40a1ce592-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 04 Oct 2026 14:28:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3033,"size_decoded":1481,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3032)","md5":"fa40dd851aca7b8c45de7991f13a8683","sha1":"4b9cb946ef66b3cc547f971b7915f023dd84da37","sha256":"fbe11af6f29f55ae480e2058aad3ac400315d2792c3b14346f016b70cebf3bb3","sha512":"51ea7694116308ed78b1a417f96ad0c41e842f8a94dd9640f3456c60ae53eea18fb908405c059675b56278986671c42d37f5d9049db2159558c10e73e1f50100","ssdeep":"","tlshash":"39517179726575b6cefe4788f330d538b3619dc1040a1442bd1806dfaaaeea1c1e1f6a","first_seen":"2026-07-31T14:57:46.364913Z","last_seen":"2026-09-11T14:35:27.965944Z","times_seen":960,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-content/themes/extendable/assets/fonts/mulish/mulish.woff2","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aponense.it/","date":"2026-09-04T14:28:41.866Z","timestamp":1788532121866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aponense.it","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 11:34:26 GMT","end":"Tue, 20 Oct 2026 11:34:25 GMT"},"fingerprint":{"sha1":"62:FD:6E:D2:CD:6B:99:C4:EF:E7:3A:2E:8C:68:78:ED:BF:1A:0E:1E","sha256":"7C:BB:56:FE:6D:38:1D:3F:28:CB:F8:70:83:9E:B4:19:7C:A2:9E:DA:2C:8B:DA:B2:95:E5:CD:D7:FD:61:FF:AE"}}},"request":{"raw":"GET /wp-content/themes/extendable/assets/fonts/mulish/mulish.woff2 HTTP/1.1\r\nHost: aponense.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aponense.it/\r\nCookie: pvc_visits[0]=%7B%22version%22%3A1%2C%22session_id%22%3A%2214ec9eef-7ab7-4e82-8d9b-28dd5b9a0031%22%2C%22started_at%22%3A1788532121%2C%22expires_at%22%3A1788618521%2C%22visited%22%3A%7B%22post%22%3A%5B14%5D%7D%7D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 14:28:41 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77172\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 22 Jul 2026 23:10:27 GMT\r\netag: \"12d74-6573b3ec05e8e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77172,"size_decoded":77428,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77172, version 1.0","md5":"b10922402745e9b7258498ee8a0cd381","sha1":"445cb64fa665a4e5b58f58829062673150870a0d","sha256":"2cf8e30575d4e223584a218daad3440aff253fbb60665aed6d9846d57c1f2f09","sha512":"8017909b0af08460468b68e49446f59ca7b31b48bd10d08f32dd67571e8b7b28eb3ebd5bda1ada30754b8ac68f467201920163695fa3abcdf9b683bad19b168e","ssdeep":"1536:Y+H4UZHGoF+14Manlcb+ZfoVo172ZnqxXsRCEFB5fx1p8S/eS:2GHl+aMs00ikLEFjxzjeS","tlshash":"9d7312f4b538257cfa313d3ca83e84d8838e59b545d6e6222d772d30b249f628d2e295","first_seen":"2024-08-19T13:36:59.789166Z","last_seen":"2026-09-09T14:21:17.009475Z","times_seen":124,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-content/uploads/fonts/italiana-latin-400-normal.woff2","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aponense.it/","date":"2026-09-04T14:28:41.877Z","timestamp":1788532121877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aponense.it","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 11:34:26 GMT","end":"Tue, 20 Oct 2026 11:34:25 GMT"},"fingerprint":{"sha1":"62:FD:6E:D2:CD:6B:99:C4:EF:E7:3A:2E:8C:68:78:ED:BF:1A:0E:1E","sha256":"7C:BB:56:FE:6D:38:1D:3F:28:CB:F8:70:83:9E:B4:19:7C:A2:9E:DA:2C:8B:DA:B2:95:E5:CD:D7:FD:61:FF:AE"}}},"request":{"raw":"GET /wp-content/uploads/fonts/italiana-latin-400-normal.woff2 HTTP/1.1\r\nHost: aponense.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aponense.it/\r\nCookie: pvc_visits[0]=%7B%22version%22%3A1%2C%22session_id%22%3A%2214ec9eef-7ab7-4e82-8d9b-28dd5b9a0031%22%2C%22started_at%22%3A1788532121%2C%22expires_at%22%3A1788618521%2C%22visited%22%3A%7B%22post%22%3A%5B14%5D%7D%7D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 14:28:41 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 10100\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 25 Nov 2025 09:06:23 GMT\r\netag: \"2774-6446798070b83\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10100,"size_decoded":10355,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10100, version 1.0","md5":"dca43a8eff2676d93b2d648a935b4fd3","sha1":"bfe7288a15605860a33989930a6b1fdca60c97c9","sha256":"5079c87a4e86c58e8cd4f18ec2d3255918b7d565708ed934b15c4710301f838c","sha512":"cdbb4648fb10578e6568c7133215adfd64cae5891da490707e55d3b97a4d4458c29e67439c26e5a1b74669f5f52512e1e68e8c4c064e815e7cd49ccf85e7cfc6","ssdeep":"192:+12WVZKJTWsIp1s3KKXUu8cB6X2FtPMVw7TffmQQJ7NbplCDcSD3SwGVh5:u/VoxWsI3kog6Xi0qfZSJ2DcK33w3","tlshash":"b222b0026ae31259ec7517b575f3022407fa58d9ed0cf69006e979e19f0bf0cdb92b26","first_seen":"2023-05-09T17:59:40Z","last_seen":"2026-09-09T17:01:51.861462Z","times_seen":877,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-content/uploads/2025/11/Male-Body-1024x1024.jpg","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://aponense.it/","date":"2026-09-04T14:28:41.795Z","timestamp":1788532121795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aponense.it","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 11:34:26 GMT","end":"Tue, 20 Oct 2026 11:34:25 GMT"},"fingerprint":{"sha1":"62:FD:6E:D2:CD:6B:99:C4:EF:E7:3A:2E:8C:68:78:ED:BF:1A:0E:1E","sha256":"7C:BB:56:FE:6D:38:1D:3F:28:CB:F8:70:83:9E:B4:19:7C:A2:9E:DA:2C:8B:DA:B2:95:E5:CD:D7:FD:61:FF:AE"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Male-Body-1024x1024.jpg HTTP/1.1\r\nHost: aponense.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aponense.it/\r\nCookie: pvc_visits[0]=%7B%22version%22%3A1%2C%22session_id%22%3A%2214ec9eef-7ab7-4e82-8d9b-28dd5b9a0031%22%2C%22started_at%22%3A1788532121%2C%22expires_at%22%3A1788618521%2C%22visited%22%3A%7B%22post%22%3A%5B14%5D%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 14:28:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 153351\r\nlast-modified: Tue, 25 Nov 2025 15:15:51 GMT\r\netag: \"25707-6446cc15816d4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 04 Sep 2027 14:28:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153351,"size_decoded":153658,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x1024, components 3","md5":"1375be40603d065592dccb08996651d7","sha1":"aa89f3475de13d31c0d1c5ba111447a6cb37221a","sha256":"ee956ab537a2ad6bc35f4513454e579a44ae8e9979097bb968027cbc5a772554","sha512":"30d6e91b31ae4f2c50903b516baaeec78b2451726f7b6378a34dfac4b5064823bce14094bf12e04aae568780686ad3c3455e4f1d9f3994f39dfd0da88adbaebc","ssdeep":"3072:N1llMlfY5svcKnob63wVDB+dYEnYjna1ThKDu6k50ezle4epZc7aF:bllMS5sUKnfGMdnS+h0zr8vaF","tlshash":"6ce3f1595a7853f0fbc8ee45bbdf600355df0be497784d2a98cb41eb0215eaee82d084","first_seen":"2026-09-04T14:25:34.436042Z","last_seen":"2026-09-04T14:29:14.400755Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-content/plugins/3d-flipbook-dflip-lite/assets/js/dflip.min.js?ver=2.4.37","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aponense.it/","date":"2026-09-04T14:28:41.800Z","timestamp":1788532121800,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aponense.it","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 11:34:26 GMT","end":"Tue, 20 Oct 2026 11:34:25 GMT"},"fingerprint":{"sha1":"62:FD:6E:D2:CD:6B:99:C4:EF:E7:3A:2E:8C:68:78:ED:BF:1A:0E:1E","sha256":"7C:BB:56:FE:6D:38:1D:3F:28:CB:F8:70:83:9E:B4:19:7C:A2:9E:DA:2C:8B:DA:B2:95:E5:CD:D7:FD:61:FF:AE"}}},"request":{"raw":"GET /wp-content/plugins/3d-flipbook-dflip-lite/assets/js/dflip.min.js?ver=2.4.37 HTTP/1.1\r\nHost: aponense.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aponense.it/\r\nCookie: pvc_visits[0]=%7B%22version%22%3A1%2C%22session_id%22%3A%2214ec9eef-7ab7-4e82-8d9b-28dd5b9a0031%22%2C%22started_at%22%3A1788532121%2C%22expires_at%22%3A1788618521%2C%22visited%22%3A%7B%22post%22%3A%5B14%5D%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 14:28:41 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 27 Aug 2026 16:31:25 GMT\r\netag: \"3c282-65a09ddfa1531-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 04 Oct 2026 14:28:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":246402,"size_decoded":63674,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c8d27a085d19300582bcbd8f8583fb99","sha1":"1f1ddf93610aa512360863cbe15e8cab7830c8af","sha256":"8e7512a970323f6c0c0f4c2cc5867dec83f0a95dc8d6a2c1c9530daf71781535","sha512":"764c41d382a8223c4c9b319c7ccea17d3aa07b35e6eefbcd1e16efe8cb4b9c4c566e7c08a61f1b920bb4aedb5948e469c1f801956e6d25e460dc7d8a955d4ff4","ssdeep":"3072:NNO4wqO9V2UEoP+jKD6eOXGe4G+IFzUUdPCp:NNODqOT2USjaOXGrPozUUdP6","tlshash":"eb34098d71b27070c9d750aeb41b260a7232746d948ac09cb53cece55ea9d8e31e7f39","first_seen":"2026-08-12T10:17:21.327201Z","last_seen":"2026-09-11T14:00:16.768774Z","times_seen":196,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-content/uploads/2025/12/Disegno-a-Matita-2.jpg","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://aponense.it/","date":"2026-09-04T14:28:41.823Z","timestamp":1788532121823,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aponense.it","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 11:34:26 GMT","end":"Tue, 20 Oct 2026 11:34:25 GMT"},"fingerprint":{"sha1":"62:FD:6E:D2:CD:6B:99:C4:EF:E7:3A:2E:8C:68:78:ED:BF:1A:0E:1E","sha256":"7C:BB:56:FE:6D:38:1D:3F:28:CB:F8:70:83:9E:B4:19:7C:A2:9E:DA:2C:8B:DA:B2:95:E5:CD:D7:FD:61:FF:AE"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/Disegno-a-Matita-2.jpg HTTP/1.1\r\nHost: aponense.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aponense.it/\r\nCookie: pvc_visits[0]=%7B%22version%22%3A1%2C%22session_id%22%3A%2214ec9eef-7ab7-4e82-8d9b-28dd5b9a0031%22%2C%22started_at%22%3A1788532121%2C%22expires_at%22%3A1788618521%2C%22visited%22%3A%7B%22post%22%3A%5B14%5D%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 14:28:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 77241\r\nlast-modified: Tue, 23 Dec 2025 11:53:02 GMT\r\netag: \"12db9-6469d2f9787c6\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 04 Sep 2027 14:28:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77241,"size_decoded":77547,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=Paint.NET v3.5.6], baseline, precision 8, 522x700, components 3","md5":"dadd674307363881baa8d2dbbe458dfd","sha1":"0d9daa047a6e8633b63c691dd642b28be3a1350d","sha256":"c5ad5aafbd00611ea05bc4c4f581db0e2844725387cba7b424b2e71463a9017a","sha512":"c0f9376243b23a13c497bfd5fa5609686b738aa7659279c10c61bd2e9173a3d3ce833766b23e8e9e5721c5e16822267401164e016a38468846ff4c09a0f42e1e","ssdeep":"1536:wrmEHr2VHKOwa3tOaDTlCbxt8MTN/Bw+Ekekz3FA24KjSKuUk:IbiVqVadOacbxt8AmkektWKu","tlshash":"787302302f6177b065298177fc55107ca0575c2a91cb68aec6d9cefcf3c2219baa325e","first_seen":"2026-09-04T14:25:34.442744Z","last_seen":"2026-09-04T14:29:14.402315Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aponense.it/","date":"2026-09-04T14:28:42.182Z","timestamp":1788532122182,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aponense.it","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 11:34:26 GMT","end":"Tue, 20 Oct 2026 11:34:25 GMT"},"fingerprint":{"sha1":"62:FD:6E:D2:CD:6B:99:C4:EF:E7:3A:2E:8C:68:78:ED:BF:1A:0E:1E","sha256":"7C:BB:56:FE:6D:38:1D:3F:28:CB:F8:70:83:9E:B4:19:7C:A2:9E:DA:2C:8B:DA:B2:95:E5:CD:D7:FD:61:FF:AE"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.1 HTTP/1.1\r\nHost: aponense.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aponense.it/\r\nCookie: pvc_visits[0]=%7B%22version%22%3A1%2C%22session_id%22%3A%2214ec9eef-7ab7-4e82-8d9b-28dd5b9a0031%22%2C%22started_at%22%3A1788532121%2C%22expires_at%22%3A1788618521%2C%22visited%22%3A%7B%22post%22%3A%5B14%5D%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 14:28:42 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 5386\r\nlast-modified: Thu, 09 Jul 2026 21:36:17 GMT\r\netag: \"58e0-656346a032498-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 04 Oct 2026 14:28:42 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22752,"size_decoded":5746,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-11T15:31:04.970508Z","times_seen":53358,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-content/themes/extendable/assets/css/wpforms.css?ver=2.1.7","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aponense.it/","date":"2026-09-04T14:28:41.608Z","timestamp":1788532121608,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aponense.it","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 11:34:26 GMT","end":"Tue, 20 Oct 2026 11:34:25 GMT"},"fingerprint":{"sha1":"62:FD:6E:D2:CD:6B:99:C4:EF:E7:3A:2E:8C:68:78:ED:BF:1A:0E:1E","sha256":"7C:BB:56:FE:6D:38:1D:3F:28:CB:F8:70:83:9E:B4:19:7C:A2:9E:DA:2C:8B:DA:B2:95:E5:CD:D7:FD:61:FF:AE"}}},"request":{"raw":"GET /wp-content/themes/extendable/assets/css/wpforms.css?ver=2.1.7 HTTP/1.1\r\nHost: aponense.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aponense.it/\r\nCookie: pvc_visits[0]=%7B%22version%22%3A1%2C%22session_id%22%3A%2214ec9eef-7ab7-4e82-8d9b-28dd5b9a0031%22%2C%22started_at%22%3A1788532121%2C%22expires_at%22%3A1788618521%2C%22visited%22%3A%7B%22post%22%3A%5B14%5D%7D%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 14:28:41 GMT\r\ncontent-type: text/css\r\ncontent-length: 523\r\nlast-modified: Wed, 22 Jul 2026 23:10:27 GMT\r\netag: \"6bc-6573b3ebf02e7-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 04 Oct 2026 14:28:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1724,"size_decoded":874,"mime_type":"text/css","magic":"ASCII text","md5":"ea9ad70037e0676b11245f9bab1fb249","sha1":"221faefc9aa1ac5dab0810105b7da86186ab8071","sha256":"5025b030922fc64deea5c874d35de7673bf9abbb427766eafa11057a47b28069","sha512":"a81eca8c3dbac15c693780dd4f0f25aee267358a31831fc2ca8b16607f4a6593ba854b1b2caf98806a6f90f7e3545db74bad863c82edc40f0003332a397cfc9e","ssdeep":"","tlshash":"4a31ae32e1301bfeb03b277c5a8f9749239bcb509a452fd4f5d820e285d8978209f35a","first_seen":"2025-05-05T12:01:31.71176Z","last_seen":"2026-09-06T23:29:14.488095Z","times_seen":237,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aponense.it/","date":"2026-09-04T14:28:41.613Z","timestamp":1788532121613,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aponense.it","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 11:34:26 GMT","end":"Tue, 20 Oct 2026 11:34:25 GMT"},"fingerprint":{"sha1":"62:FD:6E:D2:CD:6B:99:C4:EF:E7:3A:2E:8C:68:78:ED:BF:1A:0E:1E","sha256":"7C:BB:56:FE:6D:38:1D:3F:28:CB:F8:70:83:9E:B4:19:7C:A2:9E:DA:2C:8B:DA:B2:95:E5:CD:D7:FD:61:FF:AE"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: aponense.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aponense.it/\r\nCookie: pvc_visits[0]=%7B%22version%22%3A1%2C%22session_id%22%3A%2214ec9eef-7ab7-4e82-8d9b-28dd5b9a0031%22%2C%22started_at%22%3A1788532121%2C%22expires_at%22%3A1788618521%2C%22visited%22%3A%7B%22post%22%3A%5B14%5D%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 14:28:41 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 30368\r\nlast-modified: Tue, 25 Nov 2025 08:35:12 GMT\r\netag: \"15601-64467287fa0c4-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 04 Oct 2026 14:28:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":30730,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-11T15:18:02.36595Z","times_seen":1053831,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/favicon.ico","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aponense.it/","date":"2026-09-04T14:28:42.042Z","timestamp":1788532122042,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aponense.it","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 11:34:26 GMT","end":"Tue, 20 Oct 2026 11:34:25 GMT"},"fingerprint":{"sha1":"62:FD:6E:D2:CD:6B:99:C4:EF:E7:3A:2E:8C:68:78:ED:BF:1A:0E:1E","sha256":"7C:BB:56:FE:6D:38:1D:3F:28:CB:F8:70:83:9E:B4:19:7C:A2:9E:DA:2C:8B:DA:B2:95:E5:CD:D7:FD:61:FF:AE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: aponense.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aponense.it/\r\nCookie: pvc_visits[0]=%7B%22version%22%3A1%2C%22session_id%22%3A%2214ec9eef-7ab7-4e82-8d9b-28dd5b9a0031%22%2C%22started_at%22%3A1788532121%2C%22expires_at%22%3A1788618521%2C%22visited%22%3A%7B%22post%22%3A%5B14%5D%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 14:28:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nlink: \u003chttps://aponense.it/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nlocation: https://aponense.it/wp-includes/images/w-logo-gray-white-bg.png\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T15:24:32.699159Z","times_seen":18405136,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T14:28:41.001Z","timestamp":1788532121001,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aponense.it","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 11:34:26 GMT","end":"Tue, 20 Oct 2026 11:34:25 GMT"},"fingerprint":{"sha1":"62:FD:6E:D2:CD:6B:99:C4:EF:E7:3A:2E:8C:68:78:ED:BF:1A:0E:1E","sha256":"7C:BB:56:FE:6D:38:1D:3F:28:CB:F8:70:83:9E:B4:19:7C:A2:9E:DA:2C:8B:DA:B2:95:E5:CD:D7:FD:61:FF:AE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aponense.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 14:28:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 17980\r\nlink: \u003chttps://aponense.it/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://aponense.it/wp-json/wp/v2/pages/14\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://aponense.it/\u003e; rel=shortlink\r\nset-cookie: pvc_visits[0]=%7B%22version%22%3A1%2C%22session_id%22%3A%2214ec9eef-7ab7-4e82-8d9b-28dd5b9a0031%22%2C%22started_at%22%3A1788532121%2C%22expires_at%22%3A1788618521%2C%22visited%22%3A%7B%22post%22%3A%5B14%5D%7D%7D; expires=Sat, 05 Sep 2026 14:28:41 GMT; Max-Age=86400; path=/; secure; SameSite=LAX\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":104568,"size_decoded":18691,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (23805)","md5":"97f3b39189c1c1205b0a2f973a3febf8","sha1":"8fc2c3d9c1b59df02e916a794d8b330c6a7ba3b3","sha256":"cb79b4f8a3a3596a0d379dd0a7d8d76bf852552c1a9c7b0573a8492a719a6821","sha512":"74147e323c565bf1ec21a66d39191b0bae58d3a8da6a29597af64b8b0170a930ec0334a02dabdcf3993b85970dda18055ba53f013096e223a328c4371a56978d","ssdeep":"1536:iIrfsVypwYMIuDcd5Q2OZwD0MNlbCFVgehNYNXKNH8X0vMKZcp64wvSAIXuBVU7d:ixQ+7pZcp64wvSAIeBVU7ZAtKAG3vt","tlshash":"98a3c635527455fa3ebb879da84fb3256148f9009f86a3f6f0a9c19858c8d7704f270e","first_seen":"2026-09-04T14:29:14.405451Z","last_seen":"2026-09-04T14:29:14.405451Z","times_seen":1,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":99,"connect":27,"send":0,"wait":194,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-includes/blocks/navigation/style.min.css?ver=7.1","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aponense.it/","date":"2026-09-04T14:28:41.600Z","timestamp":1788532121600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aponense.it","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 11:34:26 GMT","end":"Tue, 20 Oct 2026 11:34:25 GMT"},"fingerprint":{"sha1":"62:FD:6E:D2:CD:6B:99:C4:EF:E7:3A:2E:8C:68:78:ED:BF:1A:0E:1E","sha256":"7C:BB:56:FE:6D:38:1D:3F:28:CB:F8:70:83:9E:B4:19:7C:A2:9E:DA:2C:8B:DA:B2:95:E5:CD:D7:FD:61:FF:AE"}}},"request":{"raw":"GET /wp-includes/blocks/navigation/style.min.css?ver=7.1 HTTP/1.1\r\nHost: aponense.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aponense.it/\r\nCookie: pvc_visits[0]=%7B%22version%22%3A1%2C%22session_id%22%3A%2214ec9eef-7ab7-4e82-8d9b-28dd5b9a0031%22%2C%22started_at%22%3A1788532121%2C%22expires_at%22%3A1788618521%2C%22visited%22%3A%7B%22post%22%3A%5B14%5D%7D%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 14:28:41 GMT\r\ncontent-type: text/css\r\ncontent-length: 2561\r\nlast-modified: Wed, 26 Aug 2026 14:28:56 GMT\r\netag: \"5128-659f40a120858-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 04 Oct 2026 14:28:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20776,"size_decoded":2914,"mime_type":"text/css","magic":"ASCII text, with very long lines (20776), with no line terminators","md5":"52314f0976fd06afc7a9bc305bf2f39c","sha1":"8830882b9876d959489386df254e31c096f81d91","sha256":"bfb2953c6eced1909de016645ff3d2da8cdbae613f956356a47188c8cc3e2dae","sha512":"d0d246270e71ac3b21d06160753f009750e7cf2386536ff59e3069867497642c8fb5903342e6f7bbb0223aaa8091c505cc189a3cb3b4ceca7448cb441a3fe278","ssdeep":"384:SsFyo7lc6g7jiUsA5zy1FW9X3MiUMFMTMqMfM3MqMSMWMCM9MVMz/UYvnkxrV7eG:SsFyo7lc6g7jiUsA5zy1FW9HMiUMFMTJ","tlshash":"fd92e3c05fb0acf4a9bb933b6e5490148623e903c5097ad5a0f3e694b68db545bd3f0b","first_seen":"2026-06-18T10:59:08.340618Z","last_seen":"2026-09-11T14:35:27.954829Z","times_seen":3137,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-includes/blocks/cover/style.min.css?ver=7.1","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aponense.it/","date":"2026-09-04T14:28:41.601Z","timestamp":1788532121601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aponense.it","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 11:34:26 GMT","end":"Tue, 20 Oct 2026 11:34:25 GMT"},"fingerprint":{"sha1":"62:FD:6E:D2:CD:6B:99:C4:EF:E7:3A:2E:8C:68:78:ED:BF:1A:0E:1E","sha256":"7C:BB:56:FE:6D:38:1D:3F:28:CB:F8:70:83:9E:B4:19:7C:A2:9E:DA:2C:8B:DA:B2:95:E5:CD:D7:FD:61:FF:AE"}}},"request":{"raw":"GET /wp-includes/blocks/cover/style.min.css?ver=7.1 HTTP/1.1\r\nHost: aponense.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aponense.it/\r\nCookie: pvc_visits[0]=%7B%22version%22%3A1%2C%22session_id%22%3A%2214ec9eef-7ab7-4e82-8d9b-28dd5b9a0031%22%2C%22started_at%22%3A1788532121%2C%22expires_at%22%3A1788618521%2C%22visited%22%3A%7B%22post%22%3A%5B14%5D%7D%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 14:28:41 GMT\r\ncontent-type: text/css\r\ncontent-length: 1853\r\nlast-modified: Wed, 26 Aug 2026 14:28:55 GMT\r\netag: \"4f5c-659f40a0fe192-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 04 Oct 2026 14:28:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20316,"size_decoded":2206,"mime_type":"text/css","magic":"ASCII text, with very long lines (20316), with no line terminators","md5":"3b4be549cedeaeb1ff5db2229e1c0b3a","sha1":"822c628ab6a7a86ee1d3266c38a048224ca0f61c","sha256":"be3d9ac2ba79c8054eeb370c6f58189a86920decd27ed49c65c18c442214d618","sha512":"4c62998cfa01303b5cc164e44cfff5eeeb601db19b672772a8e7581a8712022e64e9ef4a9a878b85365435742cc8d6ca5d1db1816cb85214caf9d0c03eb27a82","ssdeep":"384:N95x4jp56/P14vPFgJUe3T1MHhZna/7cpFc39cecdX3cBZDn/sNNgkgLyg+gNgGi:N0eJ+pi36DdXELLdhaG5c","tlshash":"2192894122e58cfd75dfbf691f3deb88670b5c11c1894fdba52ae054634ca8888b3b16","first_seen":"2026-06-18T21:32:34.590319Z","last_seen":"2026-09-11T10:15:40.367243Z","times_seen":1156,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-content/themes/extendable/style.css?ver=2.1.7","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aponense.it/","date":"2026-09-04T14:28:41.610Z","timestamp":1788532121610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aponense.it","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 11:34:26 GMT","end":"Tue, 20 Oct 2026 11:34:25 GMT"},"fingerprint":{"sha1":"62:FD:6E:D2:CD:6B:99:C4:EF:E7:3A:2E:8C:68:78:ED:BF:1A:0E:1E","sha256":"7C:BB:56:FE:6D:38:1D:3F:28:CB:F8:70:83:9E:B4:19:7C:A2:9E:DA:2C:8B:DA:B2:95:E5:CD:D7:FD:61:FF:AE"}}},"request":{"raw":"GET /wp-content/themes/extendable/style.css?ver=2.1.7 HTTP/1.1\r\nHost: aponense.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aponense.it/\r\nCookie: pvc_visits[0]=%7B%22version%22%3A1%2C%22session_id%22%3A%2214ec9eef-7ab7-4e82-8d9b-28dd5b9a0031%22%2C%22started_at%22%3A1788532121%2C%22expires_at%22%3A1788618521%2C%22visited%22%3A%7B%22post%22%3A%5B14%5D%7D%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 14:28:41 GMT\r\ncontent-type: text/css\r\ncontent-length: 10408\r\nlast-modified: Wed, 22 Jul 2026 23:10:27 GMT\r\netag: \"be47-6573b3ec275b4-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 04 Oct 2026 14:28:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48711,"size_decoded":10762,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5513)","md5":"db0d576e4633a0962c131790f28013f6","sha1":"edeb1b161f3f931ddcd76737bcdd23aa2ddc7355","sha256":"75f21ef863407dfe33021f420240a7712d90c59893a7d76c8ad8266fee3408e0","sha512":"5469bba8c22a979c29751c082d678f489e6ef539aa63064355f6810823edc155b51e7d3fe61b09c9ca5e972aa7eb24712b7044564c0db38c39fdd90233474e1c","ssdeep":"768:ogyQT3tdpSwWkFww1B2f4h4u0Wcm7u4mzLxwrdB796D:ogyQTddpokFwwif4h4rPIBY","tlshash":"fc23c760dda06ab82577e327e95aea10d6768501cb1129d6f3fed14d13cc36c40aeeca","first_seen":"2026-06-17T15:40:31.869891Z","last_seen":"2026-09-09T01:03:05.610245Z","times_seen":437,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aponense.it/","date":"2026-09-04T14:28:41.614Z","timestamp":1788532121614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aponense.it","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 11:34:26 GMT","end":"Tue, 20 Oct 2026 11:34:25 GMT"},"fingerprint":{"sha1":"62:FD:6E:D2:CD:6B:99:C4:EF:E7:3A:2E:8C:68:78:ED:BF:1A:0E:1E","sha256":"7C:BB:56:FE:6D:38:1D:3F:28:CB:F8:70:83:9E:B4:19:7C:A2:9E:DA:2C:8B:DA:B2:95:E5:CD:D7:FD:61:FF:AE"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: aponense.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aponense.it/\r\nCookie: pvc_visits[0]=%7B%22version%22%3A1%2C%22session_id%22%3A%2214ec9eef-7ab7-4e82-8d9b-28dd5b9a0031%22%2C%22started_at%22%3A1788532121%2C%22expires_at%22%3A1788618521%2C%22visited%22%3A%7B%22post%22%3A%5B14%5D%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 14:28:41 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4872\r\nlast-modified: Tue, 25 Nov 2025 08:35:12 GMT\r\netag: \"3509-64467287f4ea8-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 04 Oct 2026 14:28:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":5232,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-11T15:18:02.360193Z","times_seen":963916,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-content/themes/extendable/assets/js/header.js?ver=2.1.7","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aponense.it/","date":"2026-09-04T14:28:41.797Z","timestamp":1788532121797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aponense.it","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 11:34:26 GMT","end":"Tue, 20 Oct 2026 11:34:25 GMT"},"fingerprint":{"sha1":"62:FD:6E:D2:CD:6B:99:C4:EF:E7:3A:2E:8C:68:78:ED:BF:1A:0E:1E","sha256":"7C:BB:56:FE:6D:38:1D:3F:28:CB:F8:70:83:9E:B4:19:7C:A2:9E:DA:2C:8B:DA:B2:95:E5:CD:D7:FD:61:FF:AE"}}},"request":{"raw":"GET /wp-content/themes/extendable/assets/js/header.js?ver=2.1.7 HTTP/1.1\r\nHost: aponense.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aponense.it/\r\nCookie: pvc_visits[0]=%7B%22version%22%3A1%2C%22session_id%22%3A%2214ec9eef-7ab7-4e82-8d9b-28dd5b9a0031%22%2C%22started_at%22%3A1788532121%2C%22expires_at%22%3A1788618521%2C%22visited%22%3A%7B%22post%22%3A%5B14%5D%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 14:28:41 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1619\r\nlast-modified: Wed, 22 Jul 2026 23:10:27 GMT\r\netag: \"f78-6573b3ec14504-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 04 Oct 2026 14:28:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3960,"size_decoded":1978,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"79c5237bf56c4247df7090c31171eee5","sha1":"c384730d987565e9867776e1a91f8e739c56560a","sha256":"0aee93f2d7c2015a32a397953665e7ae2d643347bbaaf24d65c68855ac302cb8","sha512":"9ab7ff35effb8d9c06b518e55f8640b994263d4cfff911a61bd303138c217897adc2c89ccb7f37d73f892269cae45b41be5f89fe65f4e6278dc5c2760bb589c8","ssdeep":"","tlshash":"d781d724a36c323e12fab19ae419a7d7773c0243b54309db9a4d989d21d44b8c2e1fd7","first_seen":"2026-05-28T01:27:32.104167Z","last_seen":"2026-09-10T09:28:48.318371Z","times_seen":617,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aponense.it/","date":"2026-09-04T14:28:41.848Z","timestamp":1788532121848,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aponense.it","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 11:34:26 GMT","end":"Tue, 20 Oct 2026 11:34:25 GMT"},"fingerprint":{"sha1":"62:FD:6E:D2:CD:6B:99:C4:EF:E7:3A:2E:8C:68:78:ED:BF:1A:0E:1E","sha256":"7C:BB:56:FE:6D:38:1D:3F:28:CB:F8:70:83:9E:B4:19:7C:A2:9E:DA:2C:8B:DA:B2:95:E5:CD:D7:FD:61:FF:AE"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1 HTTP/1.1\r\nHost: aponense.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aponense.it/\r\nCookie: pvc_visits[0]=%7B%22version%22%3A1%2C%22session_id%22%3A%2214ec9eef-7ab7-4e82-8d9b-28dd5b9a0031%22%2C%22started_at%22%3A1788532121%2C%22expires_at%22%3A1788618521%2C%22visited%22%3A%7B%22post%22%3A%5B14%5D%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 14:28:41 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 15205\r\nlast-modified: Thu, 21 May 2026 08:56:38 GMT\r\netag: \"9caa-6525017145596-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 04 Oct 2026 14:28:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40106,"size_decoded":15566,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (40105)","md5":"f0866401d2e6bf0b38495c9f278cf96a","sha1":"78a648d27819f61c8b8678d64632d2c35ac6801f","sha256":"726ac59577c8aeeec94c61bfb7791a709e401b5d871d35c39a65cd948f6124e3","sha512":"7889b5b5b511b2d7af4752fb4d4ae4edcf96b18351224867e39c5dbff54fb6fadf3e18a40bfa35cd803d34426e95623768e64a132282f1813525a7d1844f101f","ssdeep":"768:oqEYJ8Mc56JH6u0HpQPu3iU7bwUCD2XZjVV300FKKh:YYJC0cHWujsIl39KKh","tlshash":"37031af8b2a8703183ef50b5503f040bf3366968588d8068ba65d4eb68f454a51f7fbd","first_seen":"2026-05-21T20:58:39.683163Z","last_seen":"2026-09-11T14:35:27.90429Z","times_seen":11117,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-09-04","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"aponense.it/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-includes/images/w-logo-gray-white-bg.png","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aponense.it/","date":"2026-09-04T14:28:42.115Z","timestamp":1788532122115,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aponense.it","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 11:34:26 GMT","end":"Tue, 20 Oct 2026 11:34:25 GMT"},"fingerprint":{"sha1":"62:FD:6E:D2:CD:6B:99:C4:EF:E7:3A:2E:8C:68:78:ED:BF:1A:0E:1E","sha256":"7C:BB:56:FE:6D:38:1D:3F:28:CB:F8:70:83:9E:B4:19:7C:A2:9E:DA:2C:8B:DA:B2:95:E5:CD:D7:FD:61:FF:AE"}}},"request":{"raw":"GET /wp-includes/images/w-logo-gray-white-bg.png HTTP/1.1\r\nHost: aponense.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aponense.it/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pvc_visits[0]=%7B%22version%22%3A1%2C%22session_id%22%3A%2214ec9eef-7ab7-4e82-8d9b-28dd5b9a0031%22%2C%22started_at%22%3A1788532121%2C%22expires_at%22%3A1788618521%2C%22visited%22%3A%7B%22post%22%3A%5B14%5D%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 14:28:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 3241\r\nlast-modified: Wed, 26 Aug 2026 14:28:56 GMT\r\netag: \"ca9-659f40a1bef7b\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 04 Sep 2027 14:28:42 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3241,"size_decoded":3543,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"dcab89b8e04bf53fcd7f6a44a8cb4fae","sha1":"c3532d39f298c863a7489a2b4e95bda0676279c1","sha256":"c965a500f698483526faf92ac286047cecd825608cd1d83276de392b30a13a83","sha512":"ff82f2380c8ae37c2103ec466fb929353d3c8437c38ab95253ef97261fc9697c6af673a635e772d68247584d212db929f6c9cc0d5166f6907303ad6574810ee7","ssdeep":"","tlshash":"aa616dec7532920c4035393a729b9d01f7671582f772bf454f5eae634b059c4214d2da","first_seen":"2026-07-02T05:49:04.382065Z","last_seen":"2026-09-11T12:39:09.931383Z","times_seen":1023,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aponense.it/wp-includes/css/dashicons.min.css?ver=7.1","fqdn":"aponense.it","domain":"aponense.it","tld":"it"},"ip":{"addr":"213.158.93.42","port":443,"asn":34762,"as":"Combell NV","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aponense.it/","date":"2026-09-04T14:28:41.606Z","timestamp":1788532121606,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aponense.it","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 11:34:26 GMT","end":"Tue, 20 Oct 2026 11:34:25 GMT"},"fingerprint":{"sha1":"62:FD:6E:D2:CD:6B:99:C4:EF:E7:3A:2E:8C:68:78:ED:BF:1A:0E:1E","sha256":"7C:BB:56:FE:6D:38:1D:3F:28:CB:F8:70:83:9E:B4:19:7C:A2:9E:DA:2C:8B:DA:B2:95:E5:CD:D7:FD:61:FF:AE"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css?ver=7.1 HTTP/1.1\r\nHost: aponense.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aponense.it/\r\nCookie: pvc_visits[0]=%7B%22version%22%3A1%2C%22session_id%22%3A%2214ec9eef-7ab7-4e82-8d9b-28dd5b9a0031%22%2C%22started_at%22%3A1788532121%2C%22expires_at%22%3A1788618521%2C%22visited%22%3A%7B%22post%22%3A%5B14%5D%7D%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 14:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Dec 2025 07:46:46 GMT\r\netag: \"e67c-645076a0d1fdb-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 04 Oct 2026 14:28:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59004,"size_decoded":36052,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-09-11T15:31:04.947785Z","times_seen":72906,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"aponense.it","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}