{"report_id":"66826280-59fa-484b-bf2a-0debd41c0605","version":0,"status":"done","tags":[],"date":"2026-09-23T09:15:06Z","url":{"schema":"http","addr":"kathmanduhealing.org/","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":0,"asn":965,"as":"Webhosting Holdings LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"kathmanduhealing.org/","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"title":"Home - KathmanduHealing","dom":{"size":252708,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23147)","md5":"a45c42947e7f39679fc7bf3d427bdafa","sha1":"73f564062862e5603bd72e3089debf797689e66e","sha256":"2069d733e9106be5f48975e9b578802fd4ad016c8e35dfaebffd33309f2a1961","sha512":"e32d4c1a1dec21610326ccafe3625b4c3b6eba7f6421914a04b74288eebb6731fcd2b2a5b7b4cce962c5231db98e0242e4503e4897ed127a890a736f36f3ffac","ssdeep":"1536:4JOLyp5qCOQvsQUYPhmP8JPhVP8HPhVP8UPhVP8LPvtPmlPms6c1iTnrXGLTRTce:4JOWDqCOQewoV3Oi1tG90aX+CRns0e","tlshash":"bc34f9f3c206363e74db41ada3a92a3cf12bd1168b07f5f9b6ac11644bc75e53162a48","dom_hash":"domhash74a81660adbf8d209aee237d2cbc6417","first_seen":"2026-09-23T09:15:21.52038Z","last_seen":"2026-09-23T09:15:21.52038Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kathmanduhealing.org/","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":0,"asn":965,"as":"Webhosting Holdings LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-28T09:15:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"kathmanduhealing.org","ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"domain_registered":"2007-09-12","domain_rank":0,"first_seen":"2017-06-30T01:22:24Z","last_seen":"2026-04-12T18:52:31.726553Z","alert_count":136,"request_count":34,"received_data":1916926,"sent_data":18188,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Blocksy:2.0.87","description":"Blocksy is a modern and lightweight WordPress theme designed for a variety of websites, including blogs, portfolios, ecommerce stores, and business websites.","website":"https://creativethemes.com/blocksy","common_platform_enumeration":"","icon":"Blocksy.svg","categories":["WordPress themes"]},{"name":"Brizy WordPress","description":"Brizy WordPress is a plugin that enables users to build and design WordPress websites with an easy-to-use drag-and-drop editor and a wide range of customizable templates.","website":"https://brizy.io","common_platform_enumeration":"","icon":"brizy.svg","categories":["Page builders","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.188.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"WordPress:7.1.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Brizy Cloud","description":"Brizy Cloud is a platform for creating and managing websites using an intuitive drag-and-drop editor, allowing users to design and publish sites without any coding knowledge. ","website":"https://brizy.io","common_platform_enumeration":"","icon":"brizy.svg","categories":["CMS","Page builders"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Blocksy Companion","description":"Blocksy Companion is a WordPress plugin that provides additional functionality and features for the Blocksy theme.","website":"https://creativethemes.com/blocksy/companion/","common_platform_enumeration":"","icon":"Blocksy.svg","categories":["WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"fonts.bunny.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"1999-11-22","domain_rank":56787,"first_seen":"2022-03-21T07:38:02Z","last_seen":"2026-09-21T10:21:32.284796Z","alert_count":0,"request_count":10,"received_data":302750,"sent_data":9357,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":2566,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kathmanduhealing.org/brizy-preview-js-before","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"00b44b3211478ee5ff427ebf5944be00","sha1":"fe69c4c53600ee6675f9a63f7378102da0c9515e","sha256":"7a7466247ffc09d536e7c91ee6a4499b8167bd45b7b579bd3961d6300854e512","sha512":"2ac85922649f13bb0c758d121cff481c833bf8dfabc5c2c6d4717e45a1bba9cbd6f5e79210430b2fddb4758d483d250b677443aa9ae8d73920b4a49a65ba847d","ssdeep":"","tlshash":"df11a75fd5ae02ad71d14975c04d430b435d5639e444bcd4c3294e582cef892167608b","size":1023,"data":"","first_seen":"2026-09-23T09:15:21.558888Z","last_seen":"2026-09-23T09:15:21.558888Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-24T03:27:23.272494Z","times_seen":1067592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/themes/blocksy/static/bundle/main.js?ver=2.0.87","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"328257cd14e889f49ac6d857cb21bb90","sha1":"41ae9295d14fec4b680e3dcfd242b9e9d7452d0e","sha256":"94a701aba7ae2010fec14e68478d34b28a2daf629e26fc85b7496aefe16dff22","sha512":"7a2b7af1d391d57a603f042e4b041558abf5b7daf5018cf028c1688701a787801111389158511c013eb09be9e56f55f7814534cf966a1f0d4c11ee8756fd219d","ssdeep":"768:4gydMdJjARspdUkhWJjFeVIBt812LtvZXfHj6M7b5d4Az47D6tVa:X+HvZvyA8vr","tlshash":"44e2d6cdbb89f4761297b2b2a17fb647f33a248a381e5010e124cdd16c7494f9263e5e","size":33090,"data":"","first_seen":"2025-02-12T21:10:22.534474Z","last_seen":"2026-09-23T09:15:21.539048Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/plugins/brizy/public/editor-build/prod/editor/js/group-2_3.min.js?ver=305-wp","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2cf44f6a78883a4b2866c0d2f1d72684","sha1":"c9ad2bd0297d11e32572e000d33d6e72e1370b1a","sha256":"a952d9febd5fbc77dcb534f7fb4772477fdafa43760c2643758a6d3bd9227354","sha512":"ce1dd11c4abd464881aa2f62235f70ba36efdb70990a7f7a131f7b6396a1cd28ea90581451bcab5cf55cefcc54cd868b8a292dc077732de8548486dc29a19212","ssdeep":"1536:/xbBSVH5UxyAN1tDt7RgRjNTzxTFOqODZI4D7j0ZjGlTWyvtL:/WV8Bt+jN3xcj64DwG/","tlshash":"72d31948b655766247e360d1102f840ab377b9347416c0a0b7e9cad6287cd8e91fbfbe","size":134364,"data":"","first_seen":"2024-12-02T13:57:32.24664Z","last_seen":"2026-09-23T09:15:21.525988Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/themes/blocksy/static/bundle/68.612dc7fd3c0d776d0aa2.js","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7624fc1b0aacb376891e6d8aed0ddb53","sha1":"5f81b617228e50792383b76d797344d5adeb48fd","sha256":"b478aa012497eb9967719deeab85539932a4385d243304b77c7f3ed84102a63a","sha512":"9a2683724342b312367a63db5765a9f7c97894f81b81de6485943b1c943664e99280f8fbf4d9222deae92ade2593d3cb75367c9a267c5fd567e43ae9a5c0c2b6","ssdeep":"192:qnoJKtTqBYVU+dz9Bvu3Cqvslg6jkgs1xqMgig6jkgsICbkS+J:qPTWEJdz9Fu3CqvKkx/zkT1+J","tlshash":"110295c87ac97a7905df21f995ffa089f76a204ef41e4010f174c8a57c6184352b3bba","size":8417,"data":"","first_seen":"2024-12-26T20:37:55.937605Z","last_seen":"2026-09-23T09:15:21.530096Z","times_seen":229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-24T03:27:23.25316Z","times_seen":975739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/ct-scripts-js-extra","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"124671e517e065a8cf7b390a1244eb0a","sha1":"c839f96fc2633af3c2178940929111c267cbbbc7","sha256":"00412f01d7edc6cf074d692f40f97c044bdaf1ee125a558c53c9382698bf0997","sha512":"f7623590786e6351bfbd3a4758fdc74dfde549a4622208293a167f7628fabd4fc42542fb345e4a08616299a792f3467a2de85952300cf1276c5e8622df9c33e8","ssdeep":"","tlshash":"af71ee33d86a619d47a3e2f1490f2606e28a7053d8e59e6cd628dc1c86dca95330a61f","size":3740,"data":"","first_seen":"2026-09-23T09:08:16.812672Z","last_seen":"2026-09-23T09:15:21.560374Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/plugins/blocksy-companion-pro/framework/extensions/cookies-consent/static/bundle/main.js?ver=2.0.87","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3c34af4d034aeffc5fe5d4d3c58bc93","sha1":"d18096ea60c047c674d905dd76c8918e73d2ff77","sha256":"f968a2bfd884984fba3b85d1fd2c8d0414a1efef08db8b7176243aa6eed1a508","sha512":"f9aedb5a82dff388a6d92e40176cc4af808fd3787435d9ca0413949adec05219d309b41a927a52b35f02312539d1bc84ad85a2a2e2439ca26a508705d38c920a","ssdeep":"96:7QtvfZzPSyoBqO6DCpUtuEg4jEynSTiKPFTQ:8nZzPyBJKCpUIEg4jERTPFTQ","tlshash":"cfb1b8ddb69c78bc13e72571013f7646727324a6ac8a8050c21dd8e03c7869f4227fae","size":5468,"data":"","first_seen":"2025-01-07T10:28:29.943139Z","last_seen":"2026-09-23T09:15:21.539615Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/themes/blocksy/static/bundle/921.5514159e238824c4aec6.js","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"400b67c820e574275bbaeb9a8676eca9","sha1":"3792a14d995c896ec1475b6dd456cdfce869ffde","sha256":"5fe0d6e0c180c16537c63538da2781175cea66054f03dfe8bcb2e40a0e967f75","sha512":"ebfed569c629559e4cc2e3c0c9c2be8828d7eb8af949c599b8f72a999876ab8771143469b42a9fe55ff6eda21f4f4ecfe654618683ba458a178ce2bed58deef4","ssdeep":"192:xUQgOYY6wFYR/jBK2s2O2Xu0XWrMIQmb9X1wwKI3qUH8NUC:x9j6gYR/3s21XvXuMitqlUC","tlshash":"96d161edf684b9b646ea76ba937fa10cf37b24d2710b4460642a84d41c358c711b3fb9","size":6538,"data":"","first_seen":"2024-10-11T08:54:05.225678Z","last_seen":"2026-09-23T09:15:21.547227Z","times_seen":1129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/plugins/brizy-pro/public/editor-build/prod/js/preview.pro.min.js?ver=179-wp","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b6df4fef35d7df0d4873af1eb995393","sha1":"560d245087b2ea5c83cb5a109c644810c5e86abb","sha256":"4f10f749fb51b9d61dbad951769b81020f29cb903ca7bf00e02781fa98e502ff","sha512":"cde246fa7f7f8b96f4111f29daaade5d1c322893b6ec63bc869e9a6b2098aacb26b10cc2ef8e7df03eeb883f324dff9028d5c9cdb47ff9cd8f26b5786164e779","ssdeep":"6144:J7wI5loVALV57J13dWryl6IGIozpJ/4PyLxD6T843RJ6U5XbLVB6h9AtM7n+:J3SA7J13CIGvzplITh3P7XlB6vAq+","tlshash":"99c4c7ccba91f0b503e361b5806f140bf23b2969640e90e4e3a5d8d57cb898e9177f79","size":557556,"data":"","first_seen":"2025-04-11T01:58:00.786373Z","last_seen":"2026-09-23T09:15:21.558026Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/brizy-asset-main-30-js-after","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7929fb49305241669f0b4633373206cb","sha1":"6ff84df1608b2fe611ec3d457779fac8fca15b93","sha256":"9d2dd97944b07306af85407fd436befc61584b6cc7ae58e74061b34bc35cc9ea","sha512":"85698bb0654b59fe5bd644f5ce62ee6c2f1a81f3542e9a6c60f9b63f25cec0b97f09aabe1d18f433fd6161bfd23a968228fe8a8b73c6eafa25a1cc034817fc8a","ssdeep":"","tlshash":"8e218c68e7a22af107b38fb82235a752253a5041e082a066462c400019b99a788f18dd","size":1273,"data":"","first_seen":"2026-09-23T09:08:16.814977Z","last_seen":"2026-09-23T09:15:21.56124Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/plugins/blocksy-companion-pro/static/bundle/sticky.js?ver=2.0.87","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0c060f58a42fbdff544678085532d97","sha1":"6097f58ee465032e0f7ab5a400f81ddfca13366f","sha256":"5038e911ddff8e6aa9c735ae63547705037e72b836e92a28bb6fda45a6b6c35e","sha512":"c7803213fd58ecb5ff868cbd9855dbaf7265592924738cd221dd92fb479ff011d72eaeb2294a79e92a749fdbc538321d8b3f25df6fc30b0bee92c795fe43eda1","ssdeep":"192:pICpsikmPOZBYWBR/t4OL1bZSiVtIGSvrQzVEhU3:mCChVwo2O","tlshash":"3a42e7747354b43993a721db852fa506b6bb334d76cbc080a615cc6a6cd8c4370ebd97","size":12354,"data":"","first_seen":"2025-02-19T15:56:02.179752Z","last_seen":"2026-09-23T09:15:21.54411Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/themes/blocksy/static/bundle/418.66ea70734eb9e0d6ad3f.js","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"931ba1913f42a9a1a0f013613571c8c4","sha1":"c8b29e8a83ea50bdc5ea15bc16965f52797cf02d","sha256":"6ca3f8b3dc8d4beb66fc7bd15a02fa49a16038d457e6e25b55e50cc30ed6322e","sha512":"588f17295dc0c9b9de4410159e6dfa77f0db0d6fce1b93d9e4c2301fdc8f6812a390c2bb3e01149e623ea3b7b1003dcbed2f7d43a2edabcc34ceabf341527e0e","ssdeep":"","tlshash":"205141c8b255f6f28adae15d823f8602b2343da63469e084a25059d0496099f70bbf7b","size":2768,"data":"","first_seen":"2024-03-06T22:24:29Z","last_seen":"2026-09-23T09:15:21.549289Z","times_seen":666,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/themes/blocksy/static/bundle/95.9b58e560812076065644.js","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"40eff1f9a2bc19720127a5bebefd7f24","sha1":"4ac2a45e032c862320428ab40f3dbd2414b5471b","sha256":"0ebe4cbc51091000fdf4cc809309f7692ce0da48d1fe56f6e837284bd44a3f41","sha512":"59e03dac9c7cfb26e06c5bfd91052c3d2c100eeb05ea8494f01035ef24abbf68938a132337da1acfb73ddaf6ff315951f987c74d5aa4872c7fe954ed80b12e23","ssdeep":"","tlshash":"b651b7447654fef712e7a1ddd17f960773383993202db00422645db9c851d8ba0b3b5b","size":3012,"data":"","first_seen":"2024-03-06T22:24:29Z","last_seen":"2026-09-23T09:15:21.547921Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/themes/blocksy/static/bundle/815.e63c92833a5f3723714e.js","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ae562333ddf9f079f1319db2ee79cbd","sha1":"4aab21c7833afebaf2bedac9bb5138c330773a97","sha256":"64a4754f0be24eabe4dda0b51f6f878c02f577b781296c146ef9ff356b87f3c4","sha512":"f8e31c4ba621033f18b3d2daf11825bc2f3965e69f7bfba2fe2b07bf6d3996db458dd384a7b1487389e4d0b33c100bfb7986c15bcefe83522442d02ca73a3ee5","ssdeep":"","tlshash":"62118e2cb353a4630bb7b070b57baa0b56bb2023164559d0e1e5c59c1c79b0bd177ace","size":1059,"data":"","first_seen":"2024-12-07T11:17:27.538696Z","last_seen":"2026-09-23T09:15:21.549933Z","times_seen":432,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://kathmanduhealing.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/plugins/brizy/public/editor-build/prod/editor/icons/editor/right-arrow-thin.svg","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:33.415Z","timestamp":1790154873415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/plugins/brizy/public/editor-build/prod/editor/icons/editor/right-arrow-thin.svg HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 16 Feb 2025 13:21:32 GMT\r\netag: \"de-67b1e65c-72e71373d7b06e8f;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 157\r\ndate: Wed, 23 Sep 2026 09:14:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":222,"size_decoded":522,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"811954473ba4cda54f14eee769a5f898","sha1":"7c20702231895e40ae5511a02d5e03511e098e50","sha256":"98b1ec79e70aef280b17103466c6fe111b682e4c2077f7de16aaa07951ece6c3","sha512":"a57a07b7b3e3fd72b1b105a1cd1305666d9e81809dbb870305bdbf52f28483077b2b1ca89e876c05c813ff1ad0e804812ac0af822d535ea7ba4f77619383d496","ssdeep":"","tlshash":"90d02334c0fe50b84405f63ff3dc33041033d47042880054d1ee013c606ac48e78025c","first_seen":"2024-12-02T13:57:32.257099Z","last_seen":"2026-09-23T09:15:21.521618Z","times_seen":240,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/plugins/brizy/public/editor-build/prod/editor/icons/glyph/tail-right.svg","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:33.417Z","timestamp":1790154873417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/plugins/brizy/public/editor-build/prod/editor/icons/glyph/tail-right.svg HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 16 Feb 2025 13:21:32 GMT\r\netag: \"10b-67b1e65c-be5d2de5b767d6f4;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 191\r\ndate: Wed, 23 Sep 2026 09:14:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":267,"size_decoded":557,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"512ed191a8d625fef50084f9d3724330","sha1":"a0001fba1080b4ebd68ba0c10ebefd25e3bb93c5","sha256":"b8aa1ff1293b015edc3640dd82db961494b846cef0f07ee95dc6b195e4db830d","sha512":"4ac9c9bd8834a6daa15494f8cdfa3bbc7a3d0e53155050f5b5b7649f658ae9c6cb79545a428fb0b9f1e5f3745e8fa0de099ec290858dbd462136baca2f70a6dd","ssdeep":"","tlshash":"b4d02b96662d1dec4a56c26c67df33011a597066b79405a99e4d044912d5895f313160","first_seen":"2024-08-11T15:17:43Z","last_seen":"2026-09-23T09:15:21.522577Z","times_seen":511,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/uploads/2023/04/trt3_1298443722-nabin06-min.jpg","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:33.429Z","timestamp":1790154873429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/uploads/2023/04/trt3_1298443722-nabin06-min.jpg HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:33 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 12 Apr 2023 19:13:47 GMT\r\netag: \"646c-643702eb-2ca61b500e07a939;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 25708\r\ndate: Wed, 23 Sep 2026 09:14:33 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25708,"size_decoded":26036,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 650x350, components 3","md5":"c6ef7e073fa1d3010ded11f3b187dc92","sha1":"28f7affbd9a30495cdaffdb088404eae62f3b8b2","sha256":"f68b9f7bdbeaf52652e0f531233929f0d4e7704a15790f226c0abf71af3b6622","sha512":"6120717a4d04800d7ab95a592285f5e9b7598db1088ffdeb5d2d529de8c081299332203ca0617a3a4ec8d568d1a265add6ec6c43f092b1b2d37a754e02da57b7","ssdeep":"768:f6D26X3fXeebl8WeKZoL9yjvP2uT2yoK3iJk5WeWhnTxgG:faDJcL9KvuuT7ibeEnNN","tlshash":"78b2e15b8b78bc04c4be72be12ab91b93e534444c2217771fcc3a99d0b611da5bfc568","first_seen":"2025-08-14T18:35:24.996503Z","last_seen":"2026-09-23T09:15:21.523493Z","times_seen":5,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/roboto/files/roboto-latin-700-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:33.462Z","timestamp":1790154873462,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:02:14 GMT","end":"Sun, 06 Dec 2026 09:02:13 GMT"},"fingerprint":{"sha1":"2E:01:6D:98:30:DB:1C:CD:3F:AB:0D:7D:8A:EB:CB:69:F9:E3:42:DE","sha256":"34:42:57:B6:3E:6F:39:37:67:C6:D5:3E:59:9B:70:81:94:C3:F6:15:C1:B0:36:AF:C4:3C:32:2C:95:05:DA:B6"}}},"request":{"raw":"GET /roboto/files/roboto-latin-700-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kathmanduhealing.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/css?family=Lato:100,100italic,300,300italic,regular,italic,700,700italic,900,900italic|Roboto:100,100italic,300,300italic,regular,italic,500,500italic,700,700italic,900,900italic|Noto%20Serif:regular,italic,700,700italic|Yeseva%20One:regular\u0026subset=arabic,bengali,cyrillic,cyrillic-ext,devanagari,greek,greek-ext,gujarati,hebrew,khmer,korean,latin-ext,tamil,telugu,thai,vietnamese\u0026display=swap\u0026ver=305-wp\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:14:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 22240\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"6a96223c-56e0\"\r\nlast-modified: Tue, 01 Sep 2026 00:54:20 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 318\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/03/2026 14:57:38\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 42c65bdd26e8efc3be02bec814c0f2bf\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":22240,"size_decoded":23203,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22240, version 1.0","md5":"10a07810f28f8ff9a071a88dc2255bbb","sha1":"0a5c6fbc071198f9f844e882523c9c2e695cbd2d","sha256":"b9d66d1708156f765ada51939bc24ed259dafa69eb631b36e443680fe9e15879","sha512":"de9f6ddb50ee3830baeb1e1f6bb4c9d10d10bbc32022474cd3d15ce0de1f8f3f8abece8d30a58fbfd0b1a7c8d2f1e9bc4ad2f11e73ce712e6894ff09c7d76680","ssdeep":"384:dBqp4Xkc4lyUzhkLmg9DIKNEhDB+xFFR8njA5mhD0jDn1fPesWEaAG92BTIYrMm6:dC4Xkc4lyzLmeHNEJBOFRijAS017WzA0","tlshash":"99a2e1d301e57bd0c6a0be7e54c9305c2e7985ba3d7764028d19418c68828f2706caff","first_seen":"2026-02-20T12:52:01.602576Z","last_seen":"2026-09-23T21:21:27.074316Z","times_seen":3599,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":69,"receive":103,"ssl":388},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/themes/blocksy/style.css?ver=7.1.2","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:32.000Z","timestamp":1790154872000,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/themes/blocksy/style.css?ver=7.1.2 HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 16 Feb 2025 13:23:54 GMT\r\netag: \"58f-67b1e6ea-1f6f62754c027d59;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 693\r\ndate: Wed, 23 Sep 2026 09:14:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1423,"size_decoded":1054,"mime_type":"text/css","magic":"ASCII text, with very long lines (669)","md5":"f655291725c529e8b08d5f32475e8066","sha1":"4ff625dfcda1b87e12546c7bdcbc1582f47616b4","sha256":"6fc76ff6fed3e2a04b62c45c5526cce4214dcbd47950375135f147206dc6626b","sha512":"5421d746d487eaa4d092c021c3984803e6c34b1e95d43b4a0920025415caa00c7e220c80f004deb53cfa2aa8821719e78be7cbc9064d3e08cce4d37dd983ba09","ssdeep":"","tlshash":"fe21742b8e38267112d19353b7b536cad71b9328739c48d0f01ec6450359ab913fd346","first_seen":"2025-02-19T15:56:02.142408Z","last_seen":"2026-09-23T09:15:21.525254Z","times_seen":30,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/plugins/brizy/public/editor-build/prod/editor/js/group-2_3.min.js?ver=305-wp","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:32.220Z","timestamp":1790154872220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/plugins/brizy/public/editor-build/prod/editor/js/group-2_3.min.js?ver=305-wp HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 16 Feb 2025 13:21:32 GMT\r\netag: \"20cdc-67b1e65c-2e4f3ff0426aa4d8;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 37980\r\ndate: Wed, 23 Sep 2026 09:14:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":134364,"size_decoded":38359,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2cf44f6a78883a4b2866c0d2f1d72684","sha1":"c9ad2bd0297d11e32572e000d33d6e72e1370b1a","sha256":"a952d9febd5fbc77dcb534f7fb4772477fdafa43760c2643758a6d3bd9227354","sha512":"ce1dd11c4abd464881aa2f62235f70ba36efdb70990a7f7a131f7b6396a1cd28ea90581451bcab5cf55cefcc54cd868b8a292dc077732de8548486dc29a19212","ssdeep":"1536:/xbBSVH5UxyAN1tDt7RgRjNTzxTFOqODZI4D7j0ZjGlTWyvtL:/WV8Bt+jN3xcj64DwG/","tlshash":"72d31948b655766247e360d1102f840ab377b9347416c0a0b7e9cad6287cd8e91fbfbe","first_seen":"2024-12-02T13:57:32.24664Z","last_seen":"2026-09-23T09:15:21.525988Z","times_seen":15,"resource_available":true,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/lato/files/lato-latin-700-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:33.467Z","timestamp":1790154873467,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:02:14 GMT","end":"Sun, 06 Dec 2026 09:02:13 GMT"},"fingerprint":{"sha1":"2E:01:6D:98:30:DB:1C:CD:3F:AB:0D:7D:8A:EB:CB:69:F9:E3:42:DE","sha256":"34:42:57:B6:3E:6F:39:37:67:C6:D5:3E:59:9B:70:81:94:C3:F6:15:C1:B0:36:AF:C4:3C:32:2C:95:05:DA:B6"}}},"request":{"raw":"GET /lato/files/lato-latin-700-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kathmanduhealing.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/css?family=Lato:100,100italic,300,300italic,regular,italic,700,700italic,900,900italic|Roboto:100,100italic,300,300italic,regular,italic,500,500italic,700,700italic,900,900italic|Noto%20Serif:regular,italic,700,700italic|Yeseva%20One:regular\u0026subset=arabic,bengali,cyrillic,cyrillic-ext,devanagari,greek,greek-ext,gujarati,hebrew,khmer,korean,latin-ext,tamil,telugu,thai,vietnamese\u0026display=swap\u0026ver=305-wp\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:14:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23040\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"6a9d7bfb-5a00\"\r\nlast-modified: Sun, 06 Sep 2026 14:43:07 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 318\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/08/2026 10:32:42\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d2ccbc19b5e6ae4b7479e3dfc35a4310\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":23040,"size_decoded":24003,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-09-24T03:15:01.641777Z","times_seen":193344,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":106,"receive":6,"ssl":450},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/lato/files/lato-latin-300-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:33.472Z","timestamp":1790154873472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:02:14 GMT","end":"Sun, 06 Dec 2026 09:02:13 GMT"},"fingerprint":{"sha1":"2E:01:6D:98:30:DB:1C:CD:3F:AB:0D:7D:8A:EB:CB:69:F9:E3:42:DE","sha256":"34:42:57:B6:3E:6F:39:37:67:C6:D5:3E:59:9B:70:81:94:C3:F6:15:C1:B0:36:AF:C4:3C:32:2C:95:05:DA:B6"}}},"request":{"raw":"GET /lato/files/lato-latin-300-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kathmanduhealing.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/css?family=Lato:100,100italic,300,300italic,regular,italic,700,700italic,900,900italic|Roboto:100,100italic,300,300italic,regular,italic,500,500italic,700,700italic,900,900italic|Noto%20Serif:regular,italic,700,700italic|Yeseva%20One:regular\u0026subset=arabic,bengali,cyrillic,cyrillic-ext,devanagari,greek,greek-ext,gujarati,hebrew,khmer,korean,latin-ext,tamil,telugu,thai,vietnamese\u0026display=swap\u0026ver=305-wp\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:14:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23236\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"6aaf01e5-5ac4\"\r\nlast-modified: Sat, 19 Sep 2026 21:43:01 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 318\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/19/2026 22:37:12\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5b13923218415924ef4d2f778641fa5c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":23236,"size_decoded":24199,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23236, version 1.0","md5":"716309aab2bca045f9627f63ad79d0bf","sha1":"38804233a29aaf975d557fe14e762c627bef76e0","sha256":"115f6a626ca115d4ad5581b59275327e0e860b30330a52b0f785561332dd2429","sha512":"adb0bc6cb9b230eda5dac7396a94a9a4dba9c8ba0b2eb73f5f21a20c3ca3d14651420bc6a17e67a71b5bba624f5a4e92d55cbbb898985dcca838184f6dfb2b15","ssdeep":"384:AHLaTYDpoR9l+9cJHxkGk3kbFpW88POLvFd9EDtwntxiFyLs86d975a2sfbAh:AHLKSSD49c0SFQ1wFnCajiws86dJ59WK","tlshash":"8aa2e10a0b99e00ff53655ba7504daa0b1c554b9c3ed69a2a12115c7b4eeecbf83138e","first_seen":"2023-04-05T15:38:53Z","last_seen":"2026-09-24T02:54:51.028772Z","times_seen":60719,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":136,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/uploads/brizy/imgs/27893671_156350615069673_7460349117886103552_n-min-293x366x0x57x293x251x1681334678.jpg","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:33.519Z","timestamp":1790154873519,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/uploads/brizy/imgs/27893671_156350615069673_7460349117886103552_n-min-293x366x0x57x293x251x1681334678.jpg HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:33 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 12 Apr 2023 21:28:58 GMT\r\netag: \"33c6-6437229a-4c7aebf32d39a888;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 13254\r\ndate: Wed, 23 Sep 2026 09:14:33 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13254,"size_decoded":13582,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 293x251, components 3","md5":"185162a52e4ba58285b2f94842d9ab81","sha1":"c8ddc30334418da33f28d0adedd5bfff58a50674","sha256":"19129f8c534adbf096d319ee6b075b4912d05da654cb55231bb462879a88edc6","sha512":"10f151f8007cec81317e2965eca2cab7a863212018616738744756fb8209d32e1aa373fd30add062b0a9469c867d2937d9fff4fa7c6c3fc4c8e58b06d347f6aa","ssdeep":"384:qucWdrleIbU32Ky86tWVDIE/I/OHfhaNyu:qucWdrlFg3rL8WVVIGpaNyu","tlshash":"c752af39e4aa2a153d342c2541a594ac0d4679c7231eea821171db89bb3e1fb64e4f48","first_seen":"2025-08-14T18:35:25.02225Z","last_seen":"2026-09-23T09:15:21.528339Z","times_seen":5,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":486,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/uploads/brizy/imgs/66766927_153844522358870_6836416631401156676_n-min-293x293x0x21x293x251x1681334691.jpg","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:33.521Z","timestamp":1790154873521,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/uploads/brizy/imgs/66766927_153844522358870_6836416631401156676_n-min-293x293x0x21x293x251x1681334691.jpg HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:33 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 12 Apr 2023 21:28:58 GMT\r\netag: \"5a67-6437229a-b8db394589d9ee8f;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 23143\r\ndate: Wed, 23 Sep 2026 09:14:33 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23143,"size_decoded":23471,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 293x251, components 3","md5":"cf3d05cfd2198946aa5b966eee859c61","sha1":"275f25c2efc033f2d0bbdb7bdfb58b2230cd5c12","sha256":"aed0b7c9b48f1ca48d6bfbf21c2557daa25dab346f5391fa828e501392f48b38","sha512":"581a0493e65aa92c3c8890dc5d7c19682469967c4755c1d0696e96fcfd61a133e1545cf0dd24d8db64c8103f59844fb9176f01ac356126e52f83e3f789d1581d","ssdeep":"384:qLdTl4rF6EYWU4JinlPPJaI7PWz066ltnnvnjzIkQ4q1Yydsn:qM60ilPxasY0hltnnvIPr1Jdsn","tlshash":"79a2e15996e88bc1f96d1a6fa3f38a663560d66580809f5c7b76cca9ce00bd7b00e540","first_seen":"2025-08-14T18:35:25.024278Z","last_seen":"2026-09-23T09:15:21.529255Z","times_seen":5,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/themes/blocksy/static/bundle/68.612dc7fd3c0d776d0aa2.js","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:33.530Z","timestamp":1790154873530,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/themes/blocksy/static/bundle/68.612dc7fd3c0d776d0aa2.js HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 16 Feb 2025 13:23:54 GMT\r\netag: \"20e1-67b1e6ea-2cba06bc20519cc9;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2353\r\ndate: Wed, 23 Sep 2026 09:14:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8417,"size_decoded":2730,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8417), with no line terminators","md5":"7624fc1b0aacb376891e6d8aed0ddb53","sha1":"5f81b617228e50792383b76d797344d5adeb48fd","sha256":"b478aa012497eb9967719deeab85539932a4385d243304b77c7f3ed84102a63a","sha512":"9a2683724342b312367a63db5765a9f7c97894f81b81de6485943b1c943664e99280f8fbf4d9222deae92ade2593d3cb75367c9a267c5fd567e43ae9a5c0c2b6","ssdeep":"192:qnoJKtTqBYVU+dz9Bvu3Cqvslg6jkgs1xqMgig6jkgsICbkS+J:qPTWEJdz9Fu3CqvKkx/zkT1+J","tlshash":"110295c87ac97a7905df21f995ffa089f76a204ef41e4010f174c8a57c6184352b3bba","first_seen":"2024-12-26T20:37:55.937605Z","last_seen":"2026-09-23T09:15:21.530096Z","times_seen":229,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/themes/blocksy/static/bundle/brizy.min.css?ver=2.0.87","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:32.209Z","timestamp":1790154872209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/themes/blocksy/static/bundle/brizy.min.css?ver=2.0.87 HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 16 Feb 2025 13:23:54 GMT\r\netag: \"3d2-67b1e6ea-a069e9d5c9c26956;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 366\r\ndate: Wed, 23 Sep 2026 09:14:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":978,"size_decoded":727,"mime_type":"text/css","magic":"ASCII text, with very long lines (978), with no line terminators","md5":"d5cf66ef1b4e9c7e50ed0226665c3d22","sha1":"2a82ec0991eef989a17f17d97259c0f0b9eb4412","sha256":"0147e652ad938ab792ca04cce3a3a22c630919af6752cee782ddb4e8ac8960c9","sha512":"a1a5300282cdf516d8afffaa880313668ba5ca8970ed1ac2fa84a40ca1e9b968049199be68c49ad3f5cfad89ceb4cc374760d9582ff9872e3d12a116a7e81592","ssdeep":"","tlshash":"5b11028121b13f7d19fa022af154217c1a8f6040db5a08e97064e6e40fc83e1da3717d","first_seen":"2025-01-05T09:37:53.677211Z","last_seen":"2026-09-23T09:15:21.530835Z","times_seen":22,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/css?family=Lato:100,100italic,300,300italic,regular,italic,700,700italic,900,900italic|Roboto:100,100italic,300,300italic,regular,italic,500,500italic,700,700italic,900,900italic|Noto%20Serif:regular,italic,700,700italic|Yeseva%20One:regular\u0026subset=arabic,bengali,cyrillic,cyrillic-ext,devanagari,greek,greek-ext,gujarati,hebrew,khmer,korean,latin-ext,tamil,telugu,thai,vietnamese\u0026display=swap\u0026ver=305-wp","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:32.211Z","timestamp":1790154872211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:02:14 GMT","end":"Sun, 06 Dec 2026 09:02:13 GMT"},"fingerprint":{"sha1":"2E:01:6D:98:30:DB:1C:CD:3F:AB:0D:7D:8A:EB:CB:69:F9:E3:42:DE","sha256":"34:42:57:B6:3E:6F:39:37:67:C6:D5:3E:59:9B:70:81:94:C3:F6:15:C1:B0:36:AF:C4:3C:32:2C:95:05:DA:B6"}}},"request":{"raw":"GET /css?family=Lato:100,100italic,300,300italic,regular,italic,700,700italic,900,900italic|Roboto:100,100italic,300,300italic,regular,italic,500,500italic,700,700italic,900,900italic|Noto%20Serif:regular,italic,700,700italic|Yeseva%20One:regular\u0026subset=arabic,bengali,cyrillic,cyrillic-ext,devanagari,greek,greek-ext,gujarati,hebrew,khmer,korean,latin-ext,tamil,telugu,thai,vietnamese\u0026display=swap\u0026ver=305-wp HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:14:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/23/2026 09:14:33\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 756afcfa47d1e98d4d215453a64e4da0\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":101502,"size_decoded":4575,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1445)","md5":"0372748bc58495d914aa2553610c4961","sha1":"c50bb69d678b0783ece6034259996803017b3db8","sha256":"5a278781d02077fca78e2cc03af9b931a092cd9792b838bbaafdfe1515586aca","sha512":"736567e5ddeaf82c9c32128e9cc99687b94d8eb6977cc392f3b6cfc64da9db3600e0b42de33a6d09cb28e465f4e11db871c4bcbeb1c6030c28dd923d355a2901","ssdeep":"768:mb/8vOkSnUmd8eEUkbhPOAIICGK9pg6HEjx9rXBWNFeDyhSQJCR:j","tlshash":"a4a300bb001a2000d7c75d6323db6e15be1f91167345e069eb2cdcd4afeaa3943a176e","first_seen":"2026-04-12T18:52:33.034434Z","last_seen":"2026-09-23T09:15:21.531832Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1083,"timings":{"blocked":-1,"dns":0,"connect":284,"send":0,"wait":217,"receive":0,"ssl":581},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/plugins/brizy/public/editor-build/prod/editor/css/group-2_3.min.css?ver=305-wp","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:32.212Z","timestamp":1790154872212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/plugins/brizy/public/editor-build/prod/editor/css/group-2_3.min.css?ver=305-wp HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 16 Feb 2025 13:21:32 GMT\r\netag: \"10712-67b1e65c-2314aab7536b324d;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 5791\r\ndate: Wed, 23 Sep 2026 09:14:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":67346,"size_decoded":6155,"mime_type":"text/css","magic":"ASCII text, with very long lines (64127)","md5":"1d5a924280997b495a57095cc9c99466","sha1":"2f200750b7fb6000a27652fa76e449b9829d5bf2","sha256":"9fae278915de6c4ed280f54583b3a51e47a0aa4b936648b7af531aca935f4577","sha512":"f32616ea63ae6e3c5a431c70a136737c9747e1cc2c816a2af3c1b561f06184cbd9d0ae80e2ccef146d81e7cbe5498f7275bc408675bc9b73811d6b10267e7e7f","ssdeep":"1536:mkZ9POwe1uA5kGDj3Cyg5lrcee0qT66j3rwzlr2XET:mkZwwe1uA5kGDj3Cyg5lrcee0qTOT","tlshash":"386338af5851229991238ba6c7cd4e68473dc67314621cde7382684b8f87f9f33da607","first_seen":"2023-09-10T16:11:01Z","last_seen":"2026-09-23T09:15:21.532801Z","times_seen":63,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/plugins/brizy/public/editor-build/prod/editor/icons/glyph/user-meditation.svg","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:33.417Z","timestamp":1790154873417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/plugins/brizy/public/editor-build/prod/editor/icons/glyph/user-meditation.svg HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 16 Feb 2025 13:21:32 GMT\r\netag: \"200-67b1e65c-c4b1d8d8515c1a99;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 302\r\ndate: Wed, 23 Sep 2026 09:14:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":512,"size_decoded":668,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23ca5bcaa8a792d37e23d0fb67e58d77","sha1":"6bbe4674306e6f3517798c4d3746556925d742e3","sha256":"13df0df89f08d2f55d3152fe5af617c024412f591305ccc3a67027bcf0359a0f","sha512":"bb6e9e523092e8f003ae4e50bc4cb56c1e0468515f650dff9e1ea8b14f3f3968dbebf149b942d568812003ea42e2e8646bf8b5e6e742ec5f8747276d38fdef91","ssdeep":"","tlshash":"b9f059a6e37c14cd458fc95c4d8ba226113ef2e7356103a8b90d477c9183d67d1035b0","first_seen":"2025-08-14T18:35:25.037814Z","last_seen":"2026-09-23T09:15:21.533673Z","times_seen":6,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/uploads/brizy/imgs/84538373_138770350589314_1814078430426037957_n-min-293x299x0x24x293x251x1681334700.jpg","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:33.520Z","timestamp":1790154873520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/uploads/brizy/imgs/84538373_138770350589314_1814078430426037957_n-min-293x299x0x24x293x251x1681334700.jpg HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:33 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 12 Apr 2023 21:28:58 GMT\r\netag: \"358f-6437229a-e5bfdd9628e012bd;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 13711\r\ndate: Wed, 23 Sep 2026 09:14:33 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13711,"size_decoded":14039,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 293x251, components 3","md5":"ededbf274bf21429a76a112b84713821","sha1":"854b21f618fa692327eef18ca6a6966ede8e2ae2","sha256":"eba5062f12dc0c3be8600ca2243e40b9be91512b14bc0df0481975890a461e6a","sha512":"ffa7871225df73c53cc00b966e82252cba6d441ebb9868ec1721c6fb303d620b1a897eeb463f24d4afa56c7859831e48d38662d16a85d39052363c638835fa60","ssdeep":"192:/S0+KQ0dFs7nhC/JTfDPIoXsKqzmbVZi6+zKSnZYzWslQlrucxnc+miKCtgOEPdF:q0nns7n8hP5aX8W7ruqn/t1vq+ID","tlshash":"9f52c076f3620bc168a14c1585421fade1eaae920f7463022ef4f7f26b551f540dc707","first_seen":"2025-08-14T18:35:25.041457Z","last_seen":"2026-09-23T09:15:21.53453Z","times_seen":5,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/themes/blocksy/static/bundle/non-critical-styles.min.css?ver=2.0.87","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:34.113Z","timestamp":1790154874113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/themes/blocksy/static/bundle/non-critical-styles.min.css?ver=2.0.87 HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 16 Feb 2025 13:23:54 GMT\r\netag: \"1944-67b1e6ea-d18a7283f7de6805;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1247\r\ndate: Wed, 23 Sep 2026 09:14:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6468,"size_decoded":1610,"mime_type":"text/css","magic":"ASCII text, with very long lines (6468), with no line terminators","md5":"9b0c43ae01308857c3607c3a8e2d1154","sha1":"da69860ec94beb05cc11c07a8a19c1bd319dcabd","sha256":"14312fff51e843319edf340e6bbbac182bfa880cc989b2efc3f98aa316dca219","sha512":"fea728c803fa28511652d1d183bb9c64729af500070eaf206bff7ac01e8ded1a809927d4b62f2190d4cd6798af33f8178625267ad9efa4d7b62e294277075656","ssdeep":"192:xxBZ7jB1UcvJf/Gj/gFjxBeycCPKZyh32:xxBZHB1UcvJf/GDgFjxBd9m","tlshash":"78d123d2f1da807dab238e14e339f906b75a3590ff0611a2a9b24d744ec379551a3b3c","first_seen":"2024-05-27T03:50:13Z","last_seen":"2026-09-23T09:15:21.535493Z","times_seen":1256,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-23T09:14:30.601Z","timestamp":1790154870601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/7.4.33\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://kathmanduhealing.org/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://kathmanduhealing.org/wp-json/wp/v2/pages/29\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://kathmanduhealing.org/\u003e; rel=shortlink\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Wed, 23 Sep 2026 09:14:31 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Blocksy:2.0.87","description":"Blocksy is a modern and lightweight WordPress theme designed for a variety of websites, including blogs, portfolios, ecommerce stores, and business websites.","website":"https://creativethemes.com/blocksy","common_platform_enumeration":"","icon":"Blocksy.svg","categories":["WordPress themes"]},{"name":"Brizy WordPress","description":"Brizy WordPress is a plugin that enables users to build and design WordPress websites with an easy-to-use drag-and-drop editor and a wide range of customizable templates.","website":"https://brizy.io","common_platform_enumeration":"","icon":"brizy.svg","categories":["Page builders","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.188.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"WordPress:7.1.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Brizy Cloud","description":"Brizy Cloud is a platform for creating and managing websites using an intuitive drag-and-drop editor, allowing users to design and publish sites without any coding knowledge. ","website":"https://brizy.io","common_platform_enumeration":"","icon":"brizy.svg","categories":["CMS","Page builders"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Blocksy Companion","description":"Blocksy Companion is a WordPress plugin that provides additional functionality and features for the Blocksy theme.","website":"https://creativethemes.com/blocksy/companion/","common_platform_enumeration":"","icon":"Blocksy.svg","categories":["WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":237966,"size_decoded":34610,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (23147)","md5":"664495c73015772c4ace8c379a796acd","sha1":"b603a37492e31d60f67d2200ca8107e07b3f31db","sha256":"25130179611d38a2d2f0e87259cc78d0f47ed0ba5e1d9737f1f72d861a53eed1","sha512":"d59dcf89b8a75543b523506ec18755faf14fc7f8879a3e9a309bdcad5c0236d081f218db63f409b5b604a8a7d88cad542a161c116c05d10a97955c5ae1911b23","ssdeep":"1536:AM5Reyp5qCFIvsQUYPhmP8JPhVP8HPhVP8UPhVP8LPvtPmlPms6c1iTnrXGLTRTd:AM5hDqCFYewoV3Oi1tG5ICRMy6J","tlshash":"1834f8f3c206363e74db81a9e3a9263cf13bd1168b07f5f9b6ac11648bc75d53162a48","first_seen":"2026-09-23T09:15:21.536097Z","last_seen":"2026-09-23T09:15:21.536097Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1202,"timings":{"blocked":-1,"dns":37,"connect":61,"send":0,"wait":771,"receive":0,"ssl":333},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/plugins/brizy-pro/public/editor-build/prod/css/preview.pro.min.css?ver=179-wp","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:32.213Z","timestamp":1790154872213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/plugins/brizy-pro/public/editor-build/prod/css/preview.pro.min.css?ver=179-wp HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 16 Feb 2025 13:22:04 GMT\r\netag: \"58a56-67b1e67c-24cdbab81a154838;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 37515\r\ndate: Wed, 23 Sep 2026 09:14:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":363094,"size_decoded":37880,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5c1241596f54702354f593d2baf2b5a9","sha1":"4c505c7afbe89cef5abc8758521a1bb901600a77","sha256":"39137b3d28a0d27fe9b9cd8c4a44b9a45de0c0dccfd03af212bf5896cab2add6","sha512":"b313e80d629cd67b86d9cf835a5da25c3af40ecb480a0ac3a08099d4e8cad0a85e0c5e6e80896fef6954f2ed8ec466dbca4b97df5c54c0c63d7c487090be9e11","ssdeep":"1536:4zXmYappPPS+M8KBAgIHkdyuwWha3mfrNLGw75XHoEO4vd8GVaCfUu8oYf4pPzD9:0XSPSSgnyTWha3YLmfjfK","tlshash":"887474e790703f1c04db8838d688b77b2a37e111815336dd6861b67887cb69a7fb614e","first_seen":"2025-04-11T01:58:00.823143Z","last_seen":"2026-09-23T09:15:21.53749Z","times_seen":11,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:32.216Z","timestamp":1790154872216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 09 Aug 2023 04:15:14 GMT\r\netag: \"3509-64d312d2-c7719506efdaf578;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4678\r\ndate: Wed, 23 Sep 2026 09:14:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":5055,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-24T03:27:23.25316Z","times_seen":975739,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/themes/blocksy/static/bundle/main.js?ver=2.0.87","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:32.218Z","timestamp":1790154872218,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/themes/blocksy/static/bundle/main.js?ver=2.0.87 HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 16 Feb 2025 13:23:54 GMT\r\netag: \"8142-67b1e6ea-b5441a7dd2799c96;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 8797\r\ndate: Wed, 23 Sep 2026 09:14:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33090,"size_decoded":9174,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28311)","md5":"328257cd14e889f49ac6d857cb21bb90","sha1":"41ae9295d14fec4b680e3dcfd242b9e9d7452d0e","sha256":"94a701aba7ae2010fec14e68478d34b28a2daf629e26fc85b7496aefe16dff22","sha512":"7a2b7af1d391d57a603f042e4b041558abf5b7daf5018cf028c1688701a787801111389158511c013eb09be9e56f55f7814534cf966a1f0d4c11ee8756fd219d","ssdeep":"768:4gydMdJjARspdUkhWJjFeVIBt812LtvZXfHj6M7b5d4Az47D6tVa:X+HvZvyA8vr","tlshash":"44e2d6cdbb89f4761297b2b2a17fb647f33a248a381e5010e124cdd16c7494f9263e5e","first_seen":"2025-02-12T21:10:22.534474Z","last_seen":"2026-09-23T09:15:21.539048Z","times_seen":65,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/plugins/blocksy-companion-pro/framework/extensions/cookies-consent/static/bundle/main.js?ver=2.0.87","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:32.219Z","timestamp":1790154872219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/plugins/blocksy-companion-pro/framework/extensions/cookies-consent/static/bundle/main.js?ver=2.0.87 HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 16 Feb 2025 13:24:13 GMT\r\netag: \"155c-67b1e6fd-328f828ead6e2201;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2199\r\ndate: Wed, 23 Sep 2026 09:14:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5468,"size_decoded":2576,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5258)","md5":"c3c34af4d034aeffc5fe5d4d3c58bc93","sha1":"d18096ea60c047c674d905dd76c8918e73d2ff77","sha256":"f968a2bfd884984fba3b85d1fd2c8d0414a1efef08db8b7176243aa6eed1a508","sha512":"f9aedb5a82dff388a6d92e40176cc4af808fd3787435d9ca0413949adec05219d309b41a927a52b35f02312539d1bc84ad85a2a2e2439ca26a508705d38c920a","ssdeep":"96:7QtvfZzPSyoBqO6DCpUtuEg4jEynSTiKPFTQ:8nZzPyBJKCpUIEg4jERTPFTQ","tlshash":"cfb1b8ddb69c78bc13e72571013f7646727324a6ac8a8050c21dd8e03c7869f4227fae","first_seen":"2025-01-07T10:28:29.943139Z","last_seen":"2026-09-23T09:15:21.539615Z","times_seen":41,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/uploads/2023/04/cropped-kch-icon.jpg","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:32.232Z","timestamp":1790154872232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/uploads/2023/04/cropped-kch-icon.jpg HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:32 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 12 Apr 2023 21:37:08 GMT\r\netag: \"402f-64372484-557e6433bc196e32;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 16431\r\ndate: Wed, 23 Sep 2026 09:14:32 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16431,"size_decoded":16759,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 512x512, components 3","md5":"a28092ac326485f5cad3dab3c5323d92","sha1":"cd7721d61aad2454c1c4fbd12a472fc723fd6803","sha256":"bfe4c1f7129955f5adbb97281d9edd4a4e91d482a38e824bdbee7e57ea022ea5","sha512":"889d7e37ee23f44a76303e9ed8ff7aa50773d4eefb9c72c8920fdc5ba961a940596dc9fd13a21837dbdfd82965e061311f43a44bd9cb7b6b753d34c60fd647fb","ssdeep":"384:HA1+XQ5DaTmFQJhQzKPOxfnWDOEmklvtbs2Ad:Hacjm6JazuOxODPNlFbs2Ad","tlshash":"82726f038c445783a5789bbdbe030ebd1f5d2e1ce4967aef05320ea77a642a61d4f42d","first_seen":"2026-04-12T18:52:33.054564Z","last_seen":"2026-09-23T09:15:21.540215Z","times_seen":4,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/roboto/files/roboto-latin-400-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:33.464Z","timestamp":1790154873464,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:02:14 GMT","end":"Sun, 06 Dec 2026 09:02:13 GMT"},"fingerprint":{"sha1":"2E:01:6D:98:30:DB:1C:CD:3F:AB:0D:7D:8A:EB:CB:69:F9:E3:42:DE","sha256":"34:42:57:B6:3E:6F:39:37:67:C6:D5:3E:59:9B:70:81:94:C3:F6:15:C1:B0:36:AF:C4:3C:32:2C:95:05:DA:B6"}}},"request":{"raw":"GET /roboto/files/roboto-latin-400-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kathmanduhealing.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/css?family=Lato:100,100italic,300,300italic,regular,italic,700,700italic,900,900italic|Roboto:100,100italic,300,300italic,regular,italic,500,500italic,700,700italic,900,900italic|Noto%20Serif:regular,italic,700,700italic|Yeseva%20One:regular\u0026subset=arabic,bengali,cyrillic,cyrillic-ext,devanagari,greek,greek-ext,gujarati,hebrew,khmer,korean,latin-ext,tamil,telugu,thai,vietnamese\u0026display=swap\u0026ver=305-wp\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:14:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 21884\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"6a9ea4aa-557c\"\r\nlast-modified: Mon, 07 Sep 2026 11:48:58 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 318\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/08/2026 09:24:29\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 513006cf01ca134908b2d9641f1d215a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":21884,"size_decoded":22847,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21884, version 1.0","md5":"4279528ce0e7dc28919e6f8ce5f0eaa5","sha1":"a0bec563643727d81bf21d0acec08227d9269da4","sha256":"425c0713a8176f92273d378599c7eac57de7fafabd4bd0ed457b70eb8f80d371","sha512":"2b6a62ea544e93669893bac8bb8a5233d55cda9c3b293add6f312808cdf5127822446a516b66656cdae7409c5938ad1ff4fe0a1ba48e52134e141d6a78100507","ssdeep":"384:74kazv9DMAYqVNsLRxmVN7UX3oC4JjImMex3viFG5Bt7/br6CfY/lC7:7fazv9DM2Q+I3oC4JjPb30G5rtfY/87","tlshash":"0aa2e187b3eaa46d5787b931fa0a1900b8fe73f65d27da6484e087c9a1456c48c3dd3c","first_seen":"2026-02-19T22:29:10.595811Z","last_seen":"2026-09-24T02:15:43.99671Z","times_seen":29513,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":174,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/roboto/files/roboto-latin-400-italic.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:33.469Z","timestamp":1790154873469,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:02:14 GMT","end":"Sun, 06 Dec 2026 09:02:13 GMT"},"fingerprint":{"sha1":"2E:01:6D:98:30:DB:1C:CD:3F:AB:0D:7D:8A:EB:CB:69:F9:E3:42:DE","sha256":"34:42:57:B6:3E:6F:39:37:67:C6:D5:3E:59:9B:70:81:94:C3:F6:15:C1:B0:36:AF:C4:3C:32:2C:95:05:DA:B6"}}},"request":{"raw":"GET /roboto/files/roboto-latin-400-italic.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kathmanduhealing.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/css?family=Lato:100,100italic,300,300italic,regular,italic,700,700italic,900,900italic|Roboto:100,100italic,300,300italic,regular,italic,500,500italic,700,700italic,900,900italic|Noto%20Serif:regular,italic,700,700italic|Yeseva%20One:regular\u0026subset=arabic,bengali,cyrillic,cyrillic-ext,devanagari,greek,greek-ext,gujarati,hebrew,khmer,korean,latin-ext,tamil,telugu,thai,vietnamese\u0026display=swap\u0026ver=305-wp\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:14:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23672\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"6a9ea4aa-5c78\"\r\nlast-modified: Mon, 07 Sep 2026 11:48:58 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/08/2026 12:14:14\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a94adee2b1a4e605dd384102305d51bb\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":23672,"size_decoded":24635,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23672, version 1.0","md5":"edbbd00269c18f7d0a4bccdc5cf1d89b","sha1":"1f918fe929578fab0dd8a7dfd0178ae4db6b635c","sha256":"5d0e978b6560631da2504e1612e91ee1ff959c04adae245eb320ac90cad2ba2f","sha512":"9aaaacce05eb5aede0162cf48e5ac76ab34c4fd32278e306710d80a60b6adfd17f23089c6552490cbfbe02bcbb160a3ec17770cbeb4dc7a0083406cd6bf15d12","ssdeep":"384:dPbDiVieKLJk2dTOcAaSftFo0JDKwqjqsVtsxXZ8HrIl07ZE1RBZcD83+gCIXStA:9eVQ7divaAFVZ6638H8CkRBuDK1StF9I","tlshash":"23b2e14cb447e2acafd798b13bbd47b04c30c4a7c10b8e9129cd83e869dc5914ee51ae","first_seen":"2026-02-20T03:30:02.278393Z","last_seen":"2026-09-23T22:21:16.788272Z","times_seen":1971,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":70,"receive":34,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/lato/files/lato-latin-400-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:33.468Z","timestamp":1790154873468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:02:14 GMT","end":"Sun, 06 Dec 2026 09:02:13 GMT"},"fingerprint":{"sha1":"2E:01:6D:98:30:DB:1C:CD:3F:AB:0D:7D:8A:EB:CB:69:F9:E3:42:DE","sha256":"34:42:57:B6:3E:6F:39:37:67:C6:D5:3E:59:9B:70:81:94:C3:F6:15:C1:B0:36:AF:C4:3C:32:2C:95:05:DA:B6"}}},"request":{"raw":"GET /lato/files/lato-latin-400-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kathmanduhealing.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/css?family=Lato:100,100italic,300,300italic,regular,italic,700,700italic,900,900italic|Roboto:100,100italic,300,300italic,regular,italic,500,500italic,700,700italic,900,900italic|Noto%20Serif:regular,italic,700,700italic|Yeseva%20One:regular\u0026subset=arabic,bengali,cyrillic,cyrillic-ext,devanagari,greek,greek-ext,gujarati,hebrew,khmer,korean,latin-ext,tamil,telugu,thai,vietnamese\u0026display=swap\u0026ver=305-wp\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:14:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23580\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"6a98c728-5c1c\"\r\nlast-modified: Thu, 03 Sep 2026 01:02:32 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 318\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/03/2026 16:54:27\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c03c5fd87069ec3f277294ed725c5999\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":23580,"size_decoded":24543,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-09-24T03:15:01.648311Z","times_seen":269799,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/noto-serif/files/noto-serif-latin-400-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:33.470Z","timestamp":1790154873470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:02:14 GMT","end":"Sun, 06 Dec 2026 09:02:13 GMT"},"fingerprint":{"sha1":"2E:01:6D:98:30:DB:1C:CD:3F:AB:0D:7D:8A:EB:CB:69:F9:E3:42:DE","sha256":"34:42:57:B6:3E:6F:39:37:67:C6:D5:3E:59:9B:70:81:94:C3:F6:15:C1:B0:36:AF:C4:3C:32:2C:95:05:DA:B6"}}},"request":{"raw":"GET /noto-serif/files/noto-serif-latin-400-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kathmanduhealing.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/css?family=Lato:100,100italic,300,300italic,regular,italic,700,700italic,900,900italic|Roboto:100,100italic,300,300italic,regular,italic,500,500italic,700,700italic,900,900italic|Noto%20Serif:regular,italic,700,700italic|Yeseva%20One:regular\u0026subset=arabic,bengali,cyrillic,cyrillic-ext,devanagari,greek,greek-ext,gujarati,hebrew,khmer,korean,latin-ext,tamil,telugu,thai,vietnamese\u0026display=swap\u0026ver=305-wp\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:14:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14400\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"6a906926-3840\"\r\nlast-modified: Thu, 27 Aug 2026 16:43:18 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 318\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/29/2026 09:13:37\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 170cba2e0e5e55faaa0ccd62c82068fd\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":14400,"size_decoded":15363,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14400, version 1.0","md5":"e99d66d6b97ce67c022165b66fcd5458","sha1":"541afd7808129e8923511ccbcb190627ebfdeee6","sha256":"4c0cbe3eec50d260754d681c17ee2af49a43d7fd93ce42877f665fcb1a889b87","sha512":"e301ecd1179622953c637e9702a0611bd660e5612a360a1cebdc1a0e97d7e7dd2cb9b290ebfc48545c77c582b3ce24a3c2b4386bb93c43f856b3b63fa69eef72","ssdeep":"384:igdF7Wfw5jRIJwWllDM39tkAGXHwZZRcg/pv:NF/I9bDw92Asa7jx","tlshash":"a752c04b3b263c06f27cdcf00155df6260a17e6e0e16b8f762348b3552498af5259dc7","first_seen":"2025-03-15T08:32:00.136258Z","last_seen":"2026-09-23T09:15:21.542829Z","times_seen":867,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":214,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/yeseva-one/files/yeseva-one-latin-400-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:33.473Z","timestamp":1790154873473,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:02:14 GMT","end":"Sun, 06 Dec 2026 09:02:13 GMT"},"fingerprint":{"sha1":"2E:01:6D:98:30:DB:1C:CD:3F:AB:0D:7D:8A:EB:CB:69:F9:E3:42:DE","sha256":"34:42:57:B6:3E:6F:39:37:67:C6:D5:3E:59:9B:70:81:94:C3:F6:15:C1:B0:36:AF:C4:3C:32:2C:95:05:DA:B6"}}},"request":{"raw":"GET /yeseva-one/files/yeseva-one-latin-400-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kathmanduhealing.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/css?family=Lato:100,100italic,300,300italic,regular,italic,700,700italic,900,900italic|Roboto:100,100italic,300,300italic,regular,italic,500,500italic,700,700italic,900,900italic|Noto%20Serif:regular,italic,700,700italic|Yeseva%20One:regular\u0026subset=arabic,bengali,cyrillic,cyrillic-ext,devanagari,greek,greek-ext,gujarati,hebrew,khmer,korean,latin-ext,tamil,telugu,thai,vietnamese\u0026display=swap\u0026ver=305-wp\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:14:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 17492\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"6ab06a03-4454\"\r\nlast-modified: Sun, 20 Sep 2026 23:19:31 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/22/2026 18:15:11\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 530372a426f5dcdafee73458bf5d30eb\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":17492,"size_decoded":18455,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17492, version 1.0","md5":"63ff0f624ac36a706d591fb45901f481","sha1":"5f84fd27a085e2d4b162c6fa1162b7e0e47565a6","sha256":"593184b5936b6c88f68a1ac5d03e1e505478de7f61caaa2f8377a50a804c211b","sha512":"cb157e01079b8eda9256abec9dec5edc2796f7f6b48ced42029a5f85f4b5b93c4e4228525e6690d9a2970de4090d824532b062f1b5b437f3c8333aa927e9b3ef","ssdeep":"384:8IfjRkb1k8a+9pADPwk+7PaIcYBkJ7/44:8G6V9pcPwk+LiYKR44","tlshash":"c872e19553ea8cbe414b73389046e5c0fab7835a9e727176c8f81f697d601d3072027a","first_seen":"2025-06-09T10:32:43.250183Z","last_seen":"2026-09-23T09:15:21.543432Z","times_seen":1395,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":170,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/plugins/blocksy-companion-pro/static/bundle/sticky.js?ver=2.0.87","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:33.612Z","timestamp":1790154873612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/plugins/blocksy-companion-pro/static/bundle/sticky.js?ver=2.0.87 HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 16 Feb 2025 13:24:13 GMT\r\netag: \"3042-67b1e6fd-d05059bb4cf93409;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3354\r\ndate: Wed, 23 Sep 2026 09:14:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12354,"size_decoded":3731,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12354), with no line terminators","md5":"e0c060f58a42fbdff544678085532d97","sha1":"6097f58ee465032e0f7ab5a400f81ddfca13366f","sha256":"5038e911ddff8e6aa9c735ae63547705037e72b836e92a28bb6fda45a6b6c35e","sha512":"c7803213fd58ecb5ff868cbd9855dbaf7265592924738cd221dd92fb479ff011d72eaeb2294a79e92a749fdbc538321d8b3f25df6fc30b0bee92c795fe43eda1","ssdeep":"192:pICpsikmPOZBYWBR/t4OL1bZSiVtIGSvrQzVEhU3:mCChVwo2O","tlshash":"3a42e7747354b43993a721db852fa506b6bb334d76cbc080a615cc6a6cd8c4370ebd97","first_seen":"2025-02-19T15:56:02.179752Z","last_seen":"2026-09-23T09:15:21.54411Z","times_seen":39,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/uploads/2023/04/cropped-kch-icon-32x32.jpg","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:34.295Z","timestamp":1790154874295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/uploads/2023/04/cropped-kch-icon-32x32.jpg HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:34 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 Apr 2023 18:50:05 GMT\r\netag: \"317-644037dd-2942786d363b9794;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 791\r\ndate: Wed, 23 Sep 2026 09:14:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":791,"size_decoded":1116,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 32x32, components 3","md5":"d819e966c18a98f6fa36afe5289a1e78","sha1":"bfa9b163f084d00b27aa020cc6c4259ad023c20c","sha256":"ed9467506cd8ffd8b49c85ea1b7a1c1fedc1cba77846e3ced3a0f8dedee7943f","sha512":"5c93c9bea94420b14816ff9d9dd9bfc7ea31e3757c580fd622642d03303ee7d0b8b27b64ebb4ec0c2fb0f633a88e035af9da3e033477b4302a328c02fe976521","ssdeep":"","tlshash":"e2012d2a1b026893e8b12f3a128c1b453f80bf06dc111387b4b1ed85ac6d0e8fdc0aa0","first_seen":"2025-08-14T18:35:25.016964Z","last_seen":"2026-09-23T09:15:21.544852Z","times_seen":5,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/uploads/2023/04/kathmadu-healing-group-min.jpg","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:33.427Z","timestamp":1790154873427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/uploads/2023/04/kathmadu-healing-group-min.jpg HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:33 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 12 Apr 2023 17:55:02 GMT\r\netag: \"1d452-6436f076-5eb151ed994e34a2;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 119890\r\ndate: Wed, 23 Sep 2026 09:14:33 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":119890,"size_decoded":120220,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1080, components 3","md5":"bea95640b668e1cafc798ac288af99d3","sha1":"00b77c77181d55019d6d5542a4b198d3a3198772","sha256":"daf482b5e8167e3a5c805cac3a7f6d7db91c891205bde6c65e08cfd72583abc4","sha512":"40b978eeeb48f3e79e9a28fd34119fd5a963f8c8ae3abf91522f3a752b88a8a6b20085cbf1f9857d154161cb03c4f0e1f7cef27acc508faad5d49c881bf8168b","ssdeep":"3072:uMLMYuT06j+BCu2MT6xIgnQNygkmIWKSNeA:uMkTzjhM2xtnWyu9KQ","tlshash":"12c312b6b52d94220719e4fa8486e107ff96d7ad504bfd3224ba4634a632fdcb9cd070","first_seen":"2025-08-14T18:35:25.03965Z","last_seen":"2026-09-23T09:15:21.545717Z","times_seen":5,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/themes/blocksy/static/bundle/921.5514159e238824c4aec6.js","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:33.528Z","timestamp":1790154873528,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/themes/blocksy/static/bundle/921.5514159e238824c4aec6.js HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 16 Feb 2025 13:23:54 GMT\r\netag: \"198a-67b1e6ea-bca505bdcf4b39ad;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1896\r\ndate: Wed, 23 Sep 2026 09:14:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6538,"size_decoded":2273,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6538), with no line terminators","md5":"400b67c820e574275bbaeb9a8676eca9","sha1":"3792a14d995c896ec1475b6dd456cdfce869ffde","sha256":"5fe0d6e0c180c16537c63538da2781175cea66054f03dfe8bcb2e40a0e967f75","sha512":"ebfed569c629559e4cc2e3c0c9c2be8828d7eb8af949c599b8f72a999876ab8771143469b42a9fe55ff6eda21f4f4ecfe654618683ba458a178ce2bed58deef4","ssdeep":"192:xUQgOYY6wFYR/jBK2s2O2Xu0XWrMIQmb9X1wwKI3qUH8NUC:x9j6gYR/3s21XvXuMitqlUC","tlshash":"96d161edf684b9b646ea76ba937fa10cf37b24d2710b4460642a84d41c358c711b3fb9","first_seen":"2024-10-11T08:54:05.225678Z","last_seen":"2026-09-23T09:15:21.547227Z","times_seen":1129,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/themes/blocksy/static/bundle/95.9b58e560812076065644.js","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:34.101Z","timestamp":1790154874101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/themes/blocksy/static/bundle/95.9b58e560812076065644.js HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 16 Feb 2025 13:23:54 GMT\r\netag: \"bc4-67b1e6ea-aa12261a097a0a06;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1248\r\ndate: Wed, 23 Sep 2026 09:14:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3012,"size_decoded":1624,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3012), with no line terminators","md5":"40eff1f9a2bc19720127a5bebefd7f24","sha1":"4ac2a45e032c862320428ab40f3dbd2414b5471b","sha256":"0ebe4cbc51091000fdf4cc809309f7692ce0da48d1fe56f6e837284bd44a3f41","sha512":"59e03dac9c7cfb26e06c5bfd91052c3d2c100eeb05ea8494f01035ef24abbf68938a132337da1acfb73ddaf6ff315951f987c74d5aa4872c7fe954ed80b12e23","ssdeep":"","tlshash":"b651b7447654fef712e7a1ddd17f960773383993202db00422645db9c851d8ba0b3b5b","first_seen":"2024-03-06T22:24:29Z","last_seen":"2026-09-23T09:15:21.547921Z","times_seen":520,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Yeseva%20One:wght@400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:32.205Z","timestamp":1790154872205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Yeseva%20One:wght@400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 23 Sep 2026 09:14:32 GMT\r\ndate: Wed, 23 Sep 2026 09:14:32 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1882,"size_decoded":1235,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"972e3e340c67f31a16c0d9ee9a89e4a8","sha1":"2495f745ae0119d6ba14dfb922797e0654b6200a","sha256":"4b46b46f60054eaffa00f443be597f22b96159a64b13b8a728b1c5c588be87df","sha512":"38021757169abb7f8ed07ec859dce7674bca42abf5634967a83cc07123f5047758a22f136dac3f86b5bcd1515a6733f24dc272910308206ca136e91e53be027d","ssdeep":"","tlshash":"f0419ca1147be540ea431cd523cfbe319e8e21156850a5be9ffe0cdcdcaac26636471e","first_seen":"2025-09-21T14:42:05.46862Z","last_seen":"2026-09-23T09:15:21.548615Z","times_seen":295,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":35,"connect":47,"send":0,"wait":113,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/themes/blocksy/static/bundle/418.66ea70734eb9e0d6ad3f.js","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:34.099Z","timestamp":1790154874099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/themes/blocksy/static/bundle/418.66ea70734eb9e0d6ad3f.js HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 16 Feb 2025 13:23:54 GMT\r\netag: \"ad0-67b1e6ea-5519a76862617d28;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 977\r\ndate: Wed, 23 Sep 2026 09:14:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2768,"size_decoded":1352,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2768), with no line terminators","md5":"931ba1913f42a9a1a0f013613571c8c4","sha1":"c8b29e8a83ea50bdc5ea15bc16965f52797cf02d","sha256":"6ca3f8b3dc8d4beb66fc7bd15a02fa49a16038d457e6e25b55e50cc30ed6322e","sha512":"588f17295dc0c9b9de4410159e6dfa77f0db0d6fce1b93d9e4c2301fdc8f6812a390c2bb3e01149e623ea3b7b1003dcbed2f7d43a2edabcc34ceabf341527e0e","ssdeep":"","tlshash":"205141c8b255f6f28adae15d823f8602b2343da63469e084a25059d0496099f70bbf7b","first_seen":"2024-03-06T22:24:29Z","last_seen":"2026-09-23T09:15:21.549289Z","times_seen":666,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/themes/blocksy/static/bundle/815.e63c92833a5f3723714e.js","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:34.102Z","timestamp":1790154874102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/themes/blocksy/static/bundle/815.e63c92833a5f3723714e.js HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 16 Feb 2025 13:23:54 GMT\r\netag: \"423-67b1e6ea-559e6fecb3fde0bd;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 402\r\ndate: Wed, 23 Sep 2026 09:14:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1059,"size_decoded":777,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1059), with no line terminators","md5":"9ae562333ddf9f079f1319db2ee79cbd","sha1":"4aab21c7833afebaf2bedac9bb5138c330773a97","sha256":"64a4754f0be24eabe4dda0b51f6f878c02f577b781296c146ef9ff356b87f3c4","sha512":"f8e31c4ba621033f18b3d2daf11825bc2f3965e69f7bfba2fe2b07bf6d3996db458dd384a7b1487389e4d0b33c100bfb7986c15bcefe83522442d02ca73a3ee5","ssdeep":"","tlshash":"62118e2cb353a4630bb7b070b57baa0b56bb2023164559d0e1e5c59c1c79b0bd177ace","first_seen":"2024-12-07T11:17:27.538696Z","last_seen":"2026-09-23T09:15:21.549933Z","times_seen":432,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/uploads/2023/04/cropped-kch-icon-192x192.jpg","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:34.293Z","timestamp":1790154874293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/uploads/2023/04/cropped-kch-icon-192x192.jpg HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:34 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 Apr 2023 18:50:05 GMT\r\netag: \"faf-644037dd-7b630c048df49830;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 4015\r\ndate: Wed, 23 Sep 2026 09:14:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4015,"size_decoded":4341,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 192x192, components 3","md5":"f7cf139840b38ebfd470cf31337281d2","sha1":"8b12eea0cec382ab8b3cb59b1844353659ce1c14","sha256":"9cbbd4aa05af74152ab5e8264420741555485ba1ad9b83c3dcc81d604a5d8415","sha512":"49bac0f4efb98ebab06dce9d63257d5492257e5466753de7e5fbedca575ee21d078561b21e83a16e61b3150de74c76cda375897b21bed86e3e132d6c06a7b7c8","ssdeep":"","tlshash":"28815c232b7ac2d7edb16fb80865eb40d208ae1016059117f479dd63631acf8e8a1ee0","first_seen":"2025-08-14T18:35:25.050772Z","last_seen":"2026-09-23T09:15:21.55056Z","times_seen":5,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/plugins/blocksy-companion-pro/framework/extensions/cookies-consent/static/bundle/main.min.css","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:34.360Z","timestamp":1790154874360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/plugins/blocksy-companion-pro/framework/extensions/cookies-consent/static/bundle/main.min.css HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 16 Feb 2025 13:24:13 GMT\r\netag: \"92a-67b1e6fd-3c75bf48cf8fb153;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 609\r\ndate: Wed, 23 Sep 2026 09:14:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2346,"size_decoded":970,"mime_type":"text/css","magic":"ASCII text, with very long lines (2278)","md5":"7838ce6f5506667b68fba2d3fce4fddd","sha1":"59c303da3ad3ec99fdbbc1cfb88bfbd81aeb49a1","sha256":"98f6f2a0cc7438aaccdfdfc55277ea1eb9df8a94d75dc777f7cc860901a001f8","sha512":"c8d5f5e7a6b739fa9f888a3a93ddca2505946bee5dba0b7f867158fa219c0af2b680a1dc1844e7321c83bb2845a30b97e211bc9d92dd054f7f92624bbdf1ad9b","ssdeep":"","tlshash":"bf41cdcf32de519c7ae7807904561695262b7836cf4b60ce874720f40bc93eb5a237ab","first_seen":"2025-08-14T18:35:25.034469Z","last_seen":"2026-09-23T09:15:21.55163Z","times_seen":6,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/uploads/brizy/imgs/66448310_359553881395304_2068248200899221826_n-min-334x251x21x0x293x251x1681334686.jpg","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:33.525Z","timestamp":1790154873525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/uploads/brizy/imgs/66448310_359553881395304_2068248200899221826_n-min-334x251x21x0x293x251x1681334686.jpg HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:33 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 12 Apr 2023 21:28:58 GMT\r\netag: \"59b1-6437229a-5cc6fefda169b746;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 22961\r\ndate: Wed, 23 Sep 2026 09:14:33 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22961,"size_decoded":23289,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 293x251, components 3","md5":"36a21789783a925b77e8a84fc92d8d04","sha1":"b5b397b5b91a5f8c025c6f13aa8adafca6743477","sha256":"a7faf31f289b3a4f150efbae18048c8bd8cd506323f5e5a143949f120d13a5a9","sha512":"bdc3381421778229a4528a209f577a215a6ab668e60c98f5cd1be609e9a3e11b0e2cce40e841a4df76306aabcb43aefabd1de8e172354bf25814eeb7c3fc103e","ssdeep":"384:qJOqwKR3mb+Yg1eN7FUXQQxzruy+rP8+wUKGLQfyozvxlN1jsyy6UYkafz:qJCKYFbFUAQsb8fOiyozvHjTy9Fiz","tlshash":"66a2d0079b83a9f8bff67d396bd00c164331b626284d09f152b4c3e1ec889e9a44547f","first_seen":"2025-08-14T18:35:25.029294Z","last_seen":"2026-09-23T09:15:21.552652Z","times_seen":5,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":463,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-admin/admin-ajax.php","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:33.531Z","timestamp":1790154873531,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kathmanduhealing.org/\r\nContent-Type: multipart/form-data; boundary=----geckoformboundary9c7e90f3c39710cac716a3edbe93c0e3\r\nContent-Length: 196\r\nOrigin: https://kathmanduhealing.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":196,"data":"------geckoformboundary9c7e90f3c39710cac716a3edbe93c0e3\r\nContent-Disposition: form-data; name=\"action\"\r\n\r\nblc_load_cookies_consent_data\r\n------geckoformboundary9c7e90f3c39710cac716a3edbe93c0e3--\r\n"}},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: PHP/7.4.33\r\naccess-control-allow-origin: https://kathmanduhealing.org\r\naccess-control-allow-credentials: true\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self';\r\ncontent-type: application/json; charset=UTF-8\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\ncontent-length: 263\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Wed, 23 Sep 2026 09:14:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":610,"size_decoded":880,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1eb14a5106660f236fbb5236f4dc5328","sha1":"c3b904ecca83a1adfe670101aad7b1130ccf7658","sha256":"8a416d9ed6b879f02ede22ac11000df1339aef1dee61b6e2339ecb8af67801c8","sha512":"51a8d796ab55e3248246269ffd1ab8d1340fcf1d4e98b84e18dcd91c622cb8362745cd4085c4dae0ae655002c857a591ac036b24cbf2228663df3d7c0a3acfcd","ssdeep":"","tlshash":"1ef081eab47c42693342478c3157eb1ef24bb46df562a24602d934b447cc412dd5bdd3","first_seen":"2024-06-22T16:27:29Z","last_seen":"2026-09-23T09:15:21.55343Z","times_seen":181,"resource_available":true,"data":null}},"time_used":822,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":822,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/roboto/files/roboto-latin-500-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:33.756Z","timestamp":1790154873756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:02:14 GMT","end":"Sun, 06 Dec 2026 09:02:13 GMT"},"fingerprint":{"sha1":"2E:01:6D:98:30:DB:1C:CD:3F:AB:0D:7D:8A:EB:CB:69:F9:E3:42:DE","sha256":"34:42:57:B6:3E:6F:39:37:67:C6:D5:3E:59:9B:70:81:94:C3:F6:15:C1:B0:36:AF:C4:3C:32:2C:95:05:DA:B6"}}},"request":{"raw":"GET /roboto/files/roboto-latin-500-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kathmanduhealing.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/css?family=Lato:100,100italic,300,300italic,regular,italic,700,700italic,900,900italic|Roboto:100,100italic,300,300italic,regular,italic,500,500italic,700,700italic,900,900italic|Noto%20Serif:regular,italic,700,700italic|Yeseva%20One:regular\u0026subset=arabic,bengali,cyrillic,cyrillic-ext,devanagari,greek,greek-ext,gujarati,hebrew,khmer,korean,latin-ext,tamil,telugu,thai,vietnamese\u0026display=swap\u0026ver=305-wp\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:14:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 22200\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"6a962237-56b8\"\r\nlast-modified: Tue, 01 Sep 2026 00:54:15 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/03/2026 17:08:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a6197a112345b3bad1e1490be56519ec\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":22200,"size_decoded":23163,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22200, version 1.0","md5":"55cfeb5304f00ff33469dc76a3b30758","sha1":"88d702fdaae15f269299c04f979b674d18c6cf18","sha256":"5bcc3aa180e7f26f643cd5b2621cd7c2de193d0661d913a94afd3d4881a7a34b","sha512":"ce7ac3fd8eb49ee70d47ce174b1a81478079c831502a76b003ada4d6ce8d0bbb1adffb1b34f3e34026757148dfd9296bb85c312219da6e09c74520e0c4998a1e","ssdeep":"384:wTUaaxgF1D9PaaN75l/bEZTZ2EcB32774ZUqOa/6obeu1xrn9jiSnVVpBk:wTUhM1DLN75tbEZVu8cZUvU6oqu19n92","tlshash":"eca2e1ece2974ade9432b474c3401756163814e57688fe45fead36d2e020eadd3c2ed5","first_seen":"2026-02-19T23:27:22.227585Z","last_seen":"2026-09-23T16:00:36.403992Z","times_seen":3207,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/uploads/blocksy/css/global.css?ver=43576","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:31.998Z","timestamp":1790154871998,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/uploads/blocksy/css/global.css?ver=43576 HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 16 Feb 2025 22:06:16 GMT\r\netag: \"37c5-67b26158-31690763df6289d2;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2123\r\ndate: Wed, 23 Sep 2026 09:14:32 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14277,"size_decoded":2544,"mime_type":"text/css","magic":"ASCII text, with very long lines (14277), with no line terminators","md5":"0ec22809969cb7ba84d7f79a3f390460","sha1":"c41c7e356082eb878df86211f051a2d3e6bb68df","sha256":"eaf9bab6de80bd1f968b72a395ff85afc54fdec1c437c7564fb0c0e33191d2be","sha512":"1e27658e24ad062d0e7d40d1b9dddeaf938798ddbcbc8d0f51680f9b8cbc97e8ce27e667450e82f5db80135356a6940d8168be56f3db7177428cce5a864e086a","ssdeep":"384:XS5SGSyuSzSiSoScSbSWSwSISnSOSKcSiYKINsYo+S6u85IImj2MrpDJyywfhyVL:CwxyZOtfDWBn/S52P7pJxUj2MrpDJyy5","tlshash":"fc52f272b2bda01b652b15b7b09c59695f11f8c1abca3ad0f80d94c3f0ca1ab754871f","first_seen":"2026-04-12T18:52:33.046297Z","last_seen":"2026-09-23T09:15:21.554755Z","times_seen":4,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/themes/blocksy/static/bundle/main.min.css?ver=2.0.87","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:32.207Z","timestamp":1790154872207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/themes/blocksy/static/bundle/main.min.css?ver=2.0.87 HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 16 Feb 2025 13:23:54 GMT\r\netag: \"192c0-67b1e6ea-9a6c0a6ff60fdec1;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 17580\r\ndate: Wed, 23 Sep 2026 09:14:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":103104,"size_decoded":17945,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"4d71b29f176bef29f580f15e68847555","sha1":"902c62542b54d8a5348efd303a774fea0e698619","sha256":"45a81d0267c9c0e9d950e449b404184607760989f84271ef33c1e705163de51b","sha512":"9739ed9475c99a19a77aad88a540f760e81548dcec8abbca388c85d83e79466c83bd9f43c0618f0d79d1dd833ec133d7ebb99dde337da6b38a111ba085aa7886","ssdeep":"3072:C3duDMmwgQ4QTsKXUxLkSa0F7U90ngBFhRBzEFzlbpjUH/K1g+Eyq0vSJw:eduDMmwgQ4QTsKXUxwSa0F7U90ngBFhc","tlshash":"8ca31a937664827e7937d22867cca5487310f491df4236e4fd9980d485cebea2633b8e","first_seen":"2025-02-12T21:10:22.524377Z","last_seen":"2026-09-23T09:15:21.556067Z","times_seen":60,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:32.214Z","timestamp":1790154872214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 08 Nov 2023 04:17:00 GMT\r\netag: \"15601-654b0bbc-7b6d2e0a623c7352;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 29744\r\ndate: Wed, 23 Sep 2026 09:14:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":30123,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-24T03:27:23.272494Z","times_seen":1067592,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kathmanduhealing.org/wp-content/plugins/brizy-pro/public/editor-build/prod/js/preview.pro.min.js?ver=179-wp","fqdn":"kathmanduhealing.org","domain":"kathmanduhealing.org","tld":"org"},"ip":{"addr":"193.108.130.22","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kathmanduhealing.org/","date":"2026-09-23T09:14:32.221Z","timestamp":1790154872221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.kathmanduhealing.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 07:57:56 GMT","end":"Wed, 02 Dec 2026 07:57:55 GMT"},"fingerprint":{"sha1":"40:4D:C8:43:A4:58:DD:88:8F:8B:61:4F:6E:45:F1:E3:56:A0:90:36","sha256":"8B:4E:85:71:6D:39:BC:5A:B6:8D:37:37:B0:31:59:CA:E5:EA:25:6D:AE:B2:75:DF:B1:EB:87:55:F7:39:09:99"}}},"request":{"raw":"GET /wp-content/plugins/brizy-pro/public/editor-build/prod/js/preview.pro.min.js?ver=179-wp HTTP/1.1\r\nHost: kathmanduhealing.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kathmanduhealing.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Sep 2026 09:14:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 16 Feb 2025 13:22:04 GMT\r\netag: \"881f4-67b1e67c-db37534073d7c485;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 133930\r\ndate: Wed, 23 Sep 2026 09:14:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":557556,"size_decoded":134310,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65463)","md5":"0b6df4fef35d7df0d4873af1eb995393","sha1":"560d245087b2ea5c83cb5a109c644810c5e86abb","sha256":"4f10f749fb51b9d61dbad951769b81020f29cb903ca7bf00e02781fa98e502ff","sha512":"cde246fa7f7f8b96f4111f29daaade5d1c322893b6ec63bc869e9a6b2098aacb26b10cc2ef8e7df03eeb883f324dff9028d5c9cdb47ff9cd8f26b5786164e779","ssdeep":"6144:J7wI5loVALV57J13dWryl6IGIozpJ/4PyLxD6T843RJ6U5XbLVB6h9AtM7n+:J3SA7J13CIGvzplITh3P7XlB6vAq+","tlshash":"99c4c7ccba91f0b503e361b5806f140bf23b2969640e90e4e3a5d8d57cb898e9177f79","first_seen":"2025-04-11T01:58:00.786373Z","last_seen":"2026-09-23T09:15:21.558026Z","times_seen":12,"resource_available":true,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":313,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"kathmanduhealing.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kathmanduhealing.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}