{"report_id":"6e7b283c-2e18-4d93-ba7f-502776cc7e1b","version":6,"status":"done","tags":[],"date":"2026-04-11T08:25:35Z","url":{"schema":"http","addr":"www.careemergencytoolkit.org/","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"title":"Home - CARE Toolkit","dom":{"size":155790,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37049)","md5":"f6d389f8cc7c263e421eb8fd02e4230a","sha1":"ce7261c3d4819b0f8ec68e07f70b7fe05f020b2c","sha256":"ee1e260e2953836f5e53dcdccac85e18bbcee4151b0bc3b3c87fd5eec0f828db","sha512":"6ee4c22903703d153a3226a65a2fcc2db50f83c363325aeee1dcde07d7bf078bb66a8158e56ac93db4b69f47161d63405551ef2652961492dba7b2227b25c6c6","ssdeep":"3072:+rIDfKEmx+HHA093ZDimjpHFsEJWz83ORmLz6F+vs:Q++","tlshash":"e6e312b756a440bb438f6be53064bf2c24f2d18dcbc22981b0ed5b69ab40f61cd52977","dom_hash":"domhash51d235099a06004819f1a69642a99559","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.careemergencytoolkit.org/","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-16T08:25:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-04-05T22:33:08.106483Z","alert_count":0,"request_count":7,"received_data":1866651,"sent_data":3372,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.careemergencytoolkit.org","ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"domain_registered":"2008-07-24","domain_rank":0,"first_seen":"2014-03-23T10:12:50Z","last_seen":"2025-11-14T04:47:16.504308Z","alert_count":30,"request_count":30,"received_data":2792718,"sent_data":15380,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"W3 Total Cache","description":"W3 Total Cache (W3TC) improves the SEO and increases website performance and reducing load times by leveraging features like content delivery network (CDN) integration and the latest best practices.","website":"https://www.w3-edge.com/wordpress-plugins/w3-total-cache","common_platform_enumeration":"","icon":"W3 Total Cache.png","categories":["Caching","WordPress plugins"]},{"name":"TinyMCE","description":"TinyMCE is an online rich-text editor released as open-source software. TinyMCE is designed to integrate with JavaScript libraries, Vue.js, and AngularJS as well as content management systems such as Joomla!, and WordPress.","website":"https://www.tiny.cloud/tinymce/","common_platform_enumeration":"cpe:2.3:a:tiny:tinymce:*:*:*:*:*:*:*:*","icon":"TinyMCE.svg","categories":["Rich text editors"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Yoast SEO:24.4","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP:7.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-04-05T23:05:20.049371Z","alert_count":0,"request_count":1,"received_data":93222,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/themes/caretoolkit/js/tinymce/tinymce.min.js?ver=6.7.5","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"f06d72bf3ec8d437fcc29a0fd70344c4","sha1":"3aee949baeb9519e3ea4a1bb9279874c7d02cbb1","sha256":"0cd26af25c51872d49b7190ce37fe36003aab882a34d78a7d524f97cd1e58d31","sha512":"6cddf3b02b1d172e45d59add5616b55c849bc98971e63df31a03b429272e963c9020f49d64ac076560c645f8d43475c2775865cdc15b069b68d10ea714a4480c","ssdeep":"6144:Y5VE4X2ucRDEq5PEgSyoLta97weKr5Xt53v7:qxXy5PMtar8R","tlshash":"e7842add31c1b03263a7307a80af650af2371949980e8520f53ad4e67c789ae537bf6d","size":405092,"data":"","first_seen":"2025-09-18T23:21:08.743214Z","last_seen":"2026-04-11T08:25:41.689442Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-11T10:56:33.860543Z","times_seen":702823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.9.1.min.js?ver=6.7.5","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","size":92629,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-11T10:57:05.818595Z","times_seen":61520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/tarteaucitronjs/1.9.3/tarteaucitron.services.js?v=20210509","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c880a97057e7016d7a840c19414abbdc","sha1":"6fdc211401eebf9aad8a86c8aab45355066340e9","sha256":"91110463183c187aa53f848c3f4683ea28c99de7f47f7c6e258933e57eec2d4b","sha512":"6084da688f811ce430b3d40c193ff2a21343895a5a020ff85a06ad624a13ade38031f296fc7e404753b35eafa6721667e6353817e4646edfc7f1ab06ce7b219e","ssdeep":"1536:SiTe5xBrB1McY8xMKQv8xMDAc8xMGQ+/a7QQZrI6rW9zLapeUwd+FPSk3RDKiCOG:I5VirCX6Pnw42FxfgPUylYbtuc","tlshash":"0ff3533adffb58b909b735964a1f0649762041230d44ee2a7e8d9119df8ce2f2570bbc","size":161090,"data":"","first_seen":"2023-03-10T09:29:23Z","last_seen":"2026-04-11T08:25:41.684712Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-includes/js/wp-emoji-release.min.js?ver=6.7.5","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"b976b651932bfd25b9ddb5b7693d88a7","sha1":"7fcb7cb5c11227f9213b1e08a07d0212209e1432","sha256":"4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3","sha512":"a241ebdcfaf153d5c2a86761145b2575cbe734b4f416acbfac082ae5c6eb7c706bd6ca3bc286b7e1a0f9e326729252dcb95b776750c4a3a0d81f2aa6258ea39f","ssdeep":"384:WTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpr:WX6U9Uh3o//YrXgAGfACr","tlshash":"7182f99bb33a4e9f343e3bd78e968f4dc5da555321c0f078dbeeb68169a00568274c90","size":18726,"data":"","first_seen":"2024-03-13T16:02:37Z","last_seen":"2026-04-11T10:37:40.706259Z","times_seen":90450,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/themes/caretoolkit/src/js/app.min.js?ver=6.7.5","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"31efc75f95902dba9ce943cc3d8f6631","sha1":"ad1fa11f3051a07b8fced276be2105c94e2841d1","sha256":"b89e6b04edb03aba3ba036700fd9a9f1d3dae0f230154ee9661ce0bd8deee63f","sha512":"20fa0ef72fef4eb18ce0b9d4ae98e81ccd59989b1b637fc8e6bd4722c3713b703930b5c753ef1c37ea4f8f8339ce2f113dd3d7a8d79d2eb221b157667403ccdd","ssdeep":"","tlshash":"a690041d744cf34405775134543753047733741035411041010d71400c1c5351107404","size":39,"data":"","first_seen":"2024-08-19T17:29:36.089971Z","last_seen":"2026-04-11T08:25:41.671374Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-11T10:56:23.90614Z","times_seen":654313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"a1e547868adc8db647ce8a6041e3482a","sha1":"ff7d580a2bb3ef9d1f9af9ebcc1081c4c618c473","sha256":"cd82e2c6d44d2932566b6dae9cb6d6fc4eac89fa11f19596c44b32fd7bc01047","sha512":"6eb5fea7b668bb6a7eedbcc3d720528acec47045e461032fcddb770f9ee82dc56a4a1f560d29195c5871e65cebe97888dec057ed0eb56f3cf82e8cbe8a08f6d0","ssdeep":"","tlshash":"ee61b79a3735388731b715d2aa2f4e07eb7658361688d034c9baf7542cb2863c379e49","size":3266,"data":"","first_seen":"2026-04-11T08:25:41.695511Z","last_seen":"2026-04-11T08:25:41.695511Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/themes/caretoolkit/js/theme.min.js?ver=6.7.5","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f901b89659f9e82982279912a54524a","sha1":"332f79129d8d972a0451e6e8579fd01a4c0ff99b","sha256":"80071cc42384461fda214945e4b3e6f87cf0db46b727e5c71f84db671a2b00ef","sha512":"f01729fe74ac564cac793b57f27442b1954ddabfe0ed50a1d4654d9be0ea9fb34b882a6799e34ef232a77de8e98860ed74b569605225fce9838eb855dfe9b180","ssdeep":"1536:8ScaDS7lm/5h1xZP0yf/L/wP1hxIwJeEA36Ni:YM/5vxZPX7wP1IwJeB","tlshash":"5473c749735074b242dfa162913f460bb3376469a607909cb96ed4ee1dbce883267f3c","size":75184,"data":"","first_seen":"2025-10-11T09:12:46.792535Z","last_seen":"2026-04-11T08:25:41.676701Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"02fa2c427129fd5cfb5f3cfce60604c2","sha1":"071bcb233be73ad9bcf07141b98bf790f4882185","sha256":"4b1be4ca88f8a3486ca66164f1c4c7337e2b9712fe455e2d89fc383f0e4cb595","sha512":"be42a469d50cd0d55d6c9553eff0c3c0ca669d42fb9c9a662f18f3b9cde215d49fc90efdcb5b222210c41423d24c9c9b821367bcc16180f7ce191e6c441e05d3","ssdeep":"","tlshash":"1f41fee0ed4d0c7b07a14173b118da48b712571e83c838fdfd4da12cbfae9a964102d6","size":1969,"data":"","first_seen":"2025-10-11T09:12:46.799086Z","last_seen":"2026-04-11T08:25:41.696855Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/html2pdf.js/0.10.1/html2pdf.bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c6ee7cc4411e35934ae6b2e6cb6bb68","sha1":"26625c795ced8f13d34e9a511b6162b4433d7f5a","sha256":"85e6ee9ce246e3ae4424313f7e46a5ed860a28d757811de8dc9c43f306049d65","sha512":"1ac2e564dff717612b0b989f4b942d829889b56778dc9592b88821ee66f367ccc1a6cf9dbcbbac57e78d4004ea800fc775e285560039bf74bf708acb17b42722","ssdeep":"6144:MQAuz/9oI03IDxbRryIV06euNk8IeFu7tk2+T/4i4iD00XkLMsGM4a1:MQro3cxbv+6euNk8IpkXTuRMM","tlshash":"ca1539b437b2b056066bb27e203f140a62796656148ec804f76ec9d3ecb498dd1b7b3d","size":905956,"data":"","first_seen":"2023-03-13T05:21:14Z","last_seen":"2026-04-11T08:25:41.680919Z","times_seen":316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6ed03469a5f6d0b9d363a7233e4892c","sha1":"5e988fba2dcd959dd13f0ac89d4684d9439c6d37","sha256":"50db96a84c665667e33e389df53a94a943b7de817770f59a815b3270fc6769eb","sha512":"e5267dca2d8e1495ff214e83ae737ab18e7e198a399127c3c0ad1ab5734a38b8ff191ef7e6ea6519cda721e2abb430c7f828702581a8e1c6219ba8806d7f9463","ssdeep":"","tlshash":"bae0c208d78ea0bca4a324d3d37d220c6bb06e0e0cc08d4a706e9181eb157269241e7c","size":306,"data":"","first_seen":"2025-10-11T09:12:46.801371Z","last_seen":"2026-04-11T08:25:41.698509Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/tarteaucitronjs/1.9.3/tarteaucitron.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"445f5b211c370a2f86e33cabd4f66136","sha1":"0b3277c055214764d3df26f244621e9c1e41af83","sha256":"250547e5f39a10aac05f71a8853c17775aa87525acc58a7950400c9bc3213a3a","sha512":"70bd1f0bcf70f87fb42a323d7c3e9d9cce081f289aa73f6da5df71e926ab98bfcee311063ca05ea7165d9b4ad95e5898a65855437d031dccd7ebe9adb459bbd5","ssdeep":"1536:dYYf7iMN4S3pOSRQk1VHwXHu67PxoC1XgQLgeSj:74SEuQk1Ge67Pxouc","tlshash":"5fa36169a7eb04b842f728670baf4b0c372040572c059e0b7d4e9690efd9f7a25a5f74","size":105164,"data":"","first_seen":"2023-03-14T03:30:04Z","last_seen":"2026-04-11T08:25:41.640159Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"acdc9cd01000955054268acd32bf87a8","sha1":"e25a902cb920729973fd31d4ed9956bfbcdeff40","sha256":"49260118d98f104bc6628376c0c68814cbcae41b545300d688c769bdff40aaf6","sha512":"a2d8fbcd64145c0053be1187f600a4e76b2f43233f73017fe5b2f840a9dbf732b8f216de70dbd40da4ddf64992f8d8e8cf038da799008f7f053dd08283bd7b21","ssdeep":"","tlshash":"c5012d69b3ae25e981f3b9329bbb9358726bb06738c8cd50381f92904f1137c2545eb1","size":748,"data":"","first_seen":"2025-10-11T09:12:46.803448Z","last_seen":"2026-04-11T08:25:41.699757Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/tarteaucitronjs/1.9.3/lang/tarteaucitron.en.js?v=20210509","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"58f62a14b60056eeabf4d301abed902a","sha1":"eb04f78eaff4babe139c9eff9c22f9d9aa0e4b1d","sha256":"c8eb8eed29933c99c35787deca6973c2639cd670169891df9d1ed35941b14272","sha512":"161b42f039f140e1ab00278485b4ef0ec3389a493224c16a6f21fb36f858c7cbdb072a9472ac7202942fbb227df5988c0455754f7ebf959321908ff2a639a661","ssdeep":"","tlshash":"e261ce2ae3a12dfb059917502d6b52a27314024b4fa43e19377c816c1fdee2f907729e","size":3265,"data":"","first_seen":"2023-09-25T19:13:20Z","last_seen":"2026-04-11T08:25:41.663169Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"371bf32c4082470c05409b4dcf83be72","sha1":"1023541c513e48bca3bb5a39195557ceb9f5655d","sha256":"aadf4817b01930bc9e9f81b85bc7588ae31e339300a75a8ccbe8c9af02de9479","sha512":"fb5d353ee794a0e6df54fc44af22e388989a3a791f534e1005b2c278484ae311d1e1e604c000a1a4fe4c8a9934ca4d9a3b2110953fbae2ecc7d89750195edbe6","ssdeep":"","tlshash":"9b019caa08fb1170b5a7725271bf8504bdf05807d652b8353d8d82dccfe4b266de1a1e","size":813,"data":"","first_seen":"2025-10-11T09:12:46.805484Z","last_seen":"2026-04-11T08:25:41.701055Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jspdf/1.3.3/jspdf.debug.js?ver=6.7.5","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4c03580d82faa0d1a4b38241790d345","sha1":"83841eb0dfcd0323b954ed7d8b65a14729e4eb55","sha256":"b265c8c8890fd17562665e4354009652af4c5e8442ab9f85a9c36db88f0ce298","sha512":"db7e26ff24b16813fa051749e20ee3606eee23dcb613be1dbccb9ad49ce4a8cdcbc963f8deda2c22a113f3bddfde6e8e43fd0de932b2a971b87cb78737dbca92","ssdeep":"12288:xoYHhbvHlgJcOOZUtp9UNeZs3NdTWmmU8Ct:VJ/2JnOZU/9UNeZsdTWmh","tlshash":"cbd41948afef20299113706d6f9f6448a63c90370219dc55bd5cc6a85fc4a3982faff9","size":602210,"data":"","first_seen":"2023-04-18T20:47:02Z","last_seen":"2026-04-11T08:25:41.670519Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/animate.css/3.4.0/animate.min.css?ver=20170407","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/animate.css/3.4.0/animate.min.css?ver=20170407 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.careemergencytoolkit.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 3203\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03d2a-d8e2\"\r\nlast-modified: Mon, 04 May 2020 16:04:58 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 281543\r\nexpires: Thu, 01 Apr 2027 08:25:13 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J8eOU458dblNRbI9T5zuz8kpQIopfszaOkdhoXMLCoqyYCcKxw0KXsCOh14exb2n6dHxgWyF0pOrLB8BgEdSysoToCv6W2dbfAHz%2Bu0g%2BH67Mq2GgViL5LcuHqsxQPvJMxkKve71\"}]}\r\ncf-ray: 9ea89970c8780b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55522,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (55361)","md5":"7b6990dd2abe293cce3d14bf1aefb9c9","sha1":"7446125d10abed8f04b502f7c33d64bfe8bfee82","sha256":"28b4c5c949bf53b79235cb7623e28d719e7e3b8587b1af376cadf89b7b865ac5","sha512":"a89d3f96a6529081dbfa5c29312f681a4586504962b938261ae5c85164fae3f0bbc3de964ff473575493537c9049c0462be7bcd5a6458e8460789bffb5a54c80","ssdeep":"768:3kZsIOIS86I5I6IDwk1mA3kSDL3Kyu5ZrKeB0eTcs5s3:3kZtIDwk1mA3kSDL3Kyu5ZrKeB0eTi","tlshash":"954306ae5851228991674fa2c3dc4e68872dc67714621cde73816c4b8f87faf33da607","first_seen":"2023-04-07T11:55:10Z","last_seen":"2026-04-11T08:53:20.195114Z","times_seen":1209,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":16,"dns":0,"connect":1,"send":0,"wait":9,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 12 Feb 2025 11:52:23 GMT\r\ncache-control: public\r\netag: W/\"67ac8b77-3509\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-11T10:56:23.90614Z","times_seen":654313,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/tarteaucitronjs/1.9.3/tarteaucitron.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/tarteaucitronjs/1.9.3/tarteaucitron.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.careemergencytoolkit.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 15747\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"60d2177c-3d83\"\r\nlast-modified: Tue, 22 Jun 2021 17:01:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 130915\r\nexpires: Thu, 01 Apr 2027 08:25:13 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mFnmVMM2j958GikooI3uI%2FAG7Hin4inNR6gz3S55ZwKusxOXAY5H0y8ww4R7EeN8q8bMTjfVfIWRAYMQBnfw9Ne637bJttjmV88FXOktujgNDUaxnEZweySSnEqNlGKrZN6vhROD\"}]}\r\ncf-ray: 9ea899710e1b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105164,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2360)","md5":"445f5b211c370a2f86e33cabd4f66136","sha1":"0b3277c055214764d3df26f244621e9c1e41af83","sha256":"250547e5f39a10aac05f71a8853c17775aa87525acc58a7950400c9bc3213a3a","sha512":"70bd1f0bcf70f87fb42a323d7c3e9d9cce081f289aa73f6da5df71e926ab98bfcee311063ca05ea7165d9b4ad95e5898a65855437d031dccd7ebe9adb459bbd5","ssdeep":"1536:dYYf7iMN4S3pOSRQk1VHwXHu67PxoC1XgQLgeSj:74SEuQk1Ge67Pxouc","tlshash":"5fa36169a7eb04b842f728670baf4b0c372040572c059e0b7d4e9690efd9f7a25a5f74","first_seen":"2023-03-14T03:30:04Z","last_seen":"2026-04-11T08:25:41.640159Z","times_seen":22,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":14,"dns":2,"connect":2,"send":0,"wait":7,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/themes/caretoolkit/img/care_header.png","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/themes/caretoolkit/img/care_header.png HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.careemergencytoolkit.org/wp-content/themes/caretoolkit/css/theme.min.css?ver=6.7.5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 591885\r\nlast-modified: Fri, 16 Jun 2017 12:02:26 GMT\r\ncache-control: public\r\netag: \"5943c8d2-9080d\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":591885,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1333 x 224, 8-bit/color RGBA, non-interlaced","md5":"e0b909a17594937fcfc7884a999bdde5","sha1":"86445cc72c05634ac0b2a4a9142a5cd662977dc3","sha256":"e2f8caa5f2fb90f01245d5f6a6fb048efda1fb9e13971a5e7edda0c586580b66","sha512":"8f8a770d3315c8d4ca92baf7762a91d780dffe5ccab6e69b66b7ec2012de45a3b70e7127851e79a3da981b917d4e0452c5a0a990b0c996b96200ec52649d9af0","ssdeep":"12288:XkwoElyNcf8w/PRC5YcVLpZCYjJdn3y3s4J3xe3kzeuyIz8TA6P:XLvf8w/53gjn3y3sU3CuDuDP","tlshash":"e0c4338992a7f551eb2423e137e624db588c72ffa77703346305a98d70288841dee3bd","first_seen":"2025-10-11T09:12:46.765202Z","last_seen":"2026-04-11T08:25:41.643352Z","times_seen":3,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/themes/caretoolkit/fonts/FiraSansCondensed-SemiBold.woff2","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/themes/caretoolkit/fonts/FiraSansCondensed-SemiBold.woff2 HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.careemergencytoolkit.org/wp-content/themes/caretoolkit/css/theme.min.css?ver=6.7.5\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 147828\r\nlast-modified: Mon, 25 Jul 2022 12:01:07 GMT\r\ncache-control: public\r\netag: \"62de8603-24174\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":147828,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 147828, version 1.0","md5":"3854812fa91e2e6c9475df2540a2e7c5","sha1":"4d3635394c95d2522d1b19f8fb65777db9842b3a","sha256":"3f71da9283d26734747df04543d61776de833bfda31b3982641d3cb10df87429","sha512":"39633fcfe980979cf429e677aa77092b1fa9dd92d4ea8a34ad6e7269c47086c4558193e4eb52936b47c27e65a73db64b52589aa73bcd610a02e152e75f0be453","ssdeep":"3072:8oKhfdBghV9mywvYfEs1DCfAjzRGZKvilQIqjFRclsLHcXnDJz:8oAfdaVlAs1DaAn0ZKqqklsWnDJz","tlshash":"8fe3120bea0b7ce4f4e2a4f3aba455025c5454810dfbdff7ac3b6710694d36a352c92a","first_seen":"2025-10-11T09:12:46.782747Z","last_seen":"2026-04-11T08:25:41.646283Z","times_seen":3,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/themes/caretoolkit/css/theme.min.css?ver=6.7.5","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/themes/caretoolkit/css/theme.min.css?ver=6.7.5 HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 08 Aug 2022 10:51:39 GMT\r\ncache-control: public\r\netag: W/\"62f0eabb-3f215\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":258581,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (63503)","md5":"1c9ed710fdbbd114832dec4faf7d8a2c","sha1":"965fe0ec824ba762b16a3d138be79f2773103ca6","sha256":"5e105da511403bbda6a4486b40d648c77f1d1b2d054315467fbbed58599c85f6","sha512":"d8a0e6161773984fdca7e8e651ad2e7013d8aaae4ad9f3deae78ae94d7cf15bea733ecbde816ae43efd2df8c81368303c0ec1855b25dae8e18305414b9a95b3e","ssdeep":"1536:O5y4AUeCbDwHz5Ebc8ZJgQuozOlnMLaCbgtZqJEMH2UtERyrtayUz6J1jJvwemiU:O5puMLaCbgtZqJEMH2UtERoAye6JtVe","tlshash":"c4448492f04021d8a2b3c52777c0bbba056ba029d5275fb6f06b2b784bd57860772f4d","first_seen":"2025-10-11T09:12:46.78559Z","last_seen":"2026-04-11T08:25:41.649059Z","times_seen":3,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/uploads/2016/12/title.png","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/uploads/2016/12/title.png HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 68343\r\nlast-modified: Tue, 09 Apr 2024 20:36:54 GMT\r\ncache-control: public\r\netag: \"6615a6e6-10af7\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68343,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 418 x 79, 8-bit/color RGBA, non-interlaced","md5":"c905a2ffa17e1f58a0971e8a8e24da47","sha1":"f4732a0b65a647b2935ddaa2450ad8caf9d37daf","sha256":"61b3d34ed5201a46096717ead19648d6bb786d6f7646aa0858e87f61ace8e1cc","sha512":"75ebc1173f586473af4a6119e3f3dcb124bb9c98f5da0f673899aecd31eb392a710750915d7058d1f0d69cfc93825eeb48662390c4ed3aecf4c56ec73d307210","ssdeep":"1536:MiA5Xi0aY+ev9MqZtdWany6LTbSsXfh0tzZVw2Y3mDAx7fVVX4it/3c:8hi0oevdQayibSCy9fw208i7VVogPc","tlshash":"60630257acb22121612413d25b7bbdef74a262b14e8978321481b2b0ed51dc3e7eebd1","first_seen":"2025-10-11T09:12:46.751839Z","last_seen":"2026-04-11T08:25:41.651845Z","times_seen":3,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/uploads/2017/01/CARE_home_icons_resources.png","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/uploads/2017/01/CARE_home_icons_resources.png HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 2612\r\nlast-modified: Mon, 13 Mar 2017 16:16:06 GMT\r\ncache-control: public\r\netag: \"58c6c5c6-a34\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 57 x 50, 8-bit/color RGBA, non-interlaced","md5":"2cd9cf5ef26f400acc6777c9fc3c5d15","sha1":"7fcf1ce60314b0b8bd80c125a09d240831e190fe","sha256":"8715e2a2f9ecf815e7a0c4e87f3adae23dfacc63ee29685f6d1553024e51335d","sha512":"ba4415784a8ccb7d367bc26226cb2ffb3aa837ec3ed7ca251465c7189adea824743d89ec1111c355f44a6bb8686c433b10abd5a4e6bee5b5624f2bcaabe30b07","ssdeep":"","tlshash":"bd510999fbc02d926348d4d260f251139d16a5256d9cf1c6f9dbc0b34529eff441a0df","first_seen":"2025-10-11T09:12:46.774283Z","last_seen":"2026-04-11T08:25:41.654179Z","times_seen":3,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-includes/js/wp-emoji-release.min.js?ver=6.7.5","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.7.5 HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 12 Feb 2025 11:52:23 GMT\r\ncache-control: public\r\netag: W/\"67ac8b77-4926\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":18726,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (15752)","md5":"b976b651932bfd25b9ddb5b7693d88a7","sha1":"7fcb7cb5c11227f9213b1e08a07d0212209e1432","sha256":"4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3","sha512":"a241ebdcfaf153d5c2a86761145b2575cbe734b4f416acbfac082ae5c6eb7c706bd6ca3bc286b7e1a0f9e326729252dcb95b776750c4a3a0d81f2aa6258ea39f","ssdeep":"384:WTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpr:WX6U9Uh3o//YrXgAGfACr","tlshash":"7182f99bb33a4e9f343e3bd78e968f4dc5da555321c0f078dbeeb68169a00568274c90","first_seen":"2024-03-13T16:02:37Z","last_seen":"2026-04-11T10:37:40.706259Z","times_seen":90450,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/uploads/2017/02/CARE_home_icons_planning.png","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/uploads/2017/02/CARE_home_icons_planning.png HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 1891\r\nlast-modified: Mon, 13 Mar 2017 16:16:08 GMT\r\ncache-control: public\r\netag: \"58c6c5c8-763\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1891,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced","md5":"1a39fb4f4cd79274bafe46d4ea1851a7","sha1":"b2b5ed7b56f0271e477cf9f87c8c3d3a876ee82c","sha256":"80501d06eb878786458add4ba30f61acbe134058acfebd8f9f3bb56eca93f677","sha512":"b539119d885e2b46c228bc8c8d106d4b73278c0108c74e0ec1bb63e1fe16d1d3a6cc38cf7d8cf7ba07f9e7f69d07d38406302d70083b6ca36f5d67e977a8fde9","ssdeep":"","tlshash":"1541f9c5f0807951a344f99250edd013cf298cc24dd4e150f5dec0575a162f8183dad7","first_seen":"2025-10-11T09:12:46.772909Z","last_seen":"2026-04-11T08:25:41.657459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/uploads/2017/02/CARE_home_icons_logistics.png","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/uploads/2017/02/CARE_home_icons_logistics.png HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 2006\r\nlast-modified: Mon, 13 Mar 2017 16:16:08 GMT\r\ncache-control: public\r\netag: \"58c6c5c8-7d6\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2006,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 41 x 37, 8-bit/color RGBA, non-interlaced","md5":"b16500d831a1e59c2cdb1440aface6b9","sha1":"5590ad4e0d1e1034e0f684685a7f7ceb3bcf0ab9","sha256":"f12c3011ef5450395a01fdfe703739b90a405622f43936065e9fe07c69a6aee9","sha512":"cc0913e9b0f8aa5c174b30237f2cb671b09dcdd2c4fe6efe94c1d3cb7619e5df81765dbfdcb18cf9b4a918419d9d5d0b081ff5109608fab36a3ec109f26544eb","ssdeep":"","tlshash":"bf41e888f6807c91219a948724fd60338e57c590bed0b158b7ca9c9e96223f99c2d1cb","first_seen":"2025-10-11T09:12:46.753133Z","last_seen":"2026-04-11T08:25:41.659559Z","times_seen":3,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/tarteaucitronjs/1.9.3/css/tarteaucitron.css?v=20210509","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/tarteaucitronjs/1.9.3/css/tarteaucitron.css?v=20210509 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.careemergencytoolkit.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 3689\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"60d2177c-e69\"\r\nlast-modified: Tue, 22 Jun 2021 17:01:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 186197\r\nexpires: Thu, 01 Apr 2027 08:25:13 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WHoO0zsssXJ%2FeiaCHynH9YQUjbaWm5D9I7WhwhYd1c8O4oihtPSNYwP7ah3mLUHtVr%2BCGCNmpMknMnKzWYwTN0tMWMuWj03t5MEZ0vLDEopCZhBcaYrUpvByAgS2PNa5azN%2B6wMa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9ea89974c96d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26308,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1981)","md5":"d703ad2d523e802084a5a742cd8006d3","sha1":"eb50a08515fcc31056843a15248a00bdc7d7afdd","sha256":"cffa71ca213b2cc9d4822ffcd8b27409f3f6791f29ec966ba8e1cf0a45e4fb47","sha512":"4944a91feb056f9e3b20be2055f4c485e602dd43e4930b11899cd142e2d798fb978c7ae2f422885c6738282cebcde829367be88ddaa19e2656a5a71e71c20a56","ssdeep":"192:pIkatfFulfMxMmj08NvIgIE5IDlvNIRBwFB9oy7H8GK5oeO3ppbJqqSHpOsh+IrI:EISiDllIROFB2p0LMPjbFjTFUiFRFG7x","tlshash":"bbc2fb01abef09fc6af78d271656a76e271884030d598f2f3a5bf520df5a7a60410f39","first_seen":"2023-04-06T15:08:03Z","last_seen":"2026-04-11T08:36:31.507807Z","times_seen":102,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/tarteaucitronjs/1.9.3/lang/tarteaucitron.en.js?v=20210509","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/tarteaucitronjs/1.9.3/lang/tarteaucitron.en.js?v=20210509 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.careemergencytoolkit.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 979\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"60d2177c-3d3\"\r\nlast-modified: Tue, 22 Jun 2021 17:01:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1358933\r\nexpires: Thu, 01 Apr 2027 08:25:13 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eB5BuA16gWEwFbbF7TyBSCPUlbjZHZkOt3iCvTU0jIPxjApU4FVgxDbfYqpR%2BDjpwHbaJKJammcqMSlBHrbPccwe7%2B1w7IVb5T7muLUlrR%2FhFTIHojQRQOHsVLFH4mau%2F6v16KVV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9ea89974c9763181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3265,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"58f62a14b60056eeabf4d301abed902a","sha1":"eb04f78eaff4babe139c9eff9c22f9d9aa0e4b1d","sha256":"c8eb8eed29933c99c35787deca6973c2639cd670169891df9d1ed35941b14272","sha512":"161b42f039f140e1ab00278485b4ef0ec3389a493224c16a6f21fb36f858c7cbdb072a9472ac7202942fbb227df5988c0455754f7ebf959321908ff2a639a661","ssdeep":"","tlshash":"e261ce2ae3a12dfb059917502d6b52a27314024b4fa43e19377c816c1fdee2f907729e","first_seen":"2023-09-25T19:13:20Z","last_seen":"2026-04-11T08:25:41.663169Z","times_seen":83,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/plugins/print-my-blog/assets/styles/libs/select2.min.css?ver=4.0.6","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/plugins/print-my-blog/assets/styles/libs/select2.min.css?ver=4.0.6 HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 07 Jul 2025 14:11:06 GMT\r\ncache-control: public\r\netag: W/\"686bd57a-3a76\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":14966,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14965)","md5":"9f54e6414f87e0d14b9e966f19a174f9","sha1":"ae5735562faabd1a2d9803bbd7bf4c502b5e4f51","sha256":"15d6ad4dfdb43d0affad683e70029f97a8f8fc8637a28845009ee0542dccdf81","sha512":"9cc365a6e6833ebaa5125b37217fd0e7a1f7eaabc1012c1bde2a6ea373317966ec401d7cf35a31d1c46fed43d380196b8aaa329eddf92a313080651e51720f9f","ssdeep":"192:pL5u/nTfc3aqPJRQ9CPjOtWlUJKLPcH9tPOF:3u/TfXARQ9htWGSPcdwF","tlshash":"3f62b935bacc2235b0bf8e7f6cf274946729dd5fc4111b9ab8e9e594c8e04540a8b60f","first_seen":"2023-04-05T09:15:52Z","last_seen":"2026-04-11T10:18:58.034097Z","times_seen":15972,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/uploads/2022/07/care_new_logo.png","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/uploads/2022/07/care_new_logo.png HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 18921\r\nlast-modified: Mon, 25 Jul 2022 12:02:26 GMT\r\ncache-control: public\r\netag: \"62de8652-49e9\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":18921,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 136 x 170, 8-bit/color RGBA, non-interlaced","md5":"603bd481e52e646e80117db047916380","sha1":"08f60591d8756a522a4e0b0bde163a2fac4e776f","sha256":"6800a504bdde9e13aea5c613b4912e263834478187602cece5244357b262e762","sha512":"45d3e7d09e7727f3dbc955f90725a43ff46816154506c9249d1ccd0a80bcd243b904a2b9472206a01b264dce756b5c8c776f006644608d65216dec8ce315ca2d","ssdeep":"384:huS0H4L0HAX8pimIfGtq+kRWYXOHv8wdgKXNdVCPEmLk634kKCFQDfW5kqHf5Nom:hoH4YA4i/Gfo2Uwd/dek6tNQC5jx2m","tlshash":"6382d0b09973abe169c7f7fd98140a12f3990124a8df7a1cbb2e75756902a12090360e","first_seen":"2025-10-11T09:12:46.786879Z","last_seen":"2026-04-11T08:25:41.664789Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/themes/caretoolkit/img/search.png","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/themes/caretoolkit/img/search.png HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 401\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 16 Jun 2017 12:02:26 GMT\r\netag: \"191-552128f11e22b\"\r\naccept-ranges: bytes\r\nreferrer-policy: no-referrer-when-downgrade\r\npragma: public\r\ncache-control: public\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":401,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 17 x 17, 8-bit/color RGBA, non-interlaced","md5":"792cfc39bfd9a96ef830bdb18cf5df8c","sha1":"9eb3ac35796e72742d74b74e8b1704e9946ade4e","sha256":"8a679f174847feae1b1b81c89d4657bf9286e6c18f9ecb456ee03e09e3b90826","sha512":"b7740fb6aa87b12c592b8ede9462ed383b75bec1315f99e90ec1b3f49619127a7bb761f8031b7b10b60939108ad244beea3eae7e2f094d0da1f1725853d8a14e","ssdeep":"","tlshash":"2ee081a21387f0bc835dc074d76dd0037919c0023ff91b083003903da10d123d8e60e0","first_seen":"2025-10-11T09:12:46.758576Z","last_seen":"2026-04-11T08:25:41.666584Z","times_seen":3,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/plugins/print-my-blog/assets/styles/libs/jquery-ui/jquery-ui.min.css?ver=1.11.4","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/plugins/print-my-blog/assets/styles/libs/jquery-ui/jquery-ui.min.css?ver=1.11.4 HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 07 Jul 2025 14:11:06 GMT\r\ncache-control: public\r\netag: W/\"686bd57a-7545\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":30021,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28290)","md5":"840cca94d5e33faf324bcd4988fa8401","sha1":"b25622cc0b25fe0ce8ec344f5817cc140d19143c","sha256":"8964f1fe20bd22829aa12283e7e59515e7fc658348810e00c55a4c6c1c368628","sha512":"be58d0f2edd73ae574bb418b1ba6514e8122d9928259e2707b3bf6ecf38a9aafecd4c211892bf7da6e4c2996aab8be1621d877034c04f870a1347facea9b0515","ssdeep":"384:6YpypxHLzBI1J1eovo+4O37L/72fZBhVZqR:64yTLzBIrvsO3cBhe","tlshash":"99d25330a5c2202dfe23d23161e11ff4523bc142eda65e7db09aa75993e98f4c47b971","first_seen":"2023-04-08T18:11:12Z","last_seen":"2026-04-11T09:00:43.740919Z","times_seen":1377,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/plugins/print-my-blog/assets/styles/setup-page.css?ver=1751897466","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/plugins/print-my-blog/assets/styles/setup-page.css?ver=1751897466 HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 156\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 07 Jul 2025 14:11:06 GMT\r\netag: \"d7-639576a2e166f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nreferrer-policy: no-referrer-when-downgrade\r\npragma: public\r\ncache-control: public\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":215,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a8f0b372d4c6f38df7ea3a4a5e25bac4","sha1":"feb964ca9a09d41aa05d905f8301e20fe0a73584","sha256":"911953fa018ac7d286f1174094b32c039ad1521151bdc794336ded48e1bcbd9c","sha512":"ebdf833cbe2ed172b1eb0c097c39c3493e655be23df90cc9d006f12cecd61007953aadea6ac3ad75caf591c4087dc710990ae33747967d443b3936d6ed9de775","ssdeep":"","tlshash":"48d0a7400a626875a18c000a1cfc9308051c4516698a49a52ec9569c8b6d2811119f0d","first_seen":"2023-04-18T07:54:38Z","last_seen":"2026-04-11T08:25:41.669651Z","times_seen":62,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jspdf/1.3.3/jspdf.debug.js?ver=6.7.5","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/jspdf/1.3.3/jspdf.debug.js?ver=6.7.5 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.careemergencytoolkit.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 121939\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ecd-93062\"\r\nlast-modified: Mon, 04 May 2020 16:11:57 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1364318\r\nexpires: Thu, 01 Apr 2027 08:25:13 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fb%2FrEDvtcfI9NPXZRHpK9c7MwxjZZdAhK63slFWOWpxVfgK6ARx9Mp5efvbHgEpyRV3pB4vcnomQ219z7FZdxNkNxuVNho9FgBN%2BoGZjvWLpXN%2Bw3mo1HhNB9ALyhYpc92ZiCicZ\"}]}\r\ncf-ray: 9ea89970d8860b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":602210,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (499)","md5":"b4c03580d82faa0d1a4b38241790d345","sha1":"83841eb0dfcd0323b954ed7d8b65a14729e4eb55","sha256":"b265c8c8890fd17562665e4354009652af4c5e8442ab9f85a9c36db88f0ce298","sha512":"db7e26ff24b16813fa051749e20ee3606eee23dcb613be1dbccb9ad49ce4a8cdcbc963f8deda2c22a113f3bddfde6e8e43fd0de932b2a971b87cb78737dbca92","ssdeep":"12288:xoYHhbvHlgJcOOZUtp9UNeZs3NdTWmmU8Ct:VJ/2JnOZU/9UNeZsdTWmh","tlshash":"cbd41948afef20299113706d6f9f6448a63c90370219dc55bd5cc6a85fc4a3982faff9","first_seen":"2023-04-18T20:47:02Z","last_seen":"2026-04-11T08:25:41.670519Z","times_seen":20,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":8,"dns":1,"connect":2,"send":0,"wait":9,"receive":6,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/themes/caretoolkit/src/js/app.min.js?ver=6.7.5","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/themes/caretoolkit/src/js/app.min.js?ver=6.7.5 HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: application/x-javascript\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 25 Jul 2022 12:01:07 GMT\r\netag: W/\"27-5e49ff060c779\"\r\nreferrer-policy: no-referrer-when-downgrade\r\npragma: public\r\ncache-control: public\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":39,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"31efc75f95902dba9ce943cc3d8f6631","sha1":"ad1fa11f3051a07b8fced276be2105c94e2841d1","sha256":"b89e6b04edb03aba3ba036700fd9a9f1d3dae0f230154ee9661ce0bd8deee63f","sha512":"20fa0ef72fef4eb18ce0b9d4ae98e81ccd59989b1b637fc8e6bd4722c3713b703930b5c753ef1c37ea4f8f8339ce2f113dd3d7a8d79d2eb221b157667403ccdd","ssdeep":"","tlshash":"a690041d744cf34405775134543753047733741035411041010d71400c1c5351107404","first_seen":"2024-08-19T17:29:36.089971Z","last_seen":"2026-04-11T08:25:41.671374Z","times_seen":15,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/themes/caretoolkit/img/PMIEF.jpg","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/themes/caretoolkit/img/PMIEF.jpg HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 281691\r\nlast-modified: Fri, 16 Jun 2017 12:02:26 GMT\r\ncache-control: public\r\netag: \"5943c8d2-44c5b\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":281691,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 1619x946, components 3","md5":"1a5c4fa7fa55b1c204dd2f68896e4a7e","sha1":"2270642f76788903c78c64b291af2990b8f1dcb7","sha256":"67c6cc1dda59c6e4d0d524c186123a080cdadcbb35d3159b467176c31a961fdc","sha512":"e7e1861d90366ca876750b7d0efcd52b8970dca7725367f229f3dcc8dd7955c99c6396c0c752efb8de120252b757982538d4b3d06114427148eec85ce8214049","ssdeep":"6144:Xwe39Yo75zCFtPvfOpEnj9A8Fq/WA3uvIfL7CUffrQfV:Xv3C+5GFtXmiJA8w+gj7XHyV","tlshash":"8554121f3f2152a4d86a833421b5f27e0cad6f89ee3c911777d48e7bbde0ab19858045","first_seen":"2025-10-11T09:12:46.795134Z","last_seen":"2026-04-11T08:25:41.672141Z","times_seen":3,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/uploads/2017/02/CARE_home_icons_WASH.png","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/uploads/2017/02/CARE_home_icons_WASH.png HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 2162\r\nlast-modified: Mon, 13 Mar 2017 16:16:08 GMT\r\ncache-control: public\r\netag: \"58c6c5c8-872\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2162,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 31 x 46, 8-bit/color RGBA, non-interlaced","md5":"1936c2aa37683afbbe3152c404254b29","sha1":"2afcc1307a2938efc8209873704aedaaacb7f0a5","sha256":"1e01aeecf9dca59c5ef752f667c7c00f2fa3d250eb1ee62e165e820ac270be1e","sha512":"886ee399b126d98804842187b31384c6c9f9d5b0970ab7b7729de7a9d1f4e7d29b070d5abd4f694c1b469939dbe72816e5dc494db166a16028934285237818f2","ssdeep":"","tlshash":"7c41e991f9047d823288a9c3b4f9b1678c1257d0ef9df416f9cbe06548213f998659c7","first_seen":"2025-10-11T09:12:46.759707Z","last_seen":"2026-04-11T08:25:41.673705Z","times_seen":3,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/uploads/2017/02/CARE_home_icons_food.png","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/uploads/2017/02/CARE_home_icons_food.png HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 1923\r\nlast-modified: Mon, 13 Mar 2017 16:16:08 GMT\r\ncache-control: public\r\netag: \"58c6c5c8-783\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1923,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 50, 8-bit/color RGBA, non-interlaced","md5":"5902802ed755aefa80c38797f6846bcc","sha1":"84409b0ea20fed49683c4cb2c9f4755329662353","sha256":"771a79d946862ea565d1ef9176730a6fa3b04d041b8b98a09c8c237e815f7e66","sha512":"b5374511c4874e155dcb0cd1213482ac61ae9d9988e3d6c433fa169d64c9e2554c558889d7045de285901c8b93f401a0766ea48423a5e9e1bd1a735ae6033f0d","ssdeep":"","tlshash":"b741e888fd54b882a14cc59e50fa5453aa2388092cbda432fbce94464b127f61d7c4c7","first_seen":"2025-10-11T09:12:46.788251Z","last_seen":"2026-04-11T08:25:41.675252Z","times_seen":3,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/themes/caretoolkit/js/theme.min.js?ver=6.7.5","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/themes/caretoolkit/js/theme.min.js?ver=6.7.5 HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 16 Jun 2017 12:02:26 GMT\r\ncache-control: public\r\netag: W/\"5943c8d2-125b0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":75184,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"2f901b89659f9e82982279912a54524a","sha1":"332f79129d8d972a0451e6e8579fd01a4c0ff99b","sha256":"80071cc42384461fda214945e4b3e6f87cf0db46b727e5c71f84db671a2b00ef","sha512":"f01729fe74ac564cac793b57f27442b1954ddabfe0ed50a1d4654d9be0ea9fb34b882a6799e34ef232a77de8e98860ed74b569605225fce9838eb855dfe9b180","ssdeep":"1536:8ScaDS7lm/5h1xZP0yf/L/wP1hxIwJeEA36Ni:YM/5vxZPX7wP1IwJeB","tlshash":"5473c749735074b242dfa162913f460bb3376469a607909cb96ed4ee1dbce883267f3c","first_seen":"2025-10-11T09:12:46.792535Z","last_seen":"2026-04-11T08:25:41.676701Z","times_seen":3,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-11T08:25:11.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 20461\r\nlink: \u003chttps://www.careemergencytoolkit.org/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://www.careemergencytoolkit.org/wp-json/wp/v2/pages/3614\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://www.careemergencytoolkit.org/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-powered-by: PHP/7.4.16, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"W3 Total Cache","description":"W3 Total Cache (W3TC) improves the SEO and increases website performance and reducing load times by leveraging features like content delivery network (CDN) integration and the latest best practices.","website":"https://www.w3-edge.com/wordpress-plugins/w3-total-cache","common_platform_enumeration":"","icon":"W3 Total Cache.png","categories":["Caching","WordPress plugins"]},{"name":"TinyMCE","description":"TinyMCE is an online rich-text editor released as open-source software. TinyMCE is designed to integrate with JavaScript libraries, Vue.js, and AngularJS as well as content management systems such as Joomla!, and WordPress.","website":"https://www.tiny.cloud/tinymce/","common_platform_enumeration":"cpe:2.3:a:tiny:tinymce:*:*:*:*:*:*:*:*","icon":"TinyMCE.svg","categories":["Rich text editors"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Yoast SEO:24.4","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP:7.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":145448,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37437)","md5":"a3692e99ab3d47c6eb33675924984755","sha1":"4cef7b25ae451f0065c5e614633628fcd660e442","sha256":"75d6a72b75a4f675711d9f223e882647f075e8c0d3740e3494094399f2a5bd58","sha512":"6e74b6614a2c1dff9b510ece67ddf725124dc4ba5ce072b26476dd0d471c5e74d3ffffe673a7c9e5c2d034d09ff03f3f1a0c522226b128921728d46962096723","ssdeep":"3072:Rx0DfKEUyw5bzFD3YCiFGWIuvLaJQpqsKJE9pxV9vS:bvN","tlshash":"7be334b76a90409f038f27e92075ab9d64b3e14dcac624d074fd4b6dbb60f31ce92916","first_seen":"2026-04-11T08:25:41.678188Z","last_seen":"2026-04-11T08:25:41.678188Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1115,"timings":{"blocked":101,"dns":33,"connect":21,"send":0,"wait":890,"receive":22,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-includes/css/dist/block-library/style.min.css?ver=6.7.5","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.7.5 HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Feb 2025 11:52:23 GMT\r\ncache-control: public\r\netag: W/\"67ac8b77-1c012\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114706,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59458)","md5":"8c9f31823282e4e056eb0aa7fac262a9","sha1":"dc3b1a37381e079fda8db59c1a9469852cd18b80","sha256":"3bb38d0f302677ff4104564454f60f495133579d6e6dfb722b3de850df596502","sha512":"39f239c875550bf9a31254eed1f0358ea3c6309d9fcbf6005d8852843eaf60bc20b8626d169f810a6c71b7dcdb769b8512314b89ba1fdeea2cb3089be9d21ae0","ssdeep":"3072:HaeJuf7Qg5MG7H+qehvP0x2pUk44Q03Pm:Qf7Qg5MG7H+qehvP0x2pUk4T0O","tlshash":"2fb3625417b4dcf935ffa73a5e4ee258a103aa41c68a67e7e066d190618ca490cf3f0f","first_seen":"2024-11-13T05:08:51.610493Z","last_seen":"2026-04-11T10:37:40.662904Z","times_seen":27906,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.9.1.min.js?ver=6.7.5","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-1.9.1.min.js?ver=6.7.5 HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.careemergencytoolkit.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-169d5\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\nage: 1296622\r\nx-served-by: cache-lga13625-LGA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 24, 1985129\r\nx-timer: S1775895913.212034,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 32772\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":92629,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-11T10:57:05.818595Z","times_seen":61520,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":95,"dns":34,"connect":26,"send":0,"wait":27,"receive":9,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/html2pdf.js/0.10.1/html2pdf.bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/html2pdf.js/0.10.1/html2pdf.bundle.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.careemergencytoolkit.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 191946\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"61309340-2edca\"\r\nlast-modified: Thu, 02 Sep 2021 09:02:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 103484\r\nexpires: Thu, 01 Apr 2027 08:25:13 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yFbvtVF06TXuj86hy%2BMkSaogIftxccmoDQDHhxT8Zkhhb5UtNKtoOHL2ZblRLVDlXzxUiA3um4HvGD8JgKBU8uQesU%2BqhbO3eAOAHrfHitafdvWkI4eC7tS%2Fl%2FAuNRUWM0B2ogo5\"}]}\r\ncf-ray: 9ea899711e5b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":905956,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65459)","md5":"5c6ee7cc4411e35934ae6b2e6cb6bb68","sha1":"26625c795ced8f13d34e9a511b6162b4433d7f5a","sha256":"85e6ee9ce246e3ae4424313f7e46a5ed860a28d757811de8dc9c43f306049d65","sha512":"1ac2e564dff717612b0b989f4b942d829889b56778dc9592b88821ee66f367ccc1a6cf9dbcbbac57e78d4004ea800fc775e285560039bf74bf708acb17b42722","ssdeep":"6144:MQAuz/9oI03IDxbRryIV06euNk8IeFu7tk2+T/4i4iD00XkLMsGM4a1:MQro3cxbv+6euNk8IpkXTuRMM","tlshash":"ca1539b437b2b056066bb27e203f140a62796656148ec804f76ec9d3ecb498dd1b7b3d","first_seen":"2023-03-13T05:21:14Z","last_seen":"2026-04-11T08:25:41.680919Z","times_seen":316,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":10,"receive":8,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/uploads/2017/02/CARE_home_icons_shelter.png","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/uploads/2017/02/CARE_home_icons_shelter.png HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 1939\r\nlast-modified: Mon, 13 Mar 2017 16:16:08 GMT\r\ncache-control: public\r\netag: \"58c6c5c8-793\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1939,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 38, 8-bit/color RGBA, non-interlaced","md5":"64e9c80e5988e61ebd5de2750b03dd30","sha1":"d5be1c0af54b32c09fef79b4692009d945fc72a2","sha256":"c022f298c4fc613c737d000eaed37f25da93003a27fa027bbd65fd055685c82f","sha512":"7481939c21989e9a1375c9764cb937a6f6365c922de18d6e3439a5e5b3e53710a19fff62f56b4123e01e3769c8f16d2ac50b88f3bc8ea3d78bba17b0915cef38","ssdeep":"","tlshash":"e441a6c6f50035d2b2dcf89144faf01756168a865fe4a1d6bdcec5af4a113fa44a90cf","first_seen":"2025-10-11T09:12:46.760872Z","last_seen":"2026-04-11T08:25:41.681622Z","times_seen":3,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/themes/caretoolkit/fonts/FiraSansCondensed-Regular.woff2","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/themes/caretoolkit/fonts/FiraSansCondensed-Regular.woff2 HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.careemergencytoolkit.org/wp-content/themes/caretoolkit/css/theme.min.css?ver=6.7.5\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 141796\r\nlast-modified: Mon, 25 Jul 2022 12:01:07 GMT\r\ncache-control: public\r\netag: \"62de8603-229e4\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":141796,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 141796, version 1.0","md5":"42c291ccd236b765e2aae857d293d608","sha1":"1dc781c6f045638be661c1768f4a755a89fe2c87","sha256":"9c361068f634821d77d5d646f0c5faa1b80173284059c2e39b50b7a53bad5df0","sha512":"dc9714604579b6d0fa6a5a9d7bc454f4cf189a4087808dde086e22e76b6bb37228cb4b42134aabc1260b766bbfa1f760d4531c7f0bc9e561640809c865bc0d2f","ssdeep":"3072:WVrTulcgQ+ZqklmuBiryB5EsbNVWRhbf36JylR4uCzOOa52HJ:WVrTuDtlzjGsRVOhMER49iOa52p","tlshash":"26d31265806c3a12729982f3b3716bd9e8cadca645cc21c16f1b08487b77ea739173b5","first_seen":"2025-10-11T09:12:46.766474Z","last_seen":"2026-04-11T08:25:41.683172Z","times_seen":3,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/tarteaucitronjs/1.9.3/tarteaucitron.services.js?v=20210509","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/tarteaucitronjs/1.9.3/tarteaucitron.services.js?v=20210509 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.careemergencytoolkit.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 21030\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"60d2177c-5226\"\r\nlast-modified: Tue, 22 Jun 2021 17:01:48 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 16026691\r\nexpires: Thu, 01 Apr 2027 08:25:13 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FHXKzYp2ykvk1r7eUu9bdgFSlLHHaI9b0PbSWpVZjYHGm5389CkM5F%2F9D3m1GMXM7L9z4kcl1or2DMq4Gh5xyRe9QQpamkbzhLBoIRkfZNaOQRemV0MsiMIDqtmhseozGPwVxRL4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9ea899750a043181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":161090,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (889)","md5":"c880a97057e7016d7a840c19414abbdc","sha1":"6fdc211401eebf9aad8a86c8aab45355066340e9","sha256":"91110463183c187aa53f848c3f4683ea28c99de7f47f7c6e258933e57eec2d4b","sha512":"6084da688f811ce430b3d40c193ff2a21343895a5a020ff85a06ad624a13ade38031f296fc7e404753b35eafa6721667e6353817e4646edfc7f1ab06ce7b219e","ssdeep":"1536:SiTe5xBrB1McY8xMKQv8xMDAc8xMGQ+/a7QQZrI6rW9zLapeUwd+FPSk3RDKiCOG:I5VirCX6Pnw42FxfgPUylYbtuc","tlshash":"0ff3533adffb58b909b735964a1f0649762041230d44ee2a7e8d9119df8ce2f2570bbc","first_seen":"2023-03-10T09:29:23Z","last_seen":"2026-04-11T08:25:41.684712Z","times_seen":30,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/themes/caretoolkit/img/care-logo-gdpr.png","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/themes/caretoolkit/img/care-logo-gdpr.png HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cet=!gtag=wait\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 87916\r\nlast-modified: Mon, 25 Jul 2022 12:01:07 GMT\r\ncache-control: public\r\netag: \"62de8603-1576c\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":87916,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 526 x 515, 8-bit/color RGBA, non-interlaced","md5":"c2b107b2392d48e0f563b2b66d1f7384","sha1":"70e9c65da713969dd66e837d2ab455c044098556","sha256":"6d570b6c161f38f67bb85489cbc28e053926e9e651d3fd725ad0e00530ebbf32","sha512":"6b11defcaacb91956f6be93153c7bf87f38cf202904e58eb35dee22dd48f37267caddb4a21e86b4050f3a12c4383da0f5fbc5f39dbd53da835ac3cf21e51a136","ssdeep":"1536:Vc7O3aTIVibQlAeGcfKKWkIcaTfQtU+QJNJvT60a+UreMiE6ZlbGjt:+oaTIw4DGcfKKWVTfQtyrZIUbrbmt","tlshash":"c38312d3e3b9225c2492c1f85086d29b73fbe0d2930856ed2ad7e0e0062a2d50467f7f","first_seen":"2025-10-11T09:12:46.749244Z","last_seen":"2026-04-11T08:25:41.686726Z","times_seen":3,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/plugins/print-my-blog/assets/styles/pmb-common.css?ver=1751897466","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/plugins/print-my-blog/assets/styles/pmb-common.css?ver=1751897466 HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 07 Jul 2025 14:11:06 GMT\r\ncache-control: public\r\netag: W/\"686bd57a-8f2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2290,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"72cf43606e65f118f71931c395def358","sha1":"ddd405cbbfed44a75dd8c7d9bf24f1db3c65e81a","sha256":"c8e3dae0e64c6d0dbe2ada27386d901b86932e5a78b4e06c2308aaa288428c9d","sha512":"46c57ed188d50f6b3496c8fef8ddf7e0ad87cdad059e401794400fb8892badc964a2bb3bdc7ea85a77855d66a234ca1f5f2e05fc31eecd9b98d91873d7580eb3","ssdeep":"","tlshash":"e74100527de30e5a6d45c250abbe774522aee03306a9f461ff85a1204f8e388d23035d","first_seen":"2023-04-18T07:54:38Z","last_seen":"2026-04-11T08:25:41.688061Z","times_seen":58,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 12 Feb 2025 11:52:23 GMT\r\ncache-control: public\r\netag: W/\"67ac8b77-15601\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-11T10:56:33.860543Z","times_seen":702823,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/themes/caretoolkit/js/tinymce/tinymce.min.js?ver=6.7.5","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/themes/caretoolkit/js/tinymce/tinymce.min.js?ver=6.7.5 HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 16 Jun 2017 12:02:26 GMT\r\ncache-control: public\r\netag: W/\"5943c8d2-62e64\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":405092,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32027)","md5":"f06d72bf3ec8d437fcc29a0fd70344c4","sha1":"3aee949baeb9519e3ea4a1bb9279874c7d02cbb1","sha256":"0cd26af25c51872d49b7190ce37fe36003aab882a34d78a7d524f97cd1e58d31","sha512":"6cddf3b02b1d172e45d59add5616b55c849bc98971e63df31a03b429272e963c9020f49d64ac076560c645f8d43475c2775865cdc15b069b68d10ea714a4480c","ssdeep":"6144:Y5VE4X2ucRDEq5PEgSyoLta97weKr5Xt53v7:qxXy5PMtar8R","tlshash":"e7842add31c1b03263a7307a80af650af2371949980e8520f53ad4e67c789ae537bf6d","first_seen":"2025-09-18T23:21:08.743214Z","last_seen":"2026-04-11T08:25:41.689442Z","times_seen":6,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/uploads/2017/02/CARE_home_icons_sexhealth.png","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/uploads/2017/02/CARE_home_icons_sexhealth.png HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 1879\r\nlast-modified: Mon, 13 Mar 2017 16:16:08 GMT\r\ncache-control: public\r\netag: \"58c6c5c8-757\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1879,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 49, 8-bit/color RGBA, non-interlaced","md5":"7c1be875d34b21872e610f50f97e61fc","sha1":"561ef67b9cf96fefd3d10980f027f40e92fd28ce","sha256":"057892d6c9082c167edb4793be619ecf1142d5f1c108abcba9943771aca1bed9","sha512":"48875a778653894faf54b33da80c3c8733cce7e8752a9adc7bcede9183016e1f47e73c77d3124d72b8d47c5cf4b1bb383b5fd91774a7814fffaad75a433530c0","ssdeep":"","tlshash":"2c41f786f99079d192089ec224ef6023cd1b89434face159fdc990af42203f958ad5ce","first_seen":"2025-10-11T09:12:46.791156Z","last_seen":"2026-04-11T08:25:41.691197Z","times_seen":3,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/themes/caretoolkit/img/CARE_footer.png","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/themes/caretoolkit/img/CARE_footer.png HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.careemergencytoolkit.org/wp-content/themes/caretoolkit/css/theme.min.css?ver=6.7.5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 263193\r\nlast-modified: Fri, 16 Jun 2017 12:02:26 GMT\r\ncache-control: public\r\netag: \"5943c8d2-40419\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":263193,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1366 x 100, 8-bit/color RGB, non-interlaced","md5":"e37c3fd5c2575e02bdecd1893654a244","sha1":"fc3f2b0be1e26d6df594e2daaf11bd61df2e491f","sha256":"11fb3e92726db4bd158f590ee62b1b836f10fbcbc8998395244645283598bd9a","sha512":"5bd0787282ff0a94af0c3efb6131da578382c6a45ff8aff99e2226e3083c0a171b6d4d49c265cc31bca2d93f003918c8db7d5db62f212f5140f404549ce0f56a","ssdeep":"6144:TYMNfT+j59Rd+YUSrzSBe8cpWevRtxvs/xijJAXk:UMVTQ97ZNPSE8cpW6txk50J4k","tlshash":"0c4423d48cd5437ba8f0ac38726a6d2ad1b63a0c131c89e0f91de324b29d7df11d998d","first_seen":"2025-10-11T09:12:46.742497Z","last_seen":"2026-04-11T08:25:41.692936Z","times_seen":3,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.careemergencytoolkit.org/wp-content/themes/caretoolkit/favicon-16x16.png","fqdn":"www.careemergencytoolkit.org","domain":"careemergencytoolkit.org","tld":"org"},"ip":{"addr":"178.62.98.94","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.careemergencytoolkit.org/","date":"2026-04-11T08:25:13.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"careemergencytoolkit.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 08:18:47 GMT","end":"Mon, 18 May 2026 08:18:46 GMT"},"fingerprint":{"sha1":"CB:7C:6A:74:25:48:6F:E4:C4:93:B1:1F:D1:7E:34:5B:07:EC:C0:72","sha256":"12:F0:1B:18:A0:37:FF:42:02:7A:A7:13:0E:4F:79:4B:FE:81:AB:0A:AA:95:66:BD:D7:70:36:C7:F0:B1:BD:31"}}},"request":{"raw":"GET /wp-content/themes/caretoolkit/favicon-16x16.png HTTP/1.1\r\nHost: www.careemergencytoolkit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.careemergencytoolkit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Apr 2026 08:25:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 1231\r\nlast-modified: Mon, 25 Jul 2022 12:01:07 GMT\r\ncache-control: public\r\netag: \"62de8603-4cf\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"c5c1435b35b0b703498d8c2d7ea34d38","sha1":"5336f63a3d1d789d61007c70e95e1d4fb742ee08","sha256":"c00b19cfad5b11b518b1a5d91e090994cf446402ed49df52e5f22d52b0b8fe6e","sha512":"a49da8e4bd2164dbbab6fcbfe52e287f4597f4c81c8377ada747cfbf0eaab89e9598bcd774ce4dd106bd2ab1f62b096ba75723f045c71a2326b8a87b1d359cee","ssdeep":"","tlshash":"772186cb9a6d855c8c0a1246b6819a11e9fc860b11c2061c7da8c00c4c31bc0a5def82","first_seen":"2025-10-11T09:12:46.748136Z","last_seen":"2026-04-11T08:25:41.694242Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"www.careemergencytoolkit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}