{"report_id":"73ec6db6-2e95-484f-b74a-39e97088acb5","version":6,"status":"done","tags":[],"date":"2026-04-22T11:06:58Z","url":{"schema":"http","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"title":"Pestana Porto Santo Premium All Inclusive Beach \u0026 Spa Resort - Porto Santo, Portugal","dom":{"size":269687,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43923)","md5":"907f8d94b3537b340afa820f1816d38b","sha1":"6d52b8998063b9f3cc57c3468aed35e9079b901e","sha256":"70633c5e809c1e3d651df11c3a3509925c3860ed8a842cb682809f5555696427","sha512":"a3d4e334a047d5221d70eed2de44982d4f1d38dddab9c1b0b08bdab2ec664162f3be52ff8f8cc462a8faffba351bb6c7f005eb1d295510cfa1eb928c27af880e","ssdeep":"6144:b35veieke8erec6/eBeEvF80qbceWYvNSElR+/iu2pL6BDWPX6YEkxeNlgHBRi4x:sr80qbceWYvNSElR+/iu2pL6BDWPX6Yr","tlshash":"b8443c229ba5203b8167c6a7ba2a556f333be907d55201c0f7fd43384f86e15af5382d","dom_hash":"domhash4a547059142171b5dc9d2995ceb1f115","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-27T11:06:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-22T11:07:02.553328Z","last_seen":"2026-04-22T11:07:02.553328Z","alert_count":148,"request_count":37,"received_data":3319087,"sent_data":61700,"comment":"","tags":null,"fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-19T22:16:46.237507Z","alert_count":0,"request_count":2,"received_data":64258,"sent_data":1226,"comment":"","tags":null,"fingerprints":null},{"fqdn":"spahotel.guru","ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-12-16T03:18:56.312429Z","last_seen":"2026-04-22T10:56:04.989966Z","alert_count":1,"request_count":1,"received_data":1692,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":1,"received_data":6921,"sent_data":579,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/js/5387.js","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c02f52e895f2243a8771b397f88cadb6","sha1":"de40c857ba5894e9180aa574802db3849fa425a2","sha256":"76eb492b0c7420d3d155f04c193c4a734dac9c9f3dfe460e5d60d6ac49c31a24","sha512":"0312548e30aed98ce1ec7662e68a1df9983db0e49f961e37cc0cfdce3f9f856050c28f930049cbc7a03f8b8d9d0a2eee7034d0f62ced59fb8b676605354d7cca","ssdeep":"","tlshash":"e821779af2d970f147671412c16f93ebd6fdb1506057d840bd2802f41a38d2bb057d6b","size":1238,"data":"","first_seen":"2026-04-17T13:27:57.686881Z","last_seen":"2026-04-22T17:40:08.700837Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/assets/js/pages/hotel/hotel_4.js?id=b73920d62e3707bb23c70ce8853bf766","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b73920d62e3707bb23c70ce8853bf766","sha1":"c8fec02977a1f09074a377ccbd2ec695a586e9c4","sha256":"611b5ea8e572eea9e04f48561c8106d1ad450e37ab0e41b27da832e3acf8821b","sha512":"2a59f1d62f9ee294e33618a75257fb920b8c828abd192d660e823266ccde7ab612c1d1f568111ff459d145c414cf5745ed3f6f56ba2105f4285bf41852e0dc93","ssdeep":"3072:wMvME4nrvUjQYbegUwAOcr06dzG2rQK0sDAsp3:wMvME4rvc1cr06dzG2rQK0sDAsh","tlshash":"b2244b8a71a1703353e7607640bf010af3355a65688a80d0f219e5f1adf5e8e72bbf79","size":210361,"data":"","first_seen":"2026-04-17T13:27:57.693624Z","last_seen":"2026-04-22T17:40:08.712996Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/assets/js/widgets/hotel/reviews/reviews_4.js?id=97b62d949217b4bb005c21afa7b7a138","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"97b62d949217b4bb005c21afa7b7a138","sha1":"a829f0c9cc5344ab8be0d154f9a82f4764ec0a7c","sha256":"13b5b6f477cd2a90756bd047b17f423d6e1a3cee291338a8ff66fc380900b0e6","sha512":"15818309ab3e65bd01be68646140347d5492936825f1a41cfc2d9d89d57d053b21611890a46bf05b197d0288bcf3b07aa1e6fbf72d0f2bc898cc81392c879d32","ssdeep":"192:/DO9dvC5JHJtH5TdHh1+5FxHKW3XCMPyH6qIR2pmh6fQZKcSopFqNBqft2aqQd0U:/DKYNzAUGao0o3dft2aMexA2RZ999","tlshash":"7582a68cb7d6f07903a36572812f414bf23a385ab45a9054e615d8e1bcb88de9233f79","size":19234,"data":"","first_seen":"2026-04-21T20:06:55.452131Z","last_seen":"2026-04-22T17:40:08.695691Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/assets/js/widgets/shared/lang-currency-select/lang-currency-select_1.js?id=9cfbb6b74a782932871e3607576d7811","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cfbb6b74a782932871e3607576d7811","sha1":"64ee0f44ebddc791f9a314809d211614f4983a2b","sha256":"8d31760abfc6d7bbe65ed9ad40c12a13bb960b1b9ff54b8da88746a3dd877e8c","sha512":"b28f2e4b96418dbb6ac1af5e5dfabfe1ed6f2ad972d767a1c9085436441206de962b0ac51b1c4e56f3cdb2a09bf0a4123d22c223cd19bd6fb2a2304bbb55ed44","ssdeep":"192:8H54LlME7HRZaERi7RBatHFECpR54VhQp9TSdGMHVICpwoCQI/LhBfiHncVF:VxHa+zECr3CSC6xQu9","tlshash":"af62568cb7a1f0b146e7a171402f450bf239796aa05e90d0e655d8f0adf84ee42b3f39","size":14994,"data":"","first_seen":"2025-11-27T01:58:12.094622Z","last_seen":"2026-04-22T17:40:08.690478Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/js/4067.js","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"66fdf579813f5b27faa84ed6548a3860","sha1":"436bf379c8ddac61aedee57c629b332a0c40cbb4","sha256":"24bb956159a0a8a9b7226ef5ec2847c69b619f9d995b9cefd3f72a9b84f9c96c","sha512":"565ce621f2b0cd3b96e01884b4dc90422a08cc68935eadf40f4dff5304a0844640d129a3c54d7d43fc52ef1f595027a465a5426edaa794a5e6072a02688a2db8","ssdeep":"768:cNDd6OkI1XySiprXJYEiuSSQGvEqnjyHOcd8EmdHdLHGCtw5S+EXEQVzexO6s:cNR6OkI1XySiprXKEixSJvEqjKOcdXmH","tlshash":"59e2176a7724353891cf149fa05fdb4e333540a2bc1b2446d51ec8e5bcb6c6a06a7f8d","size":31292,"data":"","first_seen":"2025-09-16T18:18:33.249978Z","last_seen":"2026-04-22T17:40:08.698071Z","times_seen":340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/js/63.js","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"decc401737ae57930863363b3ee2777e","sha1":"3166c7147830ebf24663f234c2486a8322b491dc","sha256":"50a7f4719e74348bbc8f8186e724ad4c7e5f75386f1be5138ef88653943da069","sha512":"95b312c723a927229b04ef40c415e8b43752b9c3e4774f879bdf62b5eba3a5a736732695e4d1dd5b84b336f9eb3c4817aa1b96d36b71bc342adc5d0d596cc82b","ssdeep":"","tlshash":"7641838836d6fdb109eb5251057fa24bf1381652683ef004f316a9e099b88cf45b1f37","size":2320,"data":"","first_seen":"2024-12-27T17:59:18.085122Z","last_seen":"2026-04-22T17:40:08.697529Z","times_seen":392,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/assets/js/widgets/shared/footer/footer_1.js?id=37fe4c328ed05840b464d2092baa2a67","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"37fe4c328ed05840b464d2092baa2a67","sha1":"aa1829c0f6b853579c102e75cb3136909f97423e","sha256":"721b88f911a9bff6d502174cf51864dd92f2e38bf331430d03e6789511aa4a61","sha512":"6e84400342f1fd87b72cb752cb6bef94c3abfe6b444c8d2051c02e40b009bbcd9dd527c23a6a115d406ece43f440f132dd92b846c102857726cb9ed5e3e55788","ssdeep":"","tlshash":"60f0a2acf3a970b346437024447fa34b917f79a044aea414541176e06e3ce0fe5b3c66","size":611,"data":"","first_seen":"2025-01-25T21:28:42.429663Z","last_seen":"2026-04-22T17:40:08.709472Z","times_seen":432,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/assets/js/widgets/shared/relinking-slider/relinking-slider_4.js?id=8418a07f103c99bc3135a2ebb30817b9","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8418a07f103c99bc3135a2ebb30817b9","sha1":"ea4592acb3ecf0106db6651e1833c0899c840056","sha256":"c6c9273a6eca024ff45f8e725ab99648eb5d33fabc0827cd42f2d702a6aeabd2","sha512":"6d913ba0cd8be053e2ad91f6baf6724f60a4cef32612b4533973c782caede798dab50e3f469f9786e86b7c3ab405bc3960f709217be6eeb6c686a0c1534b3634","ssdeep":"3072:8MxKfmWWWCve9cqBxsP3hi76HeyDW5gbgS:8MxemWNCv2c73ChyDW5I","tlshash":"1004e8996320757646e71a9b93e4c261a3b44440b40ac4e870e94c9fd97ecac13ffef9","size":184772,"data":"","first_seen":"2026-02-20T20:13:39.635828Z","last_seen":"2026-04-22T17:40:08.714375Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/js/6926.js","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f73ecedf881aee7c52dd783686050c9","sha1":"55a98ba197efef63995f963d639fd9e9b915f920","sha256":"76433c53b147676dc035a2c516ac50e104c6ce9b025e47593713e38a0537ed40","sha512":"32e6208925273b092b681db4e3c8877e5d2cb002ae9fcea3475a20e4cf709cc4ce66525ce154fae792e60598fc1f381b10465c753d029fea09d32f31de40e7fb","ssdeep":"192:RHUQCp/nCi9DQazJSEfHVjD2ULPuWRseKFEN8aHRnYKcfSHvXAZdYXp:FCIGjoS72KvAK","tlshash":"81729488f392f0b506e7a171812f020bf229755a609e90d4e625d8f46db89df5273f3d","size":17139,"data":"","first_seen":"2026-04-15T00:11:54.481153Z","last_seen":"2026-04-22T17:40:08.715826Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/js/main.js?id=6e5aa312ab285b6c3b94af7e15b162bf","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e5aa312ab285b6c3b94af7e15b162bf","sha1":"715dd60e40854ea07ac8ef8ddc1f4e3f169efc79","sha256":"d02c5b499664bd56bb1ba1ee415c7678c8668dc2e2ea1c2eed5b4a6f52d3b274","sha512":"abb5f7a9a111f5e5a9b44714357c1ef28d8ea9ade390a863aa7de39c17788dbc49dee241a088a4dfe355ad20a94351179fbdf214a8677991af3d2e47b82073e7","ssdeep":"12288:RzP/3Xn+B7CckP5bYy+/RuFuW92B33kj52Va89LS:RzP/HnC7CckP5bYy+/RuFu133kj52VN+","tlshash":"f0a429da32d6b03253a716b550bb0106f3395e54740e8194f12ce8ee3d7a54aa2b7f3e","size":491072,"data":"","first_seen":"2025-12-04T18:42:36.57654Z","last_seen":"2026-04-22T17:40:08.70776Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/assets/js/widgets/shared/header/header_8.js?id=7a44365350dc68a8409edf1be16baf4d","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a44365350dc68a8409edf1be16baf4d","sha1":"37c871159072f9cb5603e88e8208fc3377ef8591","sha256":"2b5e654f19e885514cff75aa483483b2c7f93b7037018ef89b2ba3fb2e011774","sha512":"747d7f0162430fe2ec481e06fefbe9107133058041bc55baa863136736da8ac9d4701905017c9577f2f704277b62a349c2ced9df8bcb89e75f56f3dd50793ba0","ssdeep":"192:8H54LlCHSZJBEi8UBmEQHGcCpgsKERyqpSHf:Vxh4jCaoU/","tlshash":"18225699f391f4b145e7a171402f410bf229745aa09a90d4f665d8f0adf84ee42b3f3d","size":10425,"data":"","first_seen":"2025-11-27T01:58:12.063949Z","last_seen":"2026-04-22T17:40:08.713672Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/assets/js/widgets/hotel/location/location_1.js?id=453cb3aaed069d4b4715d8cc191ebc90","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"453cb3aaed069d4b4715d8cc191ebc90","sha1":"8db6a479ecefdbef3dbe500e6f43a3a1f451f14f","sha256":"89fce5bd438379fdfbbb3633f3813f9190263f3a19ab7517975777158c4b4352","sha512":"7f627239564a400ed638a7d47e74e068766a908e552710e6955fd3bdc42b2eed0222465ec4751c2d636ed7be7aac31606e47bc0751e1b1b9420f785b47af2906","ssdeep":"6144:xhNxVaM6TQ6hGXcJ7espTXD14HAKUZopbQXeCVv1vgz0axGMzdotWrcL2ygjFcX1:xBcM6OspTXS3bo1vgz0a9bi1","tlshash":"660519a9b25564268283a091447f014bf33f94a9e44980dcf62dc5fe9dfe949633bf38","size":853400,"data":"","first_seen":"2025-11-14T23:16:05.352881Z","last_seen":"2026-04-22T17:40:08.688728Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/js/2382.js","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c3d4ce5a7dbad2244b2a5bce5c3f70c","sha1":"861801f1b3844a3b6bad02ab259ad50d4f3fbfa8","sha256":"fe04395eae260984704caa2a65e27b444c10092800fc9d0dbffc00e3926c663e","sha512":"863d75ab6526cbd9a0efa8e684ed22797a4e95fc6d6f1026eafeacdf410e7ad10187ab96b64ee7293f08718fe9ffb31522c066a23fbbe926db8599308cb8d478","ssdeep":"192:oH4hUyTSl5q62Naey9C16qN8qNt2iq4iqfr46f3biTxHmxvRvX59:0xG6OL8CNt2iys86/bWoxvF","tlshash":"b51293cc72c6f56943977621902f100bf23e6966b85a9044e728e8f1bcb449e9327f7d","size":9100,"data":"","first_seen":"2026-02-20T20:13:39.608832Z","last_seen":"2026-04-22T17:40:08.71022Z","times_seen":132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/js/35.js","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"797182de951689b0be05c596fef478fa","sha1":"813d6e559c939e3583d6de55f01f47a8002faf4b","sha256":"ff867762576ea50d175184e56aad6a167224525f17d5fe7703fb000dbcfddd31","sha512":"c3bbd9f3657ae048c2c277e6c4237a22109263832feab4814ab1a6015316fd8f9b283fd91b9664510cec4f0d21f01226a08ca221334c17241275d2423a3b86b3","ssdeep":"384:5C4EOle4pTohtH5s782OVuawGNRJmNiP7gzpUzDftHdOsxSeCWi4G8NQ:5CjOle4pTohtH5s782OVDwGNRJmsEKz8","tlshash":"6162b5cdb2d2f46543e76671902f210be13a762ae9499440e719d8f1b8b848f9233f3d","size":14751,"data":"","first_seen":"2026-03-15T01:39:50.726093Z","last_seen":"2026-04-22T17:40:08.715107Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"352d3648988b945e9504a31ed09602dc","sha1":"dc1f5be397e07319ad2ab0d442d7e001007f32ae","sha256":"f3dac6a53cc607d0d002b8a84184ad95ba32fe5bb29dfe29c53b082f762def42","sha512":"e01436cfffdc3572e8893d3917519a8c1cb2d51ad8755fe646613c7c57c7ba643d23de8d0bb59c505ed508f90b8847fa551d2a8f1e2c81376fe87f771c372ec3","ssdeep":"","tlshash":"7bf0472c13045eff9fa581d17db339413d0e2e60d4d46d1556fa5f14d48450f7193153","size":627,"data":"","first_seen":"2026-04-22T11:07:07.937679Z","last_seen":"2026-04-22T11:07:07.937679Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/assets/js/widgets/hotel/overview/overview_4.js?id=771935d0bdaeb961d1e7b72a3f0632f9","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"771935d0bdaeb961d1e7b72a3f0632f9","sha1":"6cc5e9f61e70e43c392a779ee0c300e6ed712e93","sha256":"11f2884444290dae41023f77f721a72e9939d834481df5c3ded6a08a9084e8a6","sha512":"113d69b4f6bf89239c2b9025c579a0886c8b293d31d29908eeda55ac286f277cb1c719b0b1ee174f0c50abc31fe4832c15eb0d1354e95d0fabd8d0cbf8cec760","ssdeep":"96:29HqY4Lop+o9Hq9PZ07t1pI8jvgi7MqvBvysCmP0c79tn7:8H54LlCHSZWrEi7RBmE97","tlshash":"18a1855db391f0f542e7a0b5812f410bf234749aa08a90d0b665d8e0aef88ee4173f3d","size":5026,"data":"","first_seen":"2026-02-20T20:13:39.641148Z","last_seen":"2026-04-22T17:40:08.708545Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/js/3565.js","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"17f28cda0281a5d09779f310589a8848","sha1":"3c01c2acd6f97f8231f4048a270cf73a9f112aeb","sha256":"0c4fe7e0ead97381b5c977b3458d16d41337356b2a454b9c41ab485321eeb8dc","sha512":"1eb74ec546da361d94760edf4d7a24123f0fb6ddc2c5be30443aa34599b868c62885b1008ea0dded67362161ac401a3f87103d0001917beddad84b48e861b636","ssdeep":"","tlshash":"4841538836d5fdb51ae39155457fa24bf1392216683df004b316a8e0a87948f8172f27","size":2389,"data":"","first_seen":"2026-01-05T01:44:32.550902Z","last_seen":"2026-04-22T17:40:08.705865Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-22T11:06:35.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; Expires=Fri, 24-Apr-26 11:06:35 GMT; Max-Age=172800; Path=/; HttpOnly\nXSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; expires=Wed, 22-Apr-2026 13:06:35 GMT; Max-Age=7200; path=/; samesite=lax\nwp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; expires=Wed, 22-Apr-2026 13:06:35 GMT; Max-Age=7200; path=/; httponly; samesite=lax\ncur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; path=/; httponly; samesite=lax\nabt=435; expires=Tue, 16-Nov-2055 11:06:35 GMT; Max-Age=933120000; path=/; domain=.spahotel.guru; secure; httponly; samesite=lax\n_wsl=895ce494-a5f9-4878-910d-db18a0a0f98f; expires=Fri, 04-Apr-5434 05:41:35 GMT; Max-Age=107544479700; path=/; domain=.spahotel.guru; secure; httponly; samesite=lax\r\nx-request-id: 66ae6b3f-9b58-430d-9c5f-e7cd69a267e4\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130044,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (749)","md5":"11a671154ccbb7ba31553c8167c455cb","sha1":"8e64339dab9435aacc25fe3310f03b9cceafdd69","sha256":"3b4f397d6d3b60e060d960ce7da7106909615c0d7962bc727e460c369b443473","sha512":"7e58c55f6995647e47b1824adac51d1a309a47ec3a9246d5dd9d34ab8095390c0a984108fab0f48bf1fea167a06472ba7401be49bfd2d898401de51e29363a28","ssdeep":"3072:RhAEmvQWiAvJeAp9ajOSiZr6JbmfXyAAQ1iBpcTlFqgNhRAl1a15OC1E0mFEi0on:RhAEmvQWiAvJeAp9ajOSiZr6JbmfXyAy","tlshash":"18d3103163f821bb819bc9d5ba21556b6b72fa0fd6925501b3fc02852f8ae50dd13c3e","first_seen":"2026-04-22T11:07:07.905681Z","last_seen":"2026-04-22T11:07:07.905681Z","times_seen":1,"resource_available":true,"data":null}},"time_used":458,"timings":{"blocked":91,"dns":35,"connect":21,"send":0,"wait":276,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/themes/sydney/assets/styles/pages/hotel/hotel_4.css?id=9d5b77822c60eee912e28e52add4cfa4","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/themes/sydney/assets/styles/pages/hotel/hotel_4.css?id=9d5b77822c60eee912e28e52add4cfa4 HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Apr 2026 16:38:05 GMT\r\netag: W/\"69e7a7ed-1158\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: 557fd6ee-fe4b-407d-893a-dba9f5303976\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4440,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2714)","md5":"9d5b77822c60eee912e28e52add4cfa4","sha1":"94b8410f3db5b49bbf73dfa6eced1c4d304542b9","sha256":"082e1f643ec7985f6dd761ef0da30b140f46a7c4a5e1fa0909ae16abb14b4165","sha512":"fd8b1faef5aa6fae6dbb81de390e746595237aed01e9128a04fbd1f0923237ae36147ff503b04205d2a9e2defb5f85240aa8d0db62c3fe74ca1a4dc3848e8c23","ssdeep":"48:yS6bGavZeh5M9M7SWGBYbJHPJYM4uUuUR7sRVRFYKZM0DeHDiyn4MO/L/Q5/a/Q:yBbNxeHMe7SVe8HuUts74RL+uF","tlshash":"d2918673bf40203c64b3c952bc83257732266812cbea51d5db75e4a8f7852962fa1f6c","first_seen":"2026-04-21T20:06:55.435244Z","last_seen":"2026-04-22T17:40:08.694932Z","times_seen":19,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/themes/sydney/assets/styles/widgets/shared/form-info/form-info_2.css?id=850219f7408c0f3b8856c41e938764a4","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/themes/sydney/assets/styles/widgets/shared/form-info/form-info_2.css?id=850219f7408c0f3b8856c41e938764a4 HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: text/css\r\ncontent-length: 561\r\nlast-modified: Tue, 21 Apr 2026 16:38:05 GMT\r\netag: \"69e7a7ed-231\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-request-id: 026febe0-783a-48d5-b3f3-45ce7f475da3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":561,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (560)","md5":"850219f7408c0f3b8856c41e938764a4","sha1":"a483374b5791f8a3a0d6ff2cc4504a28753397c1","sha256":"93b9cb16202dac8b1f0c22ec3808e5feee12c96572e35390c9659022552be82f","sha512":"a292372839ce544b98b4f3f8980845d7fbce5777176e9c94364c3942e16a0a02588eb1c84bac4b2b4c9130264c8e89fc8f83ccc483f75d98d743c96fff3bc394","ssdeep":"","tlshash":"c0f081219615e11f7465ccd1b2cb7ea71495d90244548290c1e53878c3cb133b7b57bc","first_seen":"2026-02-20T20:13:39.624688Z","last_seen":"2026-04-22T17:40:08.710867Z","times_seen":131,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/themes/sydney/assets/css/widgets/hotel/exit-popup/exit-popup_1.css?id=0907212470226a9c87c956e162c33f9e","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/themes/sydney/assets/css/widgets/hotel/exit-popup/exit-popup_1.css?id=0907212470226a9c87c956e162c33f9e HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Apr 2026 16:38:05 GMT\r\netag: W/\"69e7a7ed-b85\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: b55e90e5-40f5-48b3-9fc4-a599cef39b3c\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2949,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2948)","md5":"0907212470226a9c87c956e162c33f9e","sha1":"fff49fd66770a6d4b1d18f9e3284ea5daa5023f2","sha256":"5fa317ffcf702c56b16f954f6e4c03d3dcb91717f285a8c2fcd131bb9bdeeeaa","sha512":"aeeacf629825e6e5bb91491dda24733d0e6179d8fb2a1819f8f001bf8124a7586f47c1fa24810c71b7fd59a2441aa36b2ca69c51c9f053b29461c2e9daf8a466","ssdeep":"","tlshash":"7951037252a5312dd46aecb1ed4081ef30e6fc0ceb176aba58441429cac51de86e8f7c","first_seen":"2025-09-26T18:24:17.255807Z","last_seen":"2026-04-22T17:40:08.705135Z","times_seen":171,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/assets/images/sprites/sprite-flags-round.svg","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/assets/images/sprites/sprite-flags-round.svg HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 21 Apr 2026 16:32:16 GMT\r\netag: W/\"69e7a690-10a5d2\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: c08bbd89-271e-4319-ad23-38d207a11c5c\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1091026,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f211c00435a42f83ad511d74feac6ac","sha1":"a2c4297da5437df6f93ebdbd70355f87b18b8436","sha256":"6712cf4de35cdbefeea655cd76cc021f54849f25dd0d657314c2eb811e221824","sha512":"1f5d97a4d34802c77d3b06fc5adc9c2f5627325fbe2ab22947568f6175d99e76d2a869880f7357fdd7bd87858d3347306a05a5501b8afe04a9c24a4808b8cf5a","ssdeep":"6144:tKJ8Bxx6dkfgOT02pVcTZrVaWiSO5/SPOdglSf8ERYJFJqeg:tJgroSOyFJqn","tlshash":"e82537c92068638ce44bb76d8bbffec0131f309a755145451bafc3aca50e685ff9a468","first_seen":"2026-02-20T20:13:39.643454Z","last_seen":"2026-04-22T17:40:08.681309Z","times_seen":79,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFRD-vYSZviVYUb_rj3ij__anPXDTnCjmHKM4nYO7KN_pqTXtHA-Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:36.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFRD-vYSZviVYUb_rj3ij__anPXDTnCjmHKM4nYO7KN_pqTXtHA-Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23076\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Apr 2026 19:21:23 GMT\r\nexpires: Mon, 19 Apr 2027 19:21:23 GMT\r\ncache-control: public, max-age=31536000\r\nage: 229513\r\nlast-modified: Wed, 10 Sep 2025 16:48:53 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23076,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23076, version 1.0","md5":"b8b0fd00d2ec6b93385f569f901e427d","sha1":"7565a24d2bd0dca8aaba631c58bf712263999f52","sha256":"8f074624e50ab805878b26ab5f3e0fa360043d546c35b043947e96a5c7071970","sha512":"c6ab8d125d40af43862622eee6e628bf59d9d5236a8729e67da00240e2bd9c9c65da63ddc6fcf68ba29c21f8cadaa4ae7fd254d3350ee245495aee7b9dde981e","ssdeep":"384:MjUz7q9HvyeMqWoetvxv4ERxmQN1Z3A4yAYAYx8Hmwi7xVBS9PvEjSO:2Uz7q9PybqyR4AxmQvZ3A6RDXi7xV49E","tlshash":"1ea2e080cbacd43cf4449a3139beb9b07b710e4954431d6d2ab26b90efe54c89e3c96d","first_seen":"2025-06-28T19:38:49.938295Z","last_seen":"2026-04-22T17:40:08.696461Z","times_seen":169,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":77,"dns":3,"connect":7,"send":0,"wait":10,"receive":4,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/themes/sydney/assets/styles/widgets/hotel/hero/hero_4.css?id=d78380fd23d8ab081dd38b62b8ec7e3d","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/themes/sydney/assets/styles/widgets/hotel/hero/hero_4.css?id=d78380fd23d8ab081dd38b62b8ec7e3d HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Apr 2026 16:38:05 GMT\r\netag: W/\"69e7a7ed-1125\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: 1d5029ae-c0fd-4d09-8730-2fc2e4e505b3\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4389,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4388)","md5":"d78380fd23d8ab081dd38b62b8ec7e3d","sha1":"f95da874b79f988a78fcc90314591e899d0ef6e6","sha256":"230a3f43f9317df97b541307f8cdd7b12c97cc090733a1db5b075979312b1358","sha512":"1f254054f61e8baa7daafd8cd1cd20da133cdfe42945a17297426278dbac4b1e4695b971305263bdcb42fb20c2ee2ab145e8a46597e9c0df6391e0aa2343b129","ssdeep":"96:Q7TnBjTtXLwlfmIlXXhYRux7h9GKE+TEd:Q7TBjTdLwlfmIlnhYRux7hQ1+Yd","tlshash":"2891f433ab44106ff176dc82ae4239a751ad6807dfaa53a5d7ac2498f3815433fa0f5c","first_seen":"2026-04-15T00:11:54.447206Z","last_seen":"2026-04-22T12:39:33.409632Z","times_seen":61,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/themes/sydney/assets/styles/widgets/shared/horizontal-form/horizontal-form_8.css?id=8f0cf1ac84f46c6172b9df226ace431a","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/themes/sydney/assets/styles/widgets/shared/horizontal-form/horizontal-form_8.css?id=8f0cf1ac84f46c6172b9df226ace431a HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Apr 2026 16:38:05 GMT\r\netag: W/\"69e7a7ed-2461\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: a179c535-7808-499a-af15-24e19ac730a5\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9313,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5124)","md5":"8f0cf1ac84f46c6172b9df226ace431a","sha1":"1d6229166a07b3a34b9aaa5113fbc4031afb98ae","sha256":"0ab7a5107d76bcd4624cb15016b6c0ce641459b1fb2b9ac5816a937e864b0b0f","sha512":"c12edce11469d45b5c66655f8fe6050fb7c26ac912aa93af5d72cfb36a70a9be827344db600f21ec6aefdbd740e34b1fa87ee76d61f1e016bb138b3af85cff4f","ssdeep":"96:JiYY6wHkjJ8oBEm2sRciyClLbARJFnHjZNdAFxL3Aqf6DUIPIa3:ngHlQZysCJFnDZTmlf6oIPj3","tlshash":"2e125532d651222ff02ec5ab7fc175da1079f411d92107acf6887a26d38d0b62967fc9","first_seen":"2026-01-05T01:44:32.531184Z","last_seen":"2026-04-22T12:39:33.389697Z","times_seen":74,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/themes/sydney/assets/css/app.css?id=6880bdb4d9574565c192da09cd3b4811","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/themes/sydney/assets/css/app.css?id=6880bdb4d9574565c192da09cd3b4811 HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: text/css\r\ncontent-length: 207\r\nlast-modified: Tue, 21 Apr 2026 16:38:05 GMT\r\netag: \"69e7a7ed-cf\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-request-id: d1347517-8a7d-4137-b218-c1002cfa3ce6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":207,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"6880bdb4d9574565c192da09cd3b4811","sha1":"9f347c4984435128a4aae1e9724bfb390e482675","sha256":"e9e9e1c0f8a46c17cf2b476b030fae4e235b537b680f0dcf2595cbd75940ebb3","sha512":"0e94b5eac2477f726070a7dd1a6d5cb0dd57a79550dd57f17551ba70901f66a4ffc3062a5fdd240a08f76bc9e8a3a4ecf98ad61e600035d4d22844b388842db3","ssdeep":"","tlshash":"37d01214f325a72b067b81cf74e5f71683885d8054950fc1b88223d433419597097bec","first_seen":"2026-04-17T13:27:57.664281Z","last_seen":"2026-04-22T17:40:08.686981Z","times_seen":116,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/js/main.js?id=6e5aa312ab285b6c3b94af7e15b162bf","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /js/main.js?id=6e5aa312ab285b6c3b94af7e15b162bf HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 21 Apr 2026 16:32:16 GMT\r\netag: W/\"69e7a690-77e40\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: 11358b60-efef-41ae-8991-b8dba1acc306\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":491072,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65278)","md5":"6e5aa312ab285b6c3b94af7e15b162bf","sha1":"715dd60e40854ea07ac8ef8ddc1f4e3f169efc79","sha256":"d02c5b499664bd56bb1ba1ee415c7678c8668dc2e2ea1c2eed5b4a6f52d3b274","sha512":"abb5f7a9a111f5e5a9b44714357c1ef28d8ea9ade390a863aa7de39c17788dbc49dee241a088a4dfe355ad20a94351179fbdf214a8677991af3d2e47b82073e7","ssdeep":"12288:RzP/3Xn+B7CckP5bYy+/RuFuW92B33kj52Va89LS:RzP/HnC7CckP5bYy+/RuFu133kj52VN+","tlshash":"f0a429da32d6b03253a716b550bb0106f3395e54740e8194f12ce8ee3d7a54aa2b7f3e","first_seen":"2025-12-04T18:42:36.57654Z","last_seen":"2026-04-22T17:40:08.70776Z","times_seen":144,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/js/35.js","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:36.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /js/35.js HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 21 Apr 2026 16:32:16 GMT\r\netag: W/\"69e7a690-399f\"\r\nexpires: Thu, 22 Apr 2027 11:06:36 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: 394f8d46-9bcf-4b8e-a1bc-b436a13f9763\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14751,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14660)","md5":"797182de951689b0be05c596fef478fa","sha1":"813d6e559c939e3583d6de55f01f47a8002faf4b","sha256":"ff867762576ea50d175184e56aad6a167224525f17d5fe7703fb000dbcfddd31","sha512":"c3bbd9f3657ae048c2c277e6c4237a22109263832feab4814ab1a6015316fd8f9b283fd91b9664510cec4f0d21f01226a08ca221334c17241275d2423a3b86b3","ssdeep":"384:5C4EOle4pTohtH5s782OVuawGNRJmNiP7gzpUzDftHdOsxSeCWi4G8NQ:5CjOle4pTohtH5s782OVDwGNRJmsEKz8","tlshash":"6162b5cdb2d2f46543e76671902f210be13a762ae9499440e719d8f1b8b848f9233f3d","first_seen":"2026-03-15T01:39:50.726093Z","last_seen":"2026-04-22T17:40:08.715107Z","times_seen":126,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/log/timing/","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:36.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"POST /log/timing/ HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nX-CSRF-TOKEN: Ew6FsOr7AeYolwnwQ7R1RWtMt3w0o6mYFpeukmEV\r\nContent-Type: application/json\r\nX-XSRF-TOKEN: eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0=\r\nContent-Length: 570\r\nOrigin: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":570,"data":"{\"timing\":{\"id\":1,\"uuid\":\"070dbda0-470c-4180-9bc3-5f7206959309\",\"r\":9599234,\"navigationStart\":0,\"unloadEventStart\":0,\"unloadEventEnd\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":48,\"domainLookupStart\":49,\"domainLookupEnd\":85,\"connectStart\":85,\"connectEnd\":141,\"secureConnectionStart\":110,\"requestStart\":141,\"responseStart\":418,\"responseEnd\":439,\"domLoading\":509,\"domInteractive\":1294,\"domContentLoadedEventStart\":1328,\"domContentLoadedEventEnd\":1332,\"domComplete\":1474,\"loadEventStart\":1474,\"loadEventEnd\":1474},\"s\":1,\"suuid\":\"070dbda0-470c-4180-9bc3-5f7206959309\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:36 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Inl1STdSdHNreHBrTHdGQ0Q3TytqSmc9PSIsInZhbHVlIjoiSkdiRXlDQjFNVUJ6OHd6M0ZSdHROZUZ0dXdnQllORlZXYTBIdVUrUnFFbkk1Rk5XT1l0SE5YbitDYzBaVkhhSFlmTmFKeHJLWlpUV3NUOGZvaG85dmRidnE2OUovZGFXamhMUjZGV2RaZUJVclhsSXdlZ01YRlJySG1oYWFBa1IiLCJtYWMiOiI0M2ZhZjZjOTJmYWM5MDBjMDY0MTJiMmEzMzhhZjY4NTQ1NzJkY2Y3Y2JmYTE5MTEzZDMyNzRhMzEzYzM2YWY3IiwidGFnIjoiIn0%3D; expires=Wed, 22-Apr-2026 13:06:36 GMT; Max-Age=7200; path=/; samesite=lax\nwp_session=eyJpdiI6Ikczb0VuQ0ZxTFpIOXlVWU9SeTIxc1E9PSIsInZhbHVlIjoiNC80YWMvNG9CZkJkYWFNRUlZc2VCekFxbGlvc1pLMHJhVHZJd1BMMnc5MVc2RTcralB6QjdiQ1VFQi9MR1pHNFB5M09KNjY3ZHZ0ZG9OTHRzUzM2N3F1eHVpSExzZnAzVENneWJQK2dtTDZES0Z3V2MwMURORjFmWnU0bk0zQkciLCJtYWMiOiI3Y2QxM2I4NzU0MDk2NWJlMDFlYTVhMDM0ZmFiM2NiMWVhMWY3NTIwNjY1MWQ1NTRhMTE4ODg1NDg0OGRhZTQxIiwidGFnIjoiIn0%3D; expires=Wed, 22-Apr-2026 13:06:36 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nx-request-id: aa64c957-caca-4643-affb-2639177018bb\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-04-22T18:09:47.6424Z","times_seen":123078,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/assets/js/pages/hotel/hotel_4.js?id=b73920d62e3707bb23c70ce8853bf766","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/assets/js/pages/hotel/hotel_4.js?id=b73920d62e3707bb23c70ce8853bf766 HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 21 Apr 2026 16:32:16 GMT\r\netag: W/\"69e7a690-335b9\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: 693e656e-a36c-41b1-96aa-f2895c0c7de1\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":210361,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65470)","md5":"b73920d62e3707bb23c70ce8853bf766","sha1":"c8fec02977a1f09074a377ccbd2ec695a586e9c4","sha256":"611b5ea8e572eea9e04f48561c8106d1ad450e37ab0e41b27da832e3acf8821b","sha512":"2a59f1d62f9ee294e33618a75257fb920b8c828abd192d660e823266ccde7ab612c1d1f568111ff459d145c414cf5745ed3f6f56ba2105f4285bf41852e0dc93","ssdeep":"3072:wMvME4nrvUjQYbegUwAOcr06dzG2rQK0sDAsp3:wMvME4rvc1cr06dzG2rQK0sDAsh","tlshash":"b2244b8a71a1703353e7607640bf010af3355a65688a80d0f219e5f1adf5e8e72bbf79","first_seen":"2026-04-17T13:27:57.693624Z","last_seen":"2026-04-22T17:40:08.712996Z","times_seen":115,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/assets/js/widgets/shared/header/header_8.js?id=7a44365350dc68a8409edf1be16baf4d","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/assets/js/widgets/shared/header/header_8.js?id=7a44365350dc68a8409edf1be16baf4d HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 21 Apr 2026 16:32:16 GMT\r\netag: W/\"69e7a690-28b9\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: d8e6de57-b4b1-4337-8b3d-eee0d7a16505\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10425,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10388)","md5":"7a44365350dc68a8409edf1be16baf4d","sha1":"37c871159072f9cb5603e88e8208fc3377ef8591","sha256":"2b5e654f19e885514cff75aa483483b2c7f93b7037018ef89b2ba3fb2e011774","sha512":"747d7f0162430fe2ec481e06fefbe9107133058041bc55baa863136736da8ac9d4701905017c9577f2f704277b62a349c2ced9df8bcb89e75f56f3dd50793ba0","ssdeep":"192:8H54LlCHSZJBEi8UBmEQHGcCpgsKERyqpSHf:Vxh4jCaoU/","tlshash":"18225699f391f4b145e7a171402f410bf229745aa09a90d4f665d8f0adf84ee42b3f3d","first_seen":"2025-11-27T01:58:12.063949Z","last_seen":"2026-04-22T17:40:08.713672Z","times_seen":136,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/assets/js/widgets/hotel/location/location_1.js?id=453cb3aaed069d4b4715d8cc191ebc90","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/assets/js/widgets/hotel/location/location_1.js?id=453cb3aaed069d4b4715d8cc191ebc90 HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 21 Apr 2026 16:32:16 GMT\r\netag: W/\"69e7a690-d0598\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: 2d321a60-d698-4185-8d1f-a98e0abe36a9\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":853400,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"453cb3aaed069d4b4715d8cc191ebc90","sha1":"8db6a479ecefdbef3dbe500e6f43a3a1f451f14f","sha256":"89fce5bd438379fdfbbb3633f3813f9190263f3a19ab7517975777158c4b4352","sha512":"7f627239564a400ed638a7d47e74e068766a908e552710e6955fd3bdc42b2eed0222465ec4751c2d636ed7be7aac31606e47bc0751e1b1b9420f785b47af2906","ssdeep":"6144:xhNxVaM6TQ6hGXcJ7espTXD14HAKUZopbQXeCVv1vgz0axGMzdotWrcL2ygjFcX1:xBcM6OspTXS3bo1vgz0a9bi1","tlshash":"660519a9b25564268283a091447f014bf33f94a9e44980dcf62dc5fe9dfe949633bf38","first_seen":"2025-11-14T23:16:05.352881Z","last_seen":"2026-04-22T17:40:08.688728Z","times_seen":138,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/js/2382.js","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:36.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /js/2382.js HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 21 Apr 2026 16:32:16 GMT\r\netag: W/\"69e7a690-238c\"\r\nexpires: Thu, 22 Apr 2027 11:06:36 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: 09616019-0ff5-4a5a-a4c9-cd6087784857\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9100,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9005)","md5":"8c3d4ce5a7dbad2244b2a5bce5c3f70c","sha1":"861801f1b3844a3b6bad02ab259ad50d4f3fbfa8","sha256":"fe04395eae260984704caa2a65e27b444c10092800fc9d0dbffc00e3926c663e","sha512":"863d75ab6526cbd9a0efa8e684ed22797a4e95fc6d6f1026eafeacdf410e7ad10187ab96b64ee7293f08718fe9ffb31522c066a23fbbe926db8599308cb8d478","ssdeep":"192:oH4hUyTSl5q62Naey9C16qN8qNt2iq4iqfr46f3biTxHmxvRvX59:0xG6OL8CNt2iys86/bWoxvF","tlshash":"b51293cc72c6f56943977621902f100bf23e6966b85a9044e728e8f1bcb449e9327f7d","first_seen":"2026-02-20T20:13:39.608832Z","last_seen":"2026-04-22T17:40:08.71022Z","times_seen":132,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/js/6926.js","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:36.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /js/6926.js HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 21 Apr 2026 16:32:16 GMT\r\netag: W/\"69e7a690-42f3\"\r\nexpires: Thu, 22 Apr 2027 11:06:36 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: 1f9feadd-90c9-484b-9e52-aa1dd0c62a92\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17139,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17106)","md5":"8f73ecedf881aee7c52dd783686050c9","sha1":"55a98ba197efef63995f963d639fd9e9b915f920","sha256":"76433c53b147676dc035a2c516ac50e104c6ce9b025e47593713e38a0537ed40","sha512":"32e6208925273b092b681db4e3c8877e5d2cb002ae9fcea3475a20e4cf709cc4ce66525ce154fae792e60598fc1f381b10465c753d029fea09d32f31de40e7fb","ssdeep":"192:RHUQCp/nCi9DQazJSEfHVjD2ULPuWRseKFEN8aHRnYKcfSHvXAZdYXp:FCIGjoS72KvAK","tlshash":"81729488f392f0b506e7a171812f020bf229755a609e90d4e625d8f46db89df5273f3d","first_seen":"2026-04-15T00:11:54.481153Z","last_seen":"2026-04-22T17:40:08.715826Z","times_seen":120,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/themes/sydney/assets/styles/widgets/hotel/reviews/reviews_4.css?id=1570e992bf1c134b6289c7851aa49563","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/themes/sydney/assets/styles/widgets/hotel/reviews/reviews_4.css?id=1570e992bf1c134b6289c7851aa49563 HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Apr 2026 16:38:05 GMT\r\netag: W/\"69e7a7ed-2583\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: dca69d0a-c192-476b-9ea8-1fd13648d68d\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9603,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5142)","md5":"1570e992bf1c134b6289c7851aa49563","sha1":"d8be092e133af64524e177f1eafe6cf2814dcfdb","sha256":"f2545dee3194b4240f3f1b7a2ac9718f2c08d5a0e2378fe03a025d6399fb9347","sha512":"f397d6008966f065ea480b70a31756b0b64ff0f09422d291899d320763511ce9b37e7bceb9b69087495226cf96cb4aa6adbda8d58419b9d587f360c1da7f5dbd","ssdeep":"96:SArGTRJBv1I6l7YdI6JnYIWcOE8uvmQCeF61yoASWSx9uaE/EbMgr2:S2GTR3v1zsfufguUFLoASxHc0Mgr2","tlshash":"26129fa96710202663278d330a725bb6d574988147d38e7e91d0fcc4d2b7c7e276b67c","first_seen":"2026-04-21T20:06:55.448066Z","last_seen":"2026-04-22T17:40:08.677579Z","times_seen":19,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/assets/js/widgets/hotel/reviews/reviews_4.js?id=97b62d949217b4bb005c21afa7b7a138","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/assets/js/widgets/hotel/reviews/reviews_4.js?id=97b62d949217b4bb005c21afa7b7a138 HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 21 Apr 2026 16:32:16 GMT\r\netag: W/\"69e7a690-4b22\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: fa1600ff-743a-4e3b-bc45-6621f7ca1096\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19234,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19129)","md5":"97b62d949217b4bb005c21afa7b7a138","sha1":"a829f0c9cc5344ab8be0d154f9a82f4764ec0a7c","sha256":"13b5b6f477cd2a90756bd047b17f423d6e1a3cee291338a8ff66fc380900b0e6","sha512":"15818309ab3e65bd01be68646140347d5492936825f1a41cfc2d9d89d57d053b21611890a46bf05b197d0288bcf3b07aa1e6fbf72d0f2bc898cc81392c879d32","ssdeep":"192:/DO9dvC5JHJtH5TdHh1+5FxHKW3XCMPyH6qIR2pmh6fQZKcSopFqNBqft2aqQd0U:/DKYNzAUGao0o3dft2aMexA2RZ999","tlshash":"7582a68cb7d6f07903a36572812f414bf23a385ab45a9054e615d8e1bcb88de9233f79","first_seen":"2026-04-21T20:06:55.452131Z","last_seen":"2026-04-22T17:40:08.695691Z","times_seen":19,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/assets/js/widgets/shared/footer/footer_1.js?id=37fe4c328ed05840b464d2092baa2a67","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/assets/js/widgets/shared/footer/footer_1.js?id=37fe4c328ed05840b464d2092baa2a67 HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 611\r\nlast-modified: Tue, 21 Apr 2026 16:32:16 GMT\r\netag: \"69e7a690-263\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-request-id: e115454f-277e-4acb-8312-33f5f209952b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":611,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (574)","md5":"37fe4c328ed05840b464d2092baa2a67","sha1":"aa1829c0f6b853579c102e75cb3136909f97423e","sha256":"721b88f911a9bff6d502174cf51864dd92f2e38bf331430d03e6789511aa4a61","sha512":"6e84400342f1fd87b72cb752cb6bef94c3abfe6b444c8d2051c02e40b009bbcd9dd527c23a6a115d406ece43f440f132dd92b846c102857726cb9ed5e3e55788","ssdeep":"","tlshash":"60f0a2acf3a970b346437024447fa34b917f79a044aea414541176e06e3ce0fe5b3c66","first_seen":"2025-01-25T21:28:42.429663Z","last_seen":"2026-04-22T17:40:08.709472Z","times_seen":432,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/assets/js/widgets/shared/lang-currency-select/lang-currency-select_1.js?id=9cfbb6b74a782932871e3607576d7811","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/assets/js/widgets/shared/lang-currency-select/lang-currency-select_1.js?id=9cfbb6b74a782932871e3607576d7811 HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 21 Apr 2026 16:32:16 GMT\r\netag: W/\"69e7a690-3a92\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: d6ab9b11-e077-4aa2-88ba-47f6bf659e1d\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14994,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14943)","md5":"9cfbb6b74a782932871e3607576d7811","sha1":"64ee0f44ebddc791f9a314809d211614f4983a2b","sha256":"8d31760abfc6d7bbe65ed9ad40c12a13bb960b1b9ff54b8da88746a3dd877e8c","sha512":"b28f2e4b96418dbb6ac1af5e5dfabfe1ed6f2ad972d767a1c9085436441206de962b0ac51b1c4e56f3cdb2a09bf0a4123d22c223cd19bd6fb2a2304bbb55ed44","ssdeep":"192:8H54LlME7HRZaERi7RBatHFECpR54VhQp9TSdGMHVICpwoCQI/LhBfiHncVF:VxHa+zECr3CSC6xQu9","tlshash":"af62568cb7a1f0b146e7a171402f450bf239796aa05e90d0e655d8f0adf84ee42b3f39","first_seen":"2025-11-27T01:58:12.094622Z","last_seen":"2026-04-22T17:40:08.690478Z","times_seen":136,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/js/63.js","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:36.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /js/63.js HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 21 Apr 2026 16:32:16 GMT\r\netag: W/\"69e7a690-910\"\r\nexpires: Thu, 22 Apr 2027 11:06:36 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: 6266d8c2-9128-4d0a-abfc-667932b83053\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2320,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2289)","md5":"decc401737ae57930863363b3ee2777e","sha1":"3166c7147830ebf24663f234c2486a8322b491dc","sha256":"50a7f4719e74348bbc8f8186e724ad4c7e5f75386f1be5138ef88653943da069","sha512":"95b312c723a927229b04ef40c415e8b43752b9c3e4774f879bdf62b5eba3a5a736732695e4d1dd5b84b336f9eb3c4817aa1b96d36b71bc342adc5d0d596cc82b","ssdeep":"","tlshash":"7641838836d6fdb109eb5251057fa24bf1381652683ef004f316a9e099b88cf45b1f37","first_seen":"2024-12-27T17:59:18.085122Z","last_seen":"2026-04-22T17:40:08.697529Z","times_seen":392,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/js/4067.js","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:36.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /js/4067.js HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 21 Apr 2026 16:32:16 GMT\r\netag: W/\"69e7a690-7a3c\"\r\nexpires: Thu, 22 Apr 2027 11:06:36 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: a2d58411-65dc-4fe1-85db-d8d9c71804a2\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31292,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31259)","md5":"66fdf579813f5b27faa84ed6548a3860","sha1":"436bf379c8ddac61aedee57c629b332a0c40cbb4","sha256":"24bb956159a0a8a9b7226ef5ec2847c69b619f9d995b9cefd3f72a9b84f9c96c","sha512":"565ce621f2b0cd3b96e01884b4dc90422a08cc68935eadf40f4dff5304a0844640d129a3c54d7d43fc52ef1f595027a465a5426edaa794a5e6072a02688a2db8","ssdeep":"768:cNDd6OkI1XySiprXJYEiuSSQGvEqnjyHOcd8EmdHdLHGCtw5S+EXEQVzexO6s:cNR6OkI1XySiprXKEixSJvEqjKOcdXmH","tlshash":"59e2176a7724353891cf149fa05fdb4e333540a2bc1b2446d51ec8e5bcb6c6a06a7f8d","first_seen":"2025-09-16T18:18:33.249978Z","last_seen":"2026-04-22T17:40:08.698071Z","times_seen":340,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spahotel.guru/favicon.ico","fqdn":"spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:36.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: _b=1776855998.213.123218.532904|3c861b5abca4655c3a6dd5dcfc9539c6; Expires=Fri, 24-Apr-26 11:06:37 GMT; Max-Age=172800; Path=/; HttpOnly\nXSRF-TOKEN=eyJpdiI6IkpESnNqKytOaHQwSmQzbXozTXhqcVE9PSIsInZhbHVlIjoic01Kd1A1eEZQYXZsckh2OUYvQXBqamFEeVRrVUZLczdPdGxvRVlXUDV1cUw2NTZTNHpnQ0hYSmpIbUU2UHhOMjdhNXU3OHhhQllDb2c3aWRCa3M3d2NTc1lxS2NWQVp1VWpYU0c3bFBxQnlSVXF4NzZOemxzTTlmVTBibVJhY0ciLCJtYWMiOiI0NmE5NmEzMzY2YmMyZDVmZWVkNDFmZGQ5MjU2NWMyZDllNjVhMjc3M2FmY2Y2ZGIwYjAyZmI0ODFlMTJlNmJlIiwidGFnIjoiIn0%3D; expires=Wed, 22-Apr-2026 13:06:37 GMT; Max-Age=7200; path=/; samesite=lax\nwp_session=eyJpdiI6ImRlOGNsNGpWUjBTR3JkaFF0a0wrc0E9PSIsInZhbHVlIjoiT3Z0bis4T2lUQ1IrTXNuaTVwTTdpaDA2V3RaTVhXMmtudWVQQkxjL1l0WGtTN3EzSkY4RUdBS0tkaGtQYmQ1MWFxcWNjN1FlYUdsL1M0RFVJWmNFcWJQUVIvS21SaTdKT253R29yKzNLMHpERURDc1FOcERDcjEwdjlzOGVuT3QiLCJtYWMiOiJmY2ZhYTUxYTEzMmNiMGFiOWI2NzI5NTg4ZGRhNjI3ZjliZDMzNjJhMjU3YWQzYzE0OTU5NWJiYzhjOGQ2NTQ5IiwidGFnIjoiIn0%3D; expires=Wed, 22-Apr-2026 13:06:37 GMT; Max-Age=7200; path=/; httponly; samesite=lax\ncur_id=eyJpdiI6InlueFVFSUNaZ3VPWlRIYlo2LzNteUE9PSIsInZhbHVlIjoiUjcrUkdaVTZ0OXc3bDY2aUh1OHliZDd5R0REdEFNQ2RxejVlWTZyRHVheXhiZVBkanQ3aWpiTEFDQUZqaGY2VSIsIm1hYyI6IjViZWFmMTQwZDA0YWE0NTg0M2M4ODRkNTcwMzRmYzViYzUzMmMyZjYxZTg2YmJhMTM4NmMxNzU3Mzk3N2ZlZjUiLCJ0YWciOiIifQ%3D%3D; path=/; httponly; samesite=lax\nabt=435; expires=Tue, 16-Nov-2055 11:06:37 GMT; Max-Age=933120000; path=/; domain=.spahotel.guru; secure; httponly; samesite=lax\r\nx-request-id: 08dbb152-5eac-4305-ab1b-a1a8af1e1b91\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T18:09:28.300102Z","times_seen":14071331,"resource_available":true,"data":null}},"time_used":647,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":645,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Mona+Sans:ital,wght@0,200..900;1,200..900\u0026family=Playfair+Display:ital,wght@0,500;1,500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:9D:A0:A4:A4:3B:62:A3:D0:B3:63:4B:5B:C3:1D:9B:09:43:3C:91","sha256":"DB:10:40:08:19:EF:D7:9C:5F:11:BC:78:DC:9F:81:F3:9E:A7:30:2F:1F:06:C8:C4:A4:DD:BC:C3:27:6F:2A:AA"}}},"request":{"raw":"GET /css2?family=Mona+Sans:ital,wght@0,200..900;1,200..900\u0026family=Playfair+Display:ital,wght@0,500;1,500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 22 Apr 2026 11:06:35 GMT\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6235,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"bed161fb068fe3f430ebdcac4c2d8af5","sha1":"17109c6986976ae28e408e36c5fe3a57dc0533e1","sha256":"6e352ad114069a590e6f14367debefea727bef9cbf4100df5ff89eb589f5d523","sha512":"d6fe9ec644447ac6d5de5a59952eae04a1a44fb605a2c4f754e6d686a6e1cd54fcfe8ef489237c56c13553e8bdc310fe51f9ec6ec6ea640239c16d0c97f1ff3b","ssdeep":"192:civwvgabvZL4prMGJNK29uMNK29LNK29DXNK29agu2sp7u2Mu2G2u2k:ciI5hqJM29uMM29LM29TM29a32M62b2G","tlshash":"6fd1ffa1056ba644aa435cc227cfbf369d9f61603081d67c6ffd1888ac9bd269364b0d","first_seen":"2025-09-26T18:24:17.569339Z","last_seen":"2026-04-22T17:40:08.699164Z","times_seen":172,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":175,"dns":1,"connect":14,"send":0,"wait":34,"receive":0,"ssl":176},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/themes/sydney/assets/styles/widgets/shared/relinking-with-title/relinking-with-title_1.css?id=af8088b9148771af61a865c98f2c15d1","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/themes/sydney/assets/styles/widgets/shared/relinking-with-title/relinking-with-title_1.css?id=af8088b9148771af61a865c98f2c15d1 HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: text/css\r\ncontent-length: 547\r\nlast-modified: Tue, 21 Apr 2026 16:38:05 GMT\r\netag: \"69e7a7ed-223\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-request-id: 5ef68966-0440-49c2-b404-ad93228d0ca7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":547,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (546)","md5":"af8088b9148771af61a865c98f2c15d1","sha1":"ac93c60d5e6fe6c4e8028f76c45de86b6a9aec2c","sha256":"43f7243b6ee53eaaa78fd0392e3c6c3d1233b0beb9c218ecd8a087ac49f84241","sha512":"2653fe5e3c512ae504a6b8db10d7237585c314bdd561b46ccdf5e650c3aba9c92c1acf1647c59d9a39100042c70386627d6e33369de4f8e6f013dfb88c114775","ssdeep":"","tlshash":"c4f04c722691e11cc1e4a896d0c4a1b53162ac06990913d0bf846550f9841ae2ffaf29","first_seen":"2025-09-26T18:24:17.552877Z","last_seen":"2026-04-22T17:40:08.704293Z","times_seen":165,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/themes/sydney/assets/styles/widgets/shared/lang-currency-select/lang-currency-select_1.css?id=9c40cc6e4ea8373fd85a1d1a112322a4","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/themes/sydney/assets/styles/widgets/shared/lang-currency-select/lang-currency-select_1.css?id=9c40cc6e4ea8373fd85a1d1a112322a4 HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Apr 2026 16:38:05 GMT\r\netag: W/\"69e7a7ed-1158\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: 9711b478-9f07-459b-a35d-2e900c176024\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4440,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4439)","md5":"9c40cc6e4ea8373fd85a1d1a112322a4","sha1":"ada0416a24be808e5e0d387766435f8101e43d42","sha256":"9d43510dd817d683e4d212b3bff069f6e205851c3f88e4ec3d16a87f2104923c","sha512":"210ee4b6121b3c5750851040a5072bf13356e60c7ce2ae5856c6799c5c938e4182fbc6778445d7a1f972bd8e5f76aa02bdebf611e9a4f9f64405cc18ff5b2539","ssdeep":"96:IRIv5eCaR2MJgbIeJsDsufmIJCLIyeurwrMr26fmhgT/GOeMgvoxh:IRGvAT0xzD","tlshash":"e691f021067c2338e4bed477be40297b2136e50ee1377ec9aaac96519f483415831faf","first_seen":"2025-11-27T01:58:12.048695Z","last_seen":"2026-04-22T17:40:08.711552Z","times_seen":135,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/assets/js/widgets/shared/relinking-slider/relinking-slider_4.js?id=8418a07f103c99bc3135a2ebb30817b9","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/assets/js/widgets/shared/relinking-slider/relinking-slider_4.js?id=8418a07f103c99bc3135a2ebb30817b9 HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 21 Apr 2026 16:32:16 GMT\r\netag: W/\"69e7a690-2d1c4\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: 59cd8881-da08-48f6-8257-053bd459508f\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":184772,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8418a07f103c99bc3135a2ebb30817b9","sha1":"ea4592acb3ecf0106db6651e1833c0899c840056","sha256":"c6c9273a6eca024ff45f8e725ab99648eb5d33fabc0827cd42f2d702a6aeabd2","sha512":"6d913ba0cd8be053e2ad91f6baf6724f60a4cef32612b4533973c782caede798dab50e3f469f9786e86b7c3ab405bc3960f709217be6eeb6c686a0c1534b3634","ssdeep":"3072:8MxKfmWWWCve9cqBxsP3hi76HeyDW5gbgS:8MxemWNCv2c73ChyDW5I","tlshash":"1004e8996320757646e71a9b93e4c261a3b44440b40ac4e870e94c9fd97ecac13ffef9","first_seen":"2026-02-20T20:13:39.635828Z","last_seen":"2026-04-22T17:40:08.714375Z","times_seen":131,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/monasans/v4/o-0bIpQmx24alC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:36.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/monasans/v4/o-0bIpQmx24alC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39512\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 04:23:30 GMT\r\nexpires: Sun, 18 Apr 2027 04:23:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 369786\r\nlast-modified: Thu, 04 Sep 2025 17:23:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39512,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39512, version 1.0","md5":"df50293fe89b7f4490a8447d730ae6a3","sha1":"ecac76ffba8c5589cd8946a16ae395fb56b38c74","sha256":"e1b6c4ff93709d7697f2f1df4447a052726b8691011bcacde1c7c800e4330880","sha512":"c1db3700e3dd384ce9ecfc0112616b2d017193929c3517cfbb2b3162b8c2a188fb6480baddac2e699e15620be5815acb748f4765a58d8f0759b1780566c73693","ssdeep":"768:uH5/MHMji5jo4xjWbPsFPc0yqeZqbmw1+9TVAtg1d+ipyavB+:u9MsIjBxyQF0XZje+95kan9+","tlshash":"9603f1c9a6a477d1c3c39d1cd21aca3296ab98b35ff6015b8e7d4012fcad127493a825","first_seen":"2025-06-19T17:07:21.488681Z","last_seen":"2026-04-22T17:40:08.696979Z","times_seen":373,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":151,"dns":0,"connect":0,"send":0,"wait":8,"receive":9,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/img-folder/images/1920x1080w/14986/1498625/1498625557.JPEG","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:36.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /img-folder/images/1920x1080w/14986/1498625/1498625557.JPEG HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 44478\r\ncache-control: max-age=31536000\r\ncontent-disposition: inline; filename=\"1498625557.webp\"\r\ncontent-security-policy: script-src 'none'\r\nexpires: Thu, 22 Apr 2027 11:06:36 GMT\r\nage: 352674\r\nlast-modified: Sat, 18 Apr 2026 09:08:42 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-request-id: b542b0b9-f661-490d-82b2-795791e5c94c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44478,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5325a2c092653df454a2aa14eb8ef0b2","sha1":"1deade0d0f054b4478420a83ab574dd72d044ea2","sha256":"0915fa5de7af65826bcffe7a32b09792adff7fb8a33aa977fada5180eee78b4b","sha512":"5f7c870b69f0e852add6a5fec19ea085f9e6ca10c030c8a788fe203dee1bf9490403ea9a72152a0b7d0dac6d9a50d910791bc2b4e51b5cecdf311326e8b0a7dc","ssdeep":"768:OO3qHf1Zwwp6vwD/8JmPKwuIWTTjcjsusXDXYTnVpbdzw/i0ZdWZY+i80VrBKxc:33qHNZBKwD/8AW3icTAVjmixA8In","tlshash":"ef1301784a2e2ca3ce25ebaddb2955e93ea3972cceb353840b151df14c5356ea447c0c","first_seen":"2026-04-22T11:07:07.928331Z","last_seen":"2026-04-22T11:07:07.928331Z","times_seen":1,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/js/5387.js","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:36.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /js/5387.js HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 21 Apr 2026 16:32:16 GMT\r\netag: W/\"69e7a690-4d6\"\r\nexpires: Thu, 22 Apr 2027 11:06:36 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: d7be2d2a-8dfa-4986-8cf4-c2af3078c821\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1205)","md5":"c02f52e895f2243a8771b397f88cadb6","sha1":"de40c857ba5894e9180aa574802db3849fa425a2","sha256":"76eb492b0c7420d3d155f04c193c4a734dac9c9f3dfe460e5d60d6ac49c31a24","sha512":"0312548e30aed98ce1ec7662e68a1df9983db0e49f961e37cc0cfdce3f9f856050c28f930049cbc7a03f8b8d9d0a2eee7034d0f62ced59fb8b676605354d7cca","ssdeep":"","tlshash":"e821779af2d970f147671412c16f93ebd6fdb1506057d840bd2802f41a38d2bb057d6b","first_seen":"2026-04-17T13:27:57.686881Z","last_seen":"2026-04-22T17:40:08.700837Z","times_seen":115,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/themes/sydney/assets/styles/widgets/shared/header/header_8.css?id=9969cd7c47e7978b4c6fee191aa982a5","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/themes/sydney/assets/styles/widgets/shared/header/header_8.css?id=9969cd7c47e7978b4c6fee191aa982a5 HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Apr 2026 16:38:05 GMT\r\netag: W/\"69e7a7ed-75b\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: 88596a1a-52df-48ad-8433-642a2f9450d0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1883,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1882)","md5":"9969cd7c47e7978b4c6fee191aa982a5","sha1":"caf3cc1d97fd74575d9a7cb701402a7cd352eb1f","sha256":"120d231b4ed11319fb45edfe2ed751d365966ec0999e504ccd98047c9bd54b42","sha512":"9d58de92970bbd8180785e84508cd6ba4082d07cf85e0de2e575fdcb0a1f09ab82e271e16ae058011987604dd6f9ae69aafbe474085b78c39bea1e2880ec3810","ssdeep":"","tlshash":"dd41ebf1839534183477c94bd8809a6e013be801ae261b7de369217ebbc654293e6f9c","first_seen":"2026-02-20T20:13:39.639571Z","last_seen":"2026-04-22T17:40:08.683756Z","times_seen":133,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/themes/sydney/assets/styles/widgets/hotel/overview/overview_4.css?id=0c09cc6aca11d66848451f114231994f","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/themes/sydney/assets/styles/widgets/hotel/overview/overview_4.css?id=0c09cc6aca11d66848451f114231994f HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Apr 2026 16:38:05 GMT\r\netag: W/\"69e7a7ed-860\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: 473723e7-a2d4-4c1a-990f-fad81ab58f2b\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2144,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2143)","md5":"0c09cc6aca11d66848451f114231994f","sha1":"2167a2dd3a5ffed40964a87ae9ff682d507d9f11","sha256":"69a4858e5094b12a3d05882e6c2d49515c2e58e460cb81a1d06464c7570d5f63","sha512":"4a4148d8676d627ddc04c0dbd142ffc1de862cdb1acbb111c0486fe927a0b6be4ec2003a8303f87659a97ee08771c3b1102bc659c725718ef7c1b52ed6cde9da","ssdeep":"","tlshash":"d3417633ab00513d7256cd957a422a63b722b902c6d69288ffb530d4f68f0a71a10b9c","first_seen":"2026-04-15T00:11:54.448634Z","last_seen":"2026-04-22T17:40:08.706799Z","times_seen":120,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/themes/sydney/assets/css/widgets/hotel/amenities/amenities_1.css?id=905c982b53258425fcb8f6f0fe34a2a3","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/themes/sydney/assets/css/widgets/hotel/amenities/amenities_1.css?id=905c982b53258425fcb8f6f0fe34a2a3 HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: text/css\r\ncontent-length: 844\r\nlast-modified: Tue, 21 Apr 2026 16:38:05 GMT\r\netag: \"69e7a7ed-34c\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-request-id: 7702321d-6634-45f4-b8a2-c9ed36bfa828\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":844,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (843)","md5":"905c982b53258425fcb8f6f0fe34a2a3","sha1":"8207ae348b5d3f0f70d7e5c714f5d55d27682ab7","sha256":"269f6037eac8ff1447ee9d8f8c5fbe1faabb3ad25f092ac7b726ba265e4a0526","sha512":"1ae58e3d549e8d86f32c228a08300fa15df635da444d3bb1e94aaacb39fa4f8f8c01c10e6148795f950e7088534c795b0c51e3ec9ef306045ed26568fda480f1","ssdeep":"","tlshash":"b0010273fb51913a60a7d41e9d8150262721fc179fe917f2ae14c069f3c82910a1af69","first_seen":"2025-09-26T18:24:17.558095Z","last_seen":"2026-04-22T17:40:08.703695Z","times_seen":165,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/themes/sydney/assets/styles/widgets/shared/relinking-slider/relinking-slider_4.css?id=ad2df07f0165541f408f27fc457fed6a","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/themes/sydney/assets/styles/widgets/shared/relinking-slider/relinking-slider_4.css?id=ad2df07f0165541f408f27fc457fed6a HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Apr 2026 16:38:05 GMT\r\netag: W/\"69e7a7ed-ebc\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: 702a64b5-743a-4653-acea-143a09fd94c2\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3772,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3771)","md5":"ad2df07f0165541f408f27fc457fed6a","sha1":"5a0989300c4fa8fa965705d07b3b7a72a556f9bc","sha256":"f5dc9c08604e3971243bd9d5d0c5698243c9a20ef16ea72d3a76a7fe96a02eec","sha512":"78cb59280ee7299988c38043f0647df027bcc7db5b43c0bb46faefc6a7b8ef5eeb412f51936469b97a54434a053e349bae0d248f090aa6c2df6b1ef7f7996f92","ssdeep":"","tlshash":"8371ba309306280e7665eed25244adeff5badd0bc5812354dacd266cdd860db2a33bdc","first_seen":"2026-02-20T20:13:39.579705Z","last_seen":"2026-04-22T17:40:08.684706Z","times_seen":131,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/themes/sydney/assets/styles/widgets/shared/footer/footer_8.css?id=caf927e99cd6fc0869a80f4a10451ba5","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/themes/sydney/assets/styles/widgets/shared/footer/footer_8.css?id=caf927e99cd6fc0869a80f4a10451ba5 HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: text/css\r\ncontent-length: 967\r\nlast-modified: Tue, 21 Apr 2026 16:38:05 GMT\r\netag: \"69e7a7ed-3c7\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-request-id: c1c7bc42-34eb-4d88-9356-245b02e0b151\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":967,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (966)","md5":"caf927e99cd6fc0869a80f4a10451ba5","sha1":"6ea47314ab69ad323f03fe5a73ac258c24d1d15f","sha256":"cfc6511361aa40ef9febba63a8754bfb7f5592e869e65975aae648f47b75cd6a","sha512":"01de17a8a2adb3888c5b30603c845f648938fa73399d734f84120789757ab44c07609a1656b231cf38596d74d20687cff83a5114d3e1f0ba0ba3b84d67bf66d2","ssdeep":"","tlshash":"411186313794b12fa0a6cd83f4a769a31072ec10698eb7fae85d460cd3872471762f5c","first_seen":"2025-10-06T20:28:34.506468Z","last_seen":"2026-04-22T17:40:08.685716Z","times_seen":137,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/assets/images/sprites/sprite-common.svg","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/assets/images/sprites/sprite-common.svg HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 21 Apr 2026 16:32:16 GMT\r\netag: W/\"69e7a690-1c7ec\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: 160dbb43-6a57-4061-8363-dc1f63ed4cb2\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116716,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"279c492a9d849a4150d429f9da70b86e","sha1":"fce777c01028c59f411b4b704f4912200de1a355","sha256":"5ff9c27ed37d2a0403f78c7f8dfb2e522a3173b1a1a2ec40408d070160c2c9e5","sha512":"b499720c4d16ebc9c76cf6270356397f0d8e025ef9bcbbb49dcd303707147d154be1b3b80e8e78c5c8c35b33cc2057123c902686eba1403877cfc5aef813cf11","ssdeep":"1536:hrYK8tJZuL7sw21laTsXyBK+IFDGBK6szxb+cmKf3v1:t7sw2GIg4Fpd1","tlshash":"ffb3d8d92234639ca8c747adcf3ae9e0335f60ee71a582e4567fc7746147ac8fa06814","first_seen":"2026-04-21T20:06:55.477266Z","last_seen":"2026-04-22T17:40:08.70019Z","times_seen":19,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/js/3565.js","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:36.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /js/3565.js HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 21 Apr 2026 16:32:16 GMT\r\netag: W/\"69e7a690-955\"\r\nexpires: Thu, 22 Apr 2027 11:06:36 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: 8b3df7c0-8c2e-4a4f-81ee-d78de7d94715\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2389,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2356)","md5":"17f28cda0281a5d09779f310589a8848","sha1":"3c01c2acd6f97f8231f4048a270cf73a9f112aeb","sha256":"0c4fe7e0ead97381b5c977b3458d16d41337356b2a454b9c41ab485321eeb8dc","sha512":"1eb74ec546da361d94760edf4d7a24123f0fb6ddc2c5be30443aa34599b868c62885b1008ea0dded67362161ac401a3f87103d0001917beddad84b48e861b636","ssdeep":"","tlshash":"4841538836d5fdb51ae39155457fa24bf1392216683df004b316a8e0a87948f8172f27","first_seen":"2026-01-05T01:44:32.550902Z","last_seen":"2026-04-22T17:40:08.705865Z","times_seen":133,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/themes/sydney/assets/css/widgets/hotel/location/location_1.css?id=bce77c4cb254f51a9b1d42430637da19","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/themes/sydney/assets/css/widgets/hotel/location/location_1.css?id=bce77c4cb254f51a9b1d42430637da19 HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Apr 2026 16:38:05 GMT\r\netag: W/\"69e7a7ed-fed\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: 0c441313-f9e7-48a9-9942-d5a561e383d0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4077,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4076)","md5":"bce77c4cb254f51a9b1d42430637da19","sha1":"a523d5c06e70eb987694c790491b26887b074ad2","sha256":"10604752d402f5ffd28aaa234ec6dc8f4227bd4759ce3f59b369eb615434d5cc","sha512":"2401edfffce366be8cceacd8cf24106b4330618019b2405e17fa235c045d180dbe621fef7fa0d49ffd4e5e038966a91a4f37ad0174a76aba9a1e9a3931194c02","ssdeep":"","tlshash":"638136f3ff4004380ae35d039c91c4699337bd8adaa512e17e69e155f28835e2b22e19","first_seen":"2025-09-26T18:24:17.235626Z","last_seen":"2026-04-22T17:40:08.699677Z","times_seen":165,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/themes/sydney/assets/styles/widgets/shared/calendar/calendar_1.css?id=93b1f3fa763b04a84d5dc98c548bc618","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/themes/sydney/assets/styles/widgets/shared/calendar/calendar_1.css?id=93b1f3fa763b04a84d5dc98c548bc618 HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Apr 2026 16:38:05 GMT\r\netag: W/\"69e7a7ed-c96\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: e828b48f-5b84-41bb-9128-761b4dcfe1ac\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3222,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3221)","md5":"93b1f3fa763b04a84d5dc98c548bc618","sha1":"9d1bbab3fa1dd4d7353e00ce622c5aa86caa4d23","sha256":"4b5fdf846c51a1ae8b32cd710603a357e7125e25ae0b50ffc45e8f9bda287036","sha512":"c680f8a969972d2778849dd07b07fa0936dff4768c44a2a69672ab7736e2a20243b41e88192d57a671855b0b66aa4ca226aff954421cf4db9ef8e82f9824a0a2","ssdeep":"","tlshash":"8961e412da370028a165e97acc716a973a3b750151c27efed0c27b73d6cb28e12f8684","first_seen":"2025-10-06T20:28:34.504459Z","last_seen":"2026-04-22T17:40:08.679563Z","times_seen":137,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru/wp-content/assets/js/widgets/hotel/overview/overview_4.js?id=771935d0bdaeb961d1e7b72a3f0632f9","fqdn":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","domain":"spahotel.guru","tld":"guru"},"ip":{"addr":"52.29.26.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/","date":"2026-04-22T11:06:35.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spahotel.guru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Apr 2026 02:19:32 GMT","end":"Wed, 01 Jul 2026 02:19:31 GMT"},"fingerprint":{"sha1":"89:85:4C:65:71:78:90:3E:6D:B5:2A:B9:AF:C5:B3:2D:4A:9F:1A:DB","sha256":"1D:A3:03:C3:4D:D7:03:1E:5B:1F:CC:8F:9A:A0:72:7E:0C:C7:B7:75:C5:5D:84:98:4A:BA:DC:7E:6D:00:3C:1C"}}},"request":{"raw":"GET /wp-content/assets/js/widgets/hotel/overview/overview_4.js?id=771935d0bdaeb961d1e7b72a3f0632f9 HTTP/1.1\r\nHost: pestanaportosantopremiumallclusivebeachresort.spahotel.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pestanaportosantopremiumallclusivebeachresort.spahotel.guru/\r\nCookie: _b=1776855996.39.66390.548854|3c861b5abca4655c3a6dd5dcfc9539c6; XSRF-TOKEN=eyJpdiI6IlZBMmRXOTBIdGFycGVHNlRQZ2d4Nmc9PSIsInZhbHVlIjoiTW9pbWFpaXoxQ2VaVkdWL29xYWQwTnhEUVNSeFkrb2FOeFlGVEhxS0hPbGNNT3c4RmVlY3VRRnU2clIycGl0YzF4WDBPeXdnTWtNaHR2VDZLRTduSkF0SDd2SW1EWldlT0ltYzJjeEg1bk9SMVRDbUFCMXBJMVNNbW5tU3V5d0EiLCJtYWMiOiIxMjYzYTQ4MDQyOTBiNzg0YmM2MDAwYzcxYzhlNTE1YmE5ZmNkM2YyMjY0OWJmMTU1NDQxMjQwNDhhNjAzNjg0IiwidGFnIjoiIn0%3D; wp_session=eyJpdiI6ImN0RCtETS9lRUNWVzFVdkZWSC9hWnc9PSIsInZhbHVlIjoiNk1OMTkyT2RCL09wb1hCNVVJRHVGMWlNTmx3T3RjWGdDYUJSUnA0RUwrWG9WTStlY21JU1krb0N2c2M2YXo3U3RnUER3RzlPS2tBM1ZjMTd1bEJ5dEJNNVpEOGhPTzJndkZoN0IwazdBck92cWN0TXlXSU01NFZWcm1EOVFFUHEiLCJtYWMiOiI4NWQ4ODUxNWYyZGVlOGVhOWZhYzI3MTNhZGYzYzhlMGNiMjM5NGMzY2FkZTZhMDYzYTc1N2M3ZjVlMmY4ZmU5IiwidGFnIjoiIn0%3D; cur_id=eyJpdiI6ImxYeHhuTGJVNzhJTnZ2MGl1UUcwWWc9PSIsInZhbHVlIjoiT2tqamRIa2pZMHpnSHF1VktZOHVHZm02WVZxOGxncTJRNG5HdlJEUEs1eXVkQk1BdzhWeGRPMEFCSW0xYWtKVCIsIm1hYyI6ImRlMTFmNDc4MWUwYzc3M2JmOWFjNWIyODhjOWRmYzU5M2Y2ODQ0NGM0MzQwZjM3MmNmMGEzNTljYTBmMzEyYjkiLCJ0YWciOiIifQ%3D%3D; abt=435; _wsl=895ce494-a5f9-4878-910d-db18a0a0f98f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 11:06:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 21 Apr 2026 16:32:16 GMT\r\netag: W/\"69e7a690-13a2\"\r\nexpires: Thu, 22 Apr 2027 11:06:35 GMT\r\ncache-control: max-age=31536000\r\nx-request-id: 648c177d-5d33-4f5a-b0af-7edfa8e302fa\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5026,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4987)","md5":"771935d0bdaeb961d1e7b72a3f0632f9","sha1":"6cc5e9f61e70e43c392a779ee0c300e6ed712e93","sha256":"11f2884444290dae41023f77f721a72e9939d834481df5c3ded6a08a9084e8a6","sha512":"113d69b4f6bf89239c2b9025c579a0886c8b293d31d29908eeda55ac286f277cb1c719b0b1ee174f0c50abc31fe4832c15eb0d1354e95d0fabd8d0cbf8cec760","ssdeep":"96:29HqY4Lop+o9Hq9PZ07t1pI8jvgi7MqvBvysCmP0c79tn7:8H54LlCHSZWrEi7RBmE97","tlshash":"18a1855db391f0f542e7a0b5812f410bf234749aa08a90d0b665d8e0aef88ee4173f3d","first_seen":"2026-02-20T20:13:39.641148Z","last_seen":"2026-04-22T17:40:08.708545Z","times_seen":131,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"pestanaportosantopremiumallclusivebeachresort.spahotel.guru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}