{"report_id":"853d29ed-7fdd-4df8-aad3-ed7f3d14007a","version":0,"status":"done","tags":[],"date":"2026-09-15T18:27:17Z","url":{"schema":"http","addr":"scientiasalus.net/","fqdn":"scientiasalus.net","domain":"scientiasalus.net","tld":"net"},"ip":{"addr":"84.246.215.61","port":0,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"final":{"url":{"schema":"https","addr":"scientiasalus.net/","fqdn":"scientiasalus.net","domain":"scientiasalus.net","tld":"net"},"title":"Scientia Salus: Agencia de Marketing Cientifico","dom":{"size":29681,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6881)","md5":"bb2ee1c8a7bb341ee371002dfee3f149","sha1":"d84f9aecca30249024e69641cb1f555012c04dd2","sha256":"84c021e8a1e1de64359efe55e57a0ea2cdb8f238ad6efc34fc3fad9e0136b27e","sha512":"5062ec71c88ffda9e45e32edc400f81f091e2507ba04b2ff7083c6c675b8e8a825e5b5607883b2280a59dff2f3524b1a1a2881b611b90a98613f65f1a7fa3b30","ssdeep":"384:CXRNBH8oqoqfq+qtKhhzBKneRP495wMO6FIqvoJjF:eRNyoqoqfq+qqONoJjF","tlshash":"79d24352658c4c1e56a780b6f5507a4871baa310d202494cf7b5f0f98ac7e8f1cafb7e","dom_hash":"domhash572235a01100adc075cdd32d3a01b9fb","first_seen":"2026-09-15T18:27:19.497168Z","last_seen":"2026-09-15T18:27:19.497168Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"scientiasalus.net/","fqdn":"scientiasalus.net","domain":"scientiasalus.net","tld":"net"},"ip":{"addr":"84.246.215.61","port":0,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-20T18:27:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"scientiasalus.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"scientiasalus.net","ip":{"addr":"84.246.215.61","port":443,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"domain_registered":"2010-10-18","domain_rank":0,"first_seen":"2016-04-07T18:55:39Z","last_seen":"2026-09-15T18:20:55.525403Z","alert_count":42,"request_count":14,"received_data":448656,"sent_data":7067,"comment":"","tags":null,"fingerprints":[{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"AddThis","description":"AddThis is a social bookmarking service that can be integrated into a website with the use of a web widget.","website":"https://www.addthis.com","common_platform_enumeration":"","icon":"AddThis.svg","categories":["Widgets"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}]},{"fqdn":"player.vimeo.com","ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-12-15","domain_rank":132,"first_seen":"2013-09-26T03:16:08Z","last_seen":"2026-09-14T14:49:38.644457Z","alert_count":0,"request_count":1,"received_data":4317,"sent_data":616,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"scientiasalus.net/","fqdn":"scientiasalus.net","domain":"scientiasalus.net","tld":"net"},"ip":{"addr":"84.246.215.61","port":443,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b30f1b3ccc1d58092c9fd7eb24ceaf6","sha1":"3a600421b3d8c78be18ff1cb624b929792353071","sha256":"a1647402d881139fdadf1a08b65ea33d02e15e962949a145a13de31bf7cfc7b0","sha512":"a5d686ca6f5832bc43b01dc8ac500b8ef7eaa18990600c38a10ee539c937ba73e7aaf0614f5e90d59e2ad8682e649a352a0488bfde79ab08ce40456ce5b0a90a","ssdeep":"","tlshash":"7ea0023d66b8996508f32317547fd7387b1f74567905b445e3dd75904d18524590bc08","size":72,"data":"","first_seen":"2026-09-15T18:20:58.499244Z","last_seen":"2026-09-15T18:27:19.510073Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scientiasalus.net/","fqdn":"scientiasalus.net","domain":"scientiasalus.net","tld":"net"},"ip":{"addr":"84.246.215.61","port":443,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e4fd14a1b1bcdf514795097bf5eee50","sha1":"98ec5b6470d980c72ec14d2d23f3154c3e94cb17","sha256":"c056ac1d635abe41468895e4705f42bde9bf40af4526d94e6378e26cd4043759","sha512":"e60e01313b82d646ff6ab83ba66841d0f086ac846229880b600ae74284aad1b02cf66e4963a4269299dccf2bb014615a55b5fba113b9ef4a11161602ff468697","ssdeep":"","tlshash":"cf11e6ecf62c1744863a26a1982f01d9fb3a65117f572f4bd27414e06dbcbf5612b908","size":1013,"data":"","first_seen":"2026-09-15T18:20:58.501415Z","last_seen":"2026-09-15T18:27:19.510654Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scientiasalus.net/","fqdn":"scientiasalus.net","domain":"scientiasalus.net","tld":"net"},"ip":{"addr":"84.246.215.61","port":443,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"76bdf803e59536965a1d21a09fcca01c","sha1":"fe7a5b6a45d86099e99fe349bc0cd32e2ea82d68","sha256":"89633483e358449734fba9d522ed8ee760bacba6270f4c84b77e6feeb84140b0","sha512":"e613d876e4a89fc8884a7fcd4bb059827551471e1bc32b9c26592f5042344629fb161a883843a1fa15e6e30e3eac5ba52b59ca531d3e413bb63b624d69fe504c","ssdeep":"","tlshash":"baf0a37e4cff8eba5391de60514da69e29fe7005d0c1a552435568484adb34504673cb","size":441,"data":"","first_seen":"2026-09-15T18:20:58.503026Z","last_seen":"2026-09-15T18:27:19.511606Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/132420992?autoplay=1\u0026loop=1\u0026title=0\u0026byline=0\u0026portrait=0","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee6396dfdfca34cc0e2ffb5cbd4c6b09","sha1":"dd1619a7c472849b9e3b75f00c6aa1ef52702ebe","sha256":"4e791486a25fa07a37989309a468039b74619f5e329ce6f4be91945a40a1becf","sha512":"374213fc0e14f8be5cc7b9584449965bf048fae12c69824840b778607bb83fa8fcf009dd4c124592d9419713c0d8488d5418d9c33e134da61b9423653c40d1af","ssdeep":"","tlshash":"78d022eec03308a90062e16c7a6872433010809b9e223822f85c2c972f4c92c00aab80","size":249,"data":"","first_seen":"2026-06-07T15:43:36.370206Z","last_seen":"2026-09-15T18:27:19.51269Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scientiasalus.net/jquery/jquery-3.6.0.min.js","fqdn":"scientiasalus.net","domain":"scientiasalus.net","tld":"net"},"ip":{"addr":"84.246.215.61","port":443,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-09-15T20:51:31.038663Z","times_seen":503995,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scientiasalus.net/jquery/lightbox/jquery.lightbox.min.js","fqdn":"scientiasalus.net","domain":"scientiasalus.net","tld":"net"},"ip":{"addr":"84.246.215.61","port":443,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":false,"md5":"b54e9d3ae4742317e320478dbd5c834e","sha1":"2bea5b31f74a5207f779fdcefff15edee16dd26d","sha256":"17f9bf99afa04064b11068a40ab544fb5f2df05f37175fa37801c4ea82cfd053","sha512":"f8eeb45866af98d5597d86d87aa834e9ab6cff953016aa5671ef3d6c184e03433706e8781cc8c258e711758a9867bf2484fc1c76915c5d9ac8e9681c2f3b92dd","ssdeep":"384:h9hVt8D4Lodd+wI1JJ9NWkRlyFxBShc0pfkpupekh4PAoaoHwJ+s461:FVt8D4ux2nyqoShc0pfak1oaoHvs4S","tlshash":"e8b2a6deb360372a82eb61e3900f131c3233d6659b91616cf278f6d658e4909197bf35","size":24927,"data":"","first_seen":"2026-09-15T18:20:58.465437Z","last_seen":"2026-09-15T18:27:19.508093Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scientiasalus.net/jquery/cookie-consent.js","fqdn":"scientiasalus.net","domain":"scientiasalus.net","tld":"net"},"ip":{"addr":"84.246.215.61","port":443,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":false,"md5":"6415f0431c06ef621abd8a08f7a82023","sha1":"848be635d832e0454767b1029fee5997319696a9","sha256":"b018070ef2f10794828745545a6dd74f36a41dea7af27e25868d9888acee4edb","sha512":"5ee2617d2e3fb02fcd8352af3799957d533ee2aae6ad4c641f74f313b07f983399e46fb79ecbd1b1719f8a90b00a74f83d65e8275b59b37cea692e421526d4e1","ssdeep":"1536:0n7Ukb6oLExMsq4PH1sZctrZXhNKnyhS+2CXj/py3MYO21BpB8LrDGSTQAkTO0Fl:67Ukb6oLESsqZG0B+LpItc3DGwQ1df","tlshash":"10043a27e448583e43b341a4f981b9c571bd152ce069c95afa98e8f907c1e8b447bf3b","size":174937,"data":"","first_seen":"2026-09-15T18:20:58.468653Z","last_seen":"2026-09-15T18:27:19.499421Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"scientiasalus.net/","fqdn":"scientiasalus.net","domain":"scientiasalus.net","tld":"net"},"ip":{"addr":"84.246.215.61","port":443,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-15T18:26:44.665Z","timestamp":1789496804665,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scientiasalus.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:28:20 GMT","end":"Wed, 18 Nov 2026 06:28:19 GMT"},"fingerprint":{"sha1":"EE:C5:A7:4F:05:07:35:29:4F:B5:A7:6E:F8:1F:50:FF:DA:E9:3B:88","sha256":"56:37:A1:CB:96:54:BE:D4:76:6E:C0:96:42:58:FF:F9:8B:AA:65:D0:71:3F:12:EE:C7:C8:D1:53:28:A6:DA:1B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: scientiasalus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 18:26:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Thu, 27 Mar 1980 23:59:00 GMT\r\ncache-control: no-cache, must-revalidate\r\npragma: no-cache\r\nlast-modified: Tue, 15 Sep 2026 18:26:44 GMT\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PHP/8.0.30, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"AddThis","description":"AddThis is a social bookmarking service that can be integrated into a website with the use of a web widget.","website":"https://www.addthis.com","common_platform_enumeration":"","icon":"AddThis.svg","categories":["Widgets"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":10285,"size_decoded":3266,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (377)","md5":"dc469574d67025137c89a190b7c2fe7a","sha1":"334be30d13c4981fa63b2a12ace408092882dce4","sha256":"5039502f714f54620cb217a2940b921082a44943a4986c09d958c6eff3354b84","sha512":"a4d6f5c35f857977be098c3b640fa6cb3cad13572a2d44b68949331f19b2fbe9e11b17fbc21c546037b74d81fe93fcd508e841119976f3cadf296ba744152683","ssdeep":"96:UrsvWuMfgECe4irsYe9EeN9MVRuQacDa1+0mw9CzGA4VFJl8V9TKG4Aom9MhAoCc:kgRighOXoq6eJ5h3qAeT2736zz","tlshash":"4622c731edc61a2d86710082db225eadb2f39514d3511848e79b71bf05dafc4ad6e73c","first_seen":"2026-09-15T18:20:58.48075Z","last_seen":"2026-09-15T18:27:19.498069Z","times_seen":2,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":57,"connect":58,"send":0,"wait":78,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"scientiasalus.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scientiasalus.net/css/index.css","fqdn":"scientiasalus.net","domain":"scientiasalus.net","tld":"net"},"ip":{"addr":"84.246.215.61","port":443,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://scientiasalus.net/","date":"2026-09-15T18:26:45.141Z","timestamp":1789496805141,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scientiasalus.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:28:20 GMT","end":"Wed, 18 Nov 2026 06:28:19 GMT"},"fingerprint":{"sha1":"EE:C5:A7:4F:05:07:35:29:4F:B5:A7:6E:F8:1F:50:FF:DA:E9:3B:88","sha256":"56:37:A1:CB:96:54:BE:D4:76:6E:C0:96:42:58:FF:F9:8B:AA:65:D0:71:3F:12:EE:C7:C8:D1:53:28:A6:DA:1B"}}},"request":{"raw":"GET /css/index.css HTTP/1.1\r\nHost: scientiasalus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scientiasalus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 18:26:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 26 Oct 2021 18:33:50 GMT\r\netag: W/\"61784a0e-1a13\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":6675,"size_decoded":1640,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"aceb4c2c9fb2b95c2c7901cd4fe7b082","sha1":"f3383495eae6ffaa883f8b4c124e15c83cd72d8a","sha256":"f5df0deb98d57a86ec0fa0f9f74a5998a5d6dc647a643eb0ab566ab2aa9d32d2","sha512":"734ee76b4dbcf5aaf29c664b4afc94839ade09dd85e6b2571edeafe2ba2e5ff52d9545b1913e7e596ddee4a293e53024b51c61cd2df037a73006c05ae156d360","ssdeep":"96:v+KNhccLyTKugiLyTWuyLeVLEB+TfjOcSmkOam90mAZcst:mAVy2WySN4EATrOcSrV1Z","tlshash":"a0d1dd37ad085486b216a0a9fe11ffa7571e40627d1f0f717ad0792cc7897d42a7938c","first_seen":"2026-09-15T18:20:58.460526Z","last_seen":"2026-09-15T18:27:19.498658Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"scientiasalus.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scientiasalus.net/jquery/cookie-consent.js","fqdn":"scientiasalus.net","domain":"scientiasalus.net","tld":"net"},"ip":{"addr":"84.246.215.61","port":443,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scientiasalus.net/","date":"2026-09-15T18:26:45.147Z","timestamp":1789496805147,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scientiasalus.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:28:20 GMT","end":"Wed, 18 Nov 2026 06:28:19 GMT"},"fingerprint":{"sha1":"EE:C5:A7:4F:05:07:35:29:4F:B5:A7:6E:F8:1F:50:FF:DA:E9:3B:88","sha256":"56:37:A1:CB:96:54:BE:D4:76:6E:C0:96:42:58:FF:F9:8B:AA:65:D0:71:3F:12:EE:C7:C8:D1:53:28:A6:DA:1B"}}},"request":{"raw":"GET /jquery/cookie-consent.js HTTP/1.1\r\nHost: scientiasalus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scientiasalus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 18:26:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 Oct 2021 15:00:01 GMT\r\netag: W/\"61796971-2ab59\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":174937,"size_decoded":47110,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63581), with no line terminators","md5":"6415f0431c06ef621abd8a08f7a82023","sha1":"848be635d832e0454767b1029fee5997319696a9","sha256":"b018070ef2f10794828745545a6dd74f36a41dea7af27e25868d9888acee4edb","sha512":"5ee2617d2e3fb02fcd8352af3799957d533ee2aae6ad4c641f74f313b07f983399e46fb79ecbd1b1719f8a90b00a74f83d65e8275b59b37cea692e421526d4e1","ssdeep":"1536:0n7Ukb6oLExMsq4PH1sZctrZXhNKnyhS+2CXj/py3MYO21BpB8LrDGSTQAkTO0Fl:67Ukb6oLESsqZG0B+LpItc3DGwQ1df","tlshash":"10043a27e448583e43b341a4f981b9c571bd152ce069c95afa98e8f907c1e8b447bf3b","first_seen":"2026-09-15T18:20:58.468653Z","last_seen":"2026-09-15T18:27:19.499421Z","times_seen":2,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"scientiasalus.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scientiasalus.net/img/conocenos.png","fqdn":"scientiasalus.net","domain":"scientiasalus.net","tld":"net"},"ip":{"addr":"84.246.215.61","port":443,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scientiasalus.net/","date":"2026-09-15T18:26:45.378Z","timestamp":1789496805378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scientiasalus.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:28:20 GMT","end":"Wed, 18 Nov 2026 06:28:19 GMT"},"fingerprint":{"sha1":"EE:C5:A7:4F:05:07:35:29:4F:B5:A7:6E:F8:1F:50:FF:DA:E9:3B:88","sha256":"56:37:A1:CB:96:54:BE:D4:76:6E:C0:96:42:58:FF:F9:8B:AA:65:D0:71:3F:12:EE:C7:C8:D1:53:28:A6:DA:1B"}}},"request":{"raw":"GET /img/conocenos.png HTTP/1.1\r\nHost: scientiasalus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scientiasalus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 18:26:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 4411\r\nlast-modified: Sat, 15 Jan 2022 08:45:37 GMT\r\netag: \"61e289b1-113b\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":4411,"size_decoded":4724,"mime_type":"image/png","magic":"PNG image data, 120 x 100, 8-bit/color RGB, non-interlaced","md5":"0e81a23b7e944f8db2a7aea89d6b3ad4","sha1":"7a3bd220d0934dd0e9be07d2b4380e382a45e7d8","sha256":"058c7e6840329d54b9398f1bf4e1fd5e4b7a2e111d928a92ba374043983f90c3","sha512":"48f4b0541a1b91733ffa4d9080b6c7ed2d76cca05a239aeabb5ef00acc8ba38b0f22bc33494d0b6de8ebcea62b2af6011cb79396797ea952471b4beb53b3c7f2","ssdeep":"96:Pge2WepPEbO4luVf6scAY4CdvnCxykeexpBJlHAM:4eAPRr6sXY3NpGVeM","tlshash":"1f914c8fd680f901866cec1218fc4419a67716c48bdcda7a7d4e6502436caaa944d9eb","first_seen":"2026-09-15T18:20:58.474624Z","last_seen":"2026-09-15T18:27:19.500261Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"scientiasalus.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scientiasalus.net/jquery/lightbox/themes/jquery.lightbox.css","fqdn":"scientiasalus.net","domain":"scientiasalus.net","tld":"net"},"ip":{"addr":"84.246.215.61","port":443,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://scientiasalus.net/","date":"2026-09-15T18:26:45.144Z","timestamp":1789496805144,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scientiasalus.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:28:20 GMT","end":"Wed, 18 Nov 2026 06:28:19 GMT"},"fingerprint":{"sha1":"EE:C5:A7:4F:05:07:35:29:4F:B5:A7:6E:F8:1F:50:FF:DA:E9:3B:88","sha256":"56:37:A1:CB:96:54:BE:D4:76:6E:C0:96:42:58:FF:F9:8B:AA:65:D0:71:3F:12:EE:C7:C8:D1:53:28:A6:DA:1B"}}},"request":{"raw":"GET /jquery/lightbox/themes/jquery.lightbox.css HTTP/1.1\r\nHost: scientiasalus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scientiasalus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 18:26:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 26 Oct 2021 17:46:03 GMT\r\netag: W/\"61783edb-263a\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9786,"size_decoded":1715,"mime_type":"text/css","magic":"ASCII text","md5":"5a929f04b238f763d9fbd9216726e574","sha1":"55c624b4005f70a3554ebf5f2104b1c562fb2103","sha256":"0bc0b757c6f4f56cb747e1ce98fd77db370b366377a220e817afcf23dddb8b2f","sha512":"eec0b1d75e479f7bd704eea960605c021286358cae909960034642a2e32c64f9ad622774d58dbae98273b2745cc84e9f31b104206cc125bf15cc785b801f0ea6","ssdeep":"96:D+RO0xN4p0jjHl+KbJOEPqtn+QW0VEOnJEyckI:i40zPl+KpoW0VEwXm","tlshash":"52124cd27f645a4d35fa913be0128bfc23eca082b911b58ee694e5ad59c75b00c3fd21","first_seen":"2026-09-15T18:20:58.491466Z","last_seen":"2026-09-15T18:27:19.501059Z","times_seen":2,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"scientiasalus.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scientiasalus.net/img/revistas.png","fqdn":"scientiasalus.net","domain":"scientiasalus.net","tld":"net"},"ip":{"addr":"84.246.215.61","port":443,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scientiasalus.net/","date":"2026-09-15T18:26:45.376Z","timestamp":1789496805376,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scientiasalus.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:28:20 GMT","end":"Wed, 18 Nov 2026 06:28:19 GMT"},"fingerprint":{"sha1":"EE:C5:A7:4F:05:07:35:29:4F:B5:A7:6E:F8:1F:50:FF:DA:E9:3B:88","sha256":"56:37:A1:CB:96:54:BE:D4:76:6E:C0:96:42:58:FF:F9:8B:AA:65:D0:71:3F:12:EE:C7:C8:D1:53:28:A6:DA:1B"}}},"request":{"raw":"GET /img/revistas.png HTTP/1.1\r\nHost: scientiasalus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scientiasalus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 18:26:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 32842\r\nlast-modified: Wed, 23 May 2018 10:12:33 GMT\r\netag: \"5b053e91-804a\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":32842,"size_decoded":33156,"mime_type":"image/png","magic":"PNG image data, 199 x 100, 8-bit/color RGBA, non-interlaced","md5":"683a6d6ecef679acdc2cf72c875abd7a","sha1":"be2c6789aebb49703a558ffb104c3d89455b8106","sha256":"990f8e12541710c62df637de2fed58a4c8e8b469457abc784bcb081c722137d4","sha512":"6e9823b9e57ce7899c7d0060cfaacd60c3c5ebaaddd9603fc85e0b3a8c64e04e47568bccec6138c5fe9ea826163dd0a861e33e76cfad87c961ff7191aa2e7111","ssdeep":"768:z7P+CMPz7eD/6+ubCGjg6crE+G4wS7uJSjtH2ap1AviaEINqe5:z7P+9Pz7eD6hbCIg8+ffWaLkT5","tlshash":"d7e2f1ac9b50660fa30a590b082a477647dffc43e28a24dd9bdad7d8a21215c2d1316d","first_seen":"2026-09-15T18:20:58.47175Z","last_seen":"2026-09-15T18:27:19.501662Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"scientiasalus.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scientiasalus.net/img/fondo_virus.jpg","fqdn":"scientiasalus.net","domain":"scientiasalus.net","tld":"net"},"ip":{"addr":"84.246.215.61","port":443,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scientiasalus.net/","date":"2026-09-15T18:26:45.438Z","timestamp":1789496805438,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scientiasalus.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:28:20 GMT","end":"Wed, 18 Nov 2026 06:28:19 GMT"},"fingerprint":{"sha1":"EE:C5:A7:4F:05:07:35:29:4F:B5:A7:6E:F8:1F:50:FF:DA:E9:3B:88","sha256":"56:37:A1:CB:96:54:BE:D4:76:6E:C0:96:42:58:FF:F9:8B:AA:65:D0:71:3F:12:EE:C7:C8:D1:53:28:A6:DA:1B"}}},"request":{"raw":"GET /img/fondo_virus.jpg HTTP/1.1\r\nHost: scientiasalus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scientiasalus.net/css/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 18:26:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25461\r\nlast-modified: Wed, 23 May 2018 10:12:32 GMT\r\netag: \"5b053e90-6375\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25461,"size_decoded":25776,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 950x580, components 3","md5":"00e6b335cc2dd5fb661c23c314b57e1e","sha1":"aa6e03c0006457f7694838eddfc5c7fe86a83b16","sha256":"ec0dec09e2819a6f18c0d6c776ea8d231eacb4280e5798619a3e37f9070283a6","sha512":"ff288b72e449855e3b40033eea5f35658a284eeae83fdfceaac11a07c2939d2ee9de3810357f15f41f6360b52c79f417a720e9d5645442fbe15848f7f298005f","ssdeep":"384:Hkr6bspnqSk7wgZQZuTC5BSjeZR612noknfze9mdhpeYV5kC97A8DZIevp:HkGQpqSk7W4TCGjcoknfndsCVDZI6p","tlshash":"f1b2bf317a325aa9cf60d6b2aba3c973ca732439ab065c05bcc3530d93233fa3451947","first_seen":"2026-09-15T18:20:58.489321Z","last_seen":"2026-09-15T18:27:19.502827Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"scientiasalus.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scientiasalus.net/favicon.ico","fqdn":"scientiasalus.net","domain":"scientiasalus.net","tld":"net"},"ip":{"addr":"84.246.215.61","port":443,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scientiasalus.net/","date":"2026-09-15T18:26:45.516Z","timestamp":1789496805516,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scientiasalus.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:28:20 GMT","end":"Wed, 18 Nov 2026 06:28:19 GMT"},"fingerprint":{"sha1":"EE:C5:A7:4F:05:07:35:29:4F:B5:A7:6E:F8:1F:50:FF:DA:E9:3B:88","sha256":"56:37:A1:CB:96:54:BE:D4:76:6E:C0:96:42:58:FF:F9:8B:AA:65:D0:71:3F:12:EE:C7:C8:D1:53:28:A6:DA:1B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: scientiasalus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scientiasalus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 18:26:45 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 5686\r\nlast-modified: Wed, 23 May 2018 10:16:02 GMT\r\netag: \"5b053f62-1636\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5686,"size_decoded":6014,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 2 icons, 16x16, 8 bits/pixel, 32x32, 32 bits/pixel","md5":"5c99569295c88bd7a89a918033c8d363","sha1":"e6894cbddd8792255f62f575d68f67d6f668c8e7","sha256":"767954f9fb88cfc1ae166226b03ea12eccd184ac319a1492eb654a58bd609a0d","sha512":"e26e944bd8dc5fc6af1957096e71a5fbd47a978770a9456c6e006f08f691fa61a6e6b494535ade71f0dae692046c36a3952dc60ab1d9968e23225d1ee9f7668f","ssdeep":"48:0M7jXzSdHKXu4cw9RZWEIgyFLXRs1IrvSHWyK2iMyEQTPmR3/y:0MXDWq+4cw9aEIgksomyEmmw","tlshash":"8ec112d4cbd06330d729267a6428fe3a01273f329f33d98129747ad51b360e685065d1","first_seen":"2026-09-15T18:20:58.478217Z","last_seen":"2026-09-15T18:27:19.503408Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"scientiasalus.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scientiasalus.net/img/scientiasalus.png","fqdn":"scientiasalus.net","domain":"scientiasalus.net","tld":"net"},"ip":{"addr":"84.246.215.61","port":443,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scientiasalus.net/","date":"2026-09-15T18:26:45.381Z","timestamp":1789496805381,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scientiasalus.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:28:20 GMT","end":"Wed, 18 Nov 2026 06:28:19 GMT"},"fingerprint":{"sha1":"EE:C5:A7:4F:05:07:35:29:4F:B5:A7:6E:F8:1F:50:FF:DA:E9:3B:88","sha256":"56:37:A1:CB:96:54:BE:D4:76:6E:C0:96:42:58:FF:F9:8B:AA:65:D0:71:3F:12:EE:C7:C8:D1:53:28:A6:DA:1B"}}},"request":{"raw":"GET /img/scientiasalus.png HTTP/1.1\r\nHost: scientiasalus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scientiasalus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 18:26:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 4374\r\nlast-modified: Wed, 23 May 2018 10:12:33 GMT\r\netag: \"5b053e91-1116\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":4374,"size_decoded":4687,"mime_type":"image/png","magic":"PNG image data, 166 x 90, 8-bit colormap, non-interlaced","md5":"784e9589c37c890a0cd6036446f4805e","sha1":"a24a76cd02fd16b326efb0c8975a07e7b2aa945b","sha256":"538f5460085cdf5c67ed0136ddf6c64da1b51b6f8234f14e66dfb0718ce3ab20","sha512":"f853c035d4fdd3fae1418fffa7eb7118dc17b557b598e18c6be9fbb0d0a3a331b10d376fed26fa7afeb40b7d09f904a23f62563ff1d2ced0fa091ca7bb0a52db","ssdeep":"96:bY2IT2DuLGGlseBU/Y773/TgFkcjYacB5i:bf6KiseBPjLDHacbi","tlshash":"a7916d09f1011882dd4e5b731ae34a5f74170d8bd7d8e851ba4bb5725e303f45a509db","first_seen":"2026-09-15T18:20:58.485732Z","last_seen":"2026-09-15T18:27:19.504037Z","times_seen":2,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"scientiasalus.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/132420992?autoplay=1\u0026loop=1\u0026title=0\u0026byline=0\u0026portrait=0","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://scientiasalus.net/","date":"2026-09-15T18:26:45.433Z","timestamp":1789496805433,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 12:27:17 GMT","end":"Wed, 02 Dec 2026 13:26:58 GMT"},"fingerprint":{"sha1":"22:90:8C:24:09:75:D0:BD:92:C0:C4:CA:0A:B5:7F:01:F3:21:F3:B6","sha256":"0A:3E:75:E9:A0:0F:D6:CC:C4:12:38:DA:F7:82:0C:80:CB:BA:10:C5:03:5C:EF:D1:C9:B6:90:FE:ED:F5:4B:DC"}}},"request":{"raw":"GET /video/132420992?autoplay=1\u0026loop=1\u0026title=0\u0026byline=0\u0026portrait=0 HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scientiasalus.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Tue, 15 Sep 2026 18:26:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: a3b9ae8dcdf7b4eb-OSL\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=g2gaNYJ0dzaJ2tLf.BprhGm0250KfJysqrI1Plh.rks-1789496808.6099193-1.0.1.1-CRhyViQxJMgmQORU6pCnuzbBCSGA.t6O5h5T8MM2wfROE73THfU1AdXqbgI0QikwV7QfF.rsaAlz8ZzAK2Pf3y_dJOZ.d6dgVNMpzdyhmcZQNgd.JU9bk39xxRq2qV3I; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Tue, 15 Sep 2026 18:56:48 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer, Accept-Encoding\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-security-policy: default-src 'self'; style-src 'unsafe-inline'; script-src 'unsafe-inline'\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-5645f69c6f-w27km\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-5645f69c6f-w27km\r\nx-link-match: 105\r\nx-player-backend: g\r\nx-served-by: cache-iad-kiad7000158-IAD, cache-bma-essb1270022-BMA\r\nx-timer: S1789496809.644847,VS0,VE167\r\nx-vimeo-error: player-backend\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"g2gaNYJ0dzaJ2tLf.BprhGm0250KfJysqrI1Plh.rks-1789496808.6099193-1.0.1.1-CRhyViQxJMgmQORU6pCnuzbBCSGA.t6O5h5T8MM2wfROE73THfU1AdXqbgI0QikwV7QfF.rsaAlz8ZzAK2Pf3y_dJOZ.d6dgVNMpzdyhmcZQNgd.JU9bk39xxRq2qV3I","quoted":false,"path":"/","domain":"vimeo.com","expires":"2026-09-15T18:56:48Z","raw_expires":"Tue, 15 Sep 2026 18:56:48 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=g2gaNYJ0dzaJ2tLf.BprhGm0250KfJysqrI1Plh.rks-1789496808.6099193-1.0.1.1-CRhyViQxJMgmQORU6pCnuzbBCSGA.t6O5h5T8MM2wfROE73THfU1AdXqbgI0QikwV7QfF.rsaAlz8ZzAK2Pf3y_dJOZ.d6dgVNMpzdyhmcZQNgd.JU9bk39xxRq2qV3I; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Tue, 15 Sep 2026 18:56:48 GMT"}],"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2994,"size_decoded":2246,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"6b134c8feb2754ed913fea502eda6888","sha1":"45bb99db23deccb57570be0436f0e0936ae54462","sha256":"2b1435e91318babb19ade25b558fe9abe5beff4326947ed97ce2f13928ade940","sha512":"115057ffd86ec4083e3cba2d2fe0c1511b3a416b7399c183f127974607e819f4b4f37a262af2a31f8d3674530faa047240b2687999b9cb6af75e1bd14e2371cb","ssdeep":"","tlshash":"b1518c8f46e31045b90ba43c37fb13933025e403914add787f5cb689cf999b459a6b8c","first_seen":"2024-08-28T05:54:23Z","last_seen":"2026-09-15T18:27:19.504682Z","times_seen":509,"resource_available":false,"data":null}},"time_used":3392,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":219,"receive":0,"ssl":3166},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scientiasalus.net/jquery/lightbox/themes/images/jquery-lightbox-theme.png","fqdn":"scientiasalus.net","domain":"scientiasalus.net","tld":"net"},"ip":{"addr":"84.246.215.61","port":443,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scientiasalus.net/","date":"2026-09-15T18:26:45.550Z","timestamp":1789496805550,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scientiasalus.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:28:20 GMT","end":"Wed, 18 Nov 2026 06:28:19 GMT"},"fingerprint":{"sha1":"EE:C5:A7:4F:05:07:35:29:4F:B5:A7:6E:F8:1F:50:FF:DA:E9:3B:88","sha256":"56:37:A1:CB:96:54:BE:D4:76:6E:C0:96:42:58:FF:F9:8B:AA:65:D0:71:3F:12:EE:C7:C8:D1:53:28:A6:DA:1B"}}},"request":{"raw":"GET /jquery/lightbox/themes/images/jquery-lightbox-theme.png HTTP/1.1\r\nHost: scientiasalus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scientiasalus.net/jquery/lightbox/themes/jquery.lightbox.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 18:26:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 9289\r\nlast-modified: Tue, 26 Oct 2021 17:46:02 GMT\r\netag: \"61783eda-2449\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9289,"size_decoded":9602,"mime_type":"image/png","magic":"PNG image data, 417 x 417, 8-bit/color RGBA, non-interlaced","md5":"df8021b66cdd66db3c2b8d17b0c44525","sha1":"edb86636ae4155f758bcbb0fc958e70c554bb38f","sha256":"e06f8a52b493814162dd6a77c446b406c92ecddf45fc6f0347743e847a545036","sha512":"afcb5d2b69fe2ec966eda94f8620be2d8ad4b58309b61999a23ef700fbac149ccf836556f82b656af658e610509c9d0925c166a278608fdd2809b6795d1cffcf","ssdeep":"192:ySvMCAZvOBgrj26AG6hD+oVb/1vpy4Csnle8dFZInG+RNHqhzzL+Lhb:NvM34Bi2ZtxVb9vpywLd7gHqhzzL+Lhb","tlshash":"3f124bcaa1424dcbc033a0af6b426ad5741f16863ff62ff94a85e6de340555fc7428d8","first_seen":"2026-09-15T18:20:58.496016Z","last_seen":"2026-09-15T18:27:19.50525Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"scientiasalus.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scientiasalus.net/jquery/jquery-3.6.0.min.js","fqdn":"scientiasalus.net","domain":"scientiasalus.net","tld":"net"},"ip":{"addr":"84.246.215.61","port":443,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scientiasalus.net/","date":"2026-09-15T18:26:45.142Z","timestamp":1789496805142,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scientiasalus.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:28:20 GMT","end":"Wed, 18 Nov 2026 06:28:19 GMT"},"fingerprint":{"sha1":"EE:C5:A7:4F:05:07:35:29:4F:B5:A7:6E:F8:1F:50:FF:DA:E9:3B:88","sha256":"56:37:A1:CB:96:54:BE:D4:76:6E:C0:96:42:58:FF:F9:8B:AA:65:D0:71:3F:12:EE:C7:C8:D1:53:28:A6:DA:1B"}}},"request":{"raw":"GET /jquery/jquery-3.6.0.min.js HTTP/1.1\r\nHost: scientiasalus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scientiasalus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 18:26:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 Oct 2021 17:46:05 GMT\r\netag: W/\"61783edd-15d9d\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":89501,"size_decoded":30420,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-09-15T20:51:31.038663Z","times_seen":503995,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"scientiasalus.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scientiasalus.net/jquery/lightbox/jquery.lightbox.min.js","fqdn":"scientiasalus.net","domain":"scientiasalus.net","tld":"net"},"ip":{"addr":"84.246.215.61","port":443,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scientiasalus.net/","date":"2026-09-15T18:26:45.145Z","timestamp":1789496805145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scientiasalus.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:28:20 GMT","end":"Wed, 18 Nov 2026 06:28:19 GMT"},"fingerprint":{"sha1":"EE:C5:A7:4F:05:07:35:29:4F:B5:A7:6E:F8:1F:50:FF:DA:E9:3B:88","sha256":"56:37:A1:CB:96:54:BE:D4:76:6E:C0:96:42:58:FF:F9:8B:AA:65:D0:71:3F:12:EE:C7:C8:D1:53:28:A6:DA:1B"}}},"request":{"raw":"GET /jquery/lightbox/jquery.lightbox.min.js HTTP/1.1\r\nHost: scientiasalus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scientiasalus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 18:26:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 Oct 2021 17:46:04 GMT\r\netag: W/\"61783edc-615f\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24927,"size_decoded":7962,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24618)","md5":"b54e9d3ae4742317e320478dbd5c834e","sha1":"2bea5b31f74a5207f779fdcefff15edee16dd26d","sha256":"17f9bf99afa04064b11068a40ab544fb5f2df05f37175fa37801c4ea82cfd053","sha512":"f8eeb45866af98d5597d86d87aa834e9ab6cff953016aa5671ef3d6c184e03433706e8781cc8c258e711758a9867bf2484fc1c76915c5d9ac8e9681c2f3b92dd","ssdeep":"384:h9hVt8D4Lodd+wI1JJ9NWkRlyFxBShc0pfkpupekh4PAoaoHwJ+s461:FVt8D4ux2nyqoShc0pfak1oaoHvs4S","tlshash":"e8b2a6deb360372a82eb61e3900f131c3233d6659b91616cf278f6d658e4909197bf35","first_seen":"2026-09-15T18:20:58.465437Z","last_seen":"2026-09-15T18:27:19.508093Z","times_seen":2,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"scientiasalus.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scientiasalus.net/img/quien.png","fqdn":"scientiasalus.net","domain":"scientiasalus.net","tld":"net"},"ip":{"addr":"84.246.215.61","port":443,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scientiasalus.net/","date":"2026-09-15T18:26:45.379Z","timestamp":1789496805379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scientiasalus.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:28:20 GMT","end":"Wed, 18 Nov 2026 06:28:19 GMT"},"fingerprint":{"sha1":"EE:C5:A7:4F:05:07:35:29:4F:B5:A7:6E:F8:1F:50:FF:DA:E9:3B:88","sha256":"56:37:A1:CB:96:54:BE:D4:76:6E:C0:96:42:58:FF:F9:8B:AA:65:D0:71:3F:12:EE:C7:C8:D1:53:28:A6:DA:1B"}}},"request":{"raw":"GET /img/quien.png HTTP/1.1\r\nHost: scientiasalus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scientiasalus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 18:26:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 20637\r\nlast-modified: Sat, 15 Jan 2022 08:45:37 GMT\r\netag: \"61e289b1-509d\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":20637,"size_decoded":20951,"mime_type":"image/png","magic":"PNG image data, 249 x 120, 8-bit/color RGBA, non-interlaced","md5":"2c3fc60d1edfd3d887ab8aad492a71ca","sha1":"be7d1a8a8c183712e2330e86ebe5d3fd0ee8b2d0","sha256":"1e9d563b79276bef5a71948f109c464d1722ecb72316224c2f258a57ac96be10","sha512":"9644a03e3789931163f7f9d36da376e1bded15383c3bbb394bc18d6a378263de251d4ad2d69de33248c121c0d73ce51d54bea18c28eba89fdb3ffed44379abe0","ssdeep":"384:gXWvz1uUuFs6j6pgpXPkWNPzUugeF4o8SbwopBJ95i/TvZhTql:gXEz1zrgpXPkQzUu5H8SblD5I770","tlshash":"fd92e053fe466da562c5b0766d2094175c840c9333a7b3ca609f732fab22148a33aedc","first_seen":"2026-09-15T18:20:58.49361Z","last_seen":"2026-09-15T18:27:19.50878Z","times_seen":2,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"scientiasalus.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scientiasalus.net/img/aplicaciones.png","fqdn":"scientiasalus.net","domain":"scientiasalus.net","tld":"net"},"ip":{"addr":"84.246.215.61","port":443,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scientiasalus.net/","date":"2026-09-15T18:26:45.380Z","timestamp":1789496805380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scientiasalus.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:28:20 GMT","end":"Wed, 18 Nov 2026 06:28:19 GMT"},"fingerprint":{"sha1":"EE:C5:A7:4F:05:07:35:29:4F:B5:A7:6E:F8:1F:50:FF:DA:E9:3B:88","sha256":"56:37:A1:CB:96:54:BE:D4:76:6E:C0:96:42:58:FF:F9:8B:AA:65:D0:71:3F:12:EE:C7:C8:D1:53:28:A6:DA:1B"}}},"request":{"raw":"GET /img/aplicaciones.png HTTP/1.1\r\nHost: scientiasalus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://scientiasalus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 18:26:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 25422\r\nlast-modified: Wed, 23 May 2018 10:12:31 GMT\r\netag: \"5b053e8f-634e\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":25422,"size_decoded":25736,"mime_type":"image/png","magic":"PNG image data, 144 x 120, 8-bit/color RGBA, non-interlaced","md5":"9420f91c15cb4d59754c03deae8e6fc1","sha1":"1c9f9dc08591181039a92fcb539b8d541c462115","sha256":"523ff9e7e4a81f8ba4ea0335712d7609dcf9146c043800f9bf61ee357cfff2e6","sha512":"4dafdc7125ca1e190e5d081ff07e5aa536c5fd79e8fec0602798c5e50809923e523f044ab59eeefca56abdeab216a19cbce8309f2f44277ac45b48afafecd942","ssdeep":"768:Uc1lh/BO9lxcuqAzCCmHsZImkhE8Drz8g1K:Ucts9XdqAzKHzmGEhgw","tlshash":"1ab2d11bbe52b8827c820a4bc4f2647bc7017401dab712564fed776eac721a58f6258f","first_seen":"2026-09-15T18:20:58.483506Z","last_seen":"2026-09-15T18:27:19.509459Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"scientiasalus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"scientiasalus.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}
